last executing test programs: 4.563083938s ago: executing program 0 (id=246): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000001400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}}, 0x0) 4.459470227s ago: executing program 0 (id=251): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 4.380162864s ago: executing program 1 (id=256): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) shutdown(r0, 0x1) recvfrom$l2tp(r0, 0x0, 0x0, 0x180, 0x0, 0x0) 4.348069266s ago: executing program 1 (id=257): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) syz_clone(0x63008000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.29774882s ago: executing program 0 (id=261): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578aa"], 0x56) 956.53617ms ago: executing program 1 (id=262): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000002ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001b00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x400020e2, 0x0) 927.955232ms ago: executing program 0 (id=264): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32], 0x44}}, 0x0) 655.494165ms ago: executing program 0 (id=274): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x2, 0x1, 0x1}}}}]}, 0x44}}, 0xc4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 633.440547ms ago: executing program 0 (id=275): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000040)=""/247, 0x1a, 0xf7, 0x1, 0x0, 0x0, @void, @value}, 0x28) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 570.596322ms ago: executing program 3 (id=279): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="330300000000000000001c0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 518.751336ms ago: executing program 3 (id=282): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x798, &(0x7f0000002380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000040)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nouid32}, {@noblock_validity}, {@barrier}, {@data_writeback}]}, 0x1, 0x63e, &(0x7f0000000280)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 397.114207ms ago: executing program 2 (id=289): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000003440)=[{{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000004c0)="f0d6b822992ab95dfe18409c2dddc7c8f5c8df0d6b4fd091da6bcabdb948340e8c2118cac4aec39ae056b9fe0d5d6acbbf25e4e8fc4aad9263e11bb6529305c9456069b2619cbad69ca87626da8f6fd69eace0f37015cdd1bf623fa70d648015cd541cccfaa9ce120ed6e9945a24e916ec8b08661f12e9107076319b90", 0x7d}, {&(0x7f0000000340)="8e93287e6e3a2d763a2f2b567727ce24286510f5d589312c933725c606ebd6a0e099dd1c09941b263806e9057fa01d0d0b37e4a64b455b0dcb1627fffd8c831cbca0a4220425d911f55c28daca9c548c9ca0284e72b8ca5c5f65", 0x5a}, {&(0x7f0000000140)="f9eac6d9bca2f49a904a54a828c8f9c0ac08cd380dc8fb1035690cceaf102ec3b2ffbf0afa4f22bf53000b75e6474b", 0x2f}, {&(0x7f0000000580)="8a9d7ad9a3be5bfdabba9e9bb095b05277d2116f7c70b4b308709079d53a74", 0x1f}, {&(0x7f0000000600)="6415b8316f9637eab3675a86622292cd4480c5ab60", 0x15}], 0x5}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000180)="0239e50417c7c545ba68694d22556a1852e485", 0x13, 0x4000800, 0x0, 0x0) 332.965202ms ago: executing program 2 (id=290): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000000)={0xe9e1, [0x9, 0x8], 0x1}, 0x10) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000000000e79bbf7900000000005f2e60f82738e33a1f2ba53d15bbb8aedb059b2a8f8c14613b7edfded98da7a3244c4b79f4476b37e36d32ac934cbb8270a0c7cbce837982e694c0303355f7b542189b61a3969249b45747749f8cbe9cb0fec361d642492f4612932acb9e8519535f76eeccbaa037f5543f04bf5e938fecc97643689e5d2854853cb93db2dedaba7759eea400000000000000067b000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) recvmmsg(r0, &(0x7f00000036c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/4, 0x4}, 0xe}, {{0x0, 0x0, 0x0}, 0x5}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) 313.412124ms ago: executing program 3 (id=292): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_pidfd_open(0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) ppoll(&(0x7f00000000c0)=[{r1}], 0x1, 0x0, 0x0, 0x0) 302.783175ms ago: executing program 4 (id=293): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 279.063437ms ago: executing program 4 (id=294): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) readv(r1, &(0x7f0000002140)=[{&(0x7f00000010c0)=""/29, 0x1d}], 0x1) ioctl$EVIOCGABS20(r1, 0x40044591, 0x0) 259.972048ms ago: executing program 2 (id=295): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000010000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000200)={0x18, 0x0, {0x22, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, 'veth0\x00'}}, 0x1e) close_range(r1, r2, 0x0) 246.714489ms ago: executing program 3 (id=296): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 234.399971ms ago: executing program 3 (id=297): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 229.238191ms ago: executing program 2 (id=298): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x54d, &(0x7f0000000400)="$eJzs3U1rG0cfAPD/ynLenycOhEB7KIYcmpJGju2+pNBDeixtaKC9p8LemGApCpYcYjfQ5NBceimhUEoDpR+g9x5Dv0A/RaANhBJMe+hFZeWVo8SSrThKrFS/H6w9s7vy7Gj2P57RSCiAkTWZ/ShEvBIR3yQRhzuOFSM/OLl+3trD63PZlkSz+emfSST5vvb5Sf77YDtTjPj1q4iThc3l1ldWF8uVSrqU56ca1StT9ZXVU5eq5YV0Ib08Mzt75u3ZmffefWdgdX3j/N/ff3L3wzNfH1/77uf7R24ncTYO5cc66/EMbnRmJmMyf07G4+wTJ04PoLBhkuz2BbAjY3mcj0fWBxyOsTzqgf++LyOiCYyoRPzDiGqPA9pz+wHNg18aDz5YnwBtrn9x/bWR2NeaGx1YSx6bGWXz3YkBlJ+V8csfd25nWwzudQiAbd24GRGni8XN/V+S9387d7qPc54sQ/8HL87dbPzzZrfxT2Fj/BNdxj8Hu8TuTmwf/4X7Ayimp2z8937X8e/GotXEWJ77X2vMN55cvFRJs77t/xFxIsb3Zvmt1nPOrN1r9jrWOf7Ltqz89lgwv477xb2PP2a+3Cg/S507PbgZ8WrX8W+y0f5Jl/bPno/zfZZxLL3zWq9j29f/+Wr+FPF61/Z/tKKVbL0+OdW6H6bad8Vmf9069luv8ne7/ln7H9i6/hNJ53pt/enL+HHfP2mvYzu9//ckn7XSe/J918qNxtJ0xJ7k4837Zx49tp1vn5/V/8Txrfu/bvf//oj4vM/63zp6q+epw9D+80/V/k+fuPfRFz/0Kr+/9n+rlTqR7+mn/+v3Ap/luQMAAAAAAIBhU4iIQ5EUShvpQqFUWn9/x9E4UKjU6o2TF2vLl+ej9VnZiRgvtFe6D3e8H2I6fz9sOz/zRH42Io5ExLdj+1v50lytMr/blQcAAAAAAAAAAAAAAAAAAIAhcbDH5/8zv4/t9tUBz52v/IbRtW38D+KbnoCh5P8/jC7xD6NL/MPoEv8wusQ/jC7xD6NL/MPoEv8AAAAAAAAAAAAAAAAAAAAAAAAAAAAwUOfPncu25trD63NZfv7qyvJi7eqp+bS+WKouz5XmaktXSgu12kIlLc3Vqtv9vUqtdmV6JpavTTXSemOqvrJ6oVpbvty4cKlaXkgvpOMvpFYAAAAAAAAAAAAAAAAAAADwcqmvrC6WK5V0SUJiR4nicFyGxIATu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAj/wYAAP//Gis4ow==") chdir(&(0x7f0000000280)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r0 = open(&(0x7f0000000900)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, &(0x7f0000000180)=""/108, 0x6c) 181.469435ms ago: executing program 4 (id=299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) creat(&(0x7f0000000000)='./file0/file0\x00', 0x0) unlink(&(0x7f0000000080)='./file0/file0\x00') 159.912417ms ago: executing program 4 (id=300): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 138.364468ms ago: executing program 2 (id=301): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) set_mempolicy(0x4, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', '', [], 0xa, "5af16b0675f865918864"}, 0xe) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 116.61842ms ago: executing program 4 (id=302): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x0) 104.718932ms ago: executing program 3 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 70.951134ms ago: executing program 1 (id=304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "69dcaf20127e9a854528f45826cb35be51ca73845d177dd8dba7221daeccfda56b75cfe286fdd14cb5b11b1cab614fec2236da7d88ea0f0700"}, 0x48, 0xfffffffffffffffe) keyctl$search(0xa, r2, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0) 59.932675ms ago: executing program 4 (id=305): getresgid(&(0x7f0000000c40), &(0x7f0000000140), &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r0, @ANYBLOB="00006b746769643d0092", @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) acct(&(0x7f0000000040)='./file0\x00') acct(0x0) acct(0x0) 45.790677ms ago: executing program 2 (id=306): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_read_part_table(0x5dc, &(0x7f0000000000)="$eJzs2z9o1GcYB/DnoteADi5OTuogpbgojh5F5e5UFMJpliJFQRHxphOEkx6k6KA3GHJDSLcsaeCW/JlyuSFTQgKZQ8iQEsiQpSVZAlly5dK3Q6FDr00KpZ8PBw/ve8/7ft8X3vUX/Kf1xS+dTicTEZ3+iFM9rh5s5gv3Lg7cKj2OyMSTiPj2hy9/7P6TSR3dXbsup/FmGk+Mn2l/2rubbW482r/ydLHe9/uWQ0e/ODvZGjyG63HCpnJL595/qBQ/V3Ov1ou17Y9rqw+nd/Ol1oN6Y+Z+9s7z1Lec6ulU30Q13sXreBbl+D5eROWY8seaW9cOLxSbcy9vHhTawwvXj7p6fde95R892Ijo5r+9NPJNo3b76uz50RvV+ZXSToou95/YEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEbZWDr3/kOl+Lmae7VerG1/XFt9OL2bL7Ue1Bsz97N3nqe+5VRPp/omqvEuXsezKEc5XkTlb+ZP5f6YP9bcunZ4odice3nzoNAeXrie+gb+4T3/Qn6nm//20sjXjdrtq7PnR29U51dKO6d+6yv3/9nqL07oVAAAAAAAAAAAAAAAAAAAAPzf5Av3Lg7cKj2OyMSTiPjq5+/6uvOd9L17JvVdTnUzzU+Mn2l/2rubbW482r/ydLH+U5ofikwMRcTZydbgv34ZevZrAAAA///YkpIV") 28.493518ms ago: executing program 1 (id=307): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001ac0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000400)='1', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001080)='c', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000700)="ac", 0x1}], 0x1}}], 0x3, 0x0) syz_emit_ethernet(0xa1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 0s ago: executing program 1 (id=308): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rss_stat\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) kernel console output (not intermixed with test programs): [ 19.304107][ T29] audit: type=1400 audit(1729478006.571:81): avc: denied { read } for pid=2952 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. [ 24.085627][ T29] audit: type=1400 audit(1729478011.351:82): avc: denied { mounton } for pid=3258 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.086667][ T3258] cgroup: Unknown subsys name 'net' [ 24.108430][ T29] audit: type=1400 audit(1729478011.351:83): avc: denied { mount } for pid=3258 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.135964][ T29] audit: type=1400 audit(1729478011.381:84): avc: denied { unmount } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.288206][ T3258] cgroup: Unknown subsys name 'cpuset' [ 24.294270][ T3258] cgroup: Unknown subsys name 'rlimit' [ 24.461027][ T29] audit: type=1400 audit(1729478011.731:85): avc: denied { setattr } for pid=3258 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.486104][ T29] audit: type=1400 audit(1729478011.731:86): avc: denied { create } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.493620][ T3261] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.506554][ T29] audit: type=1400 audit(1729478011.731:87): avc: denied { write } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.535492][ T29] audit: type=1400 audit(1729478011.731:88): avc: denied { read } for pid=3258 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.552084][ T3258] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.556032][ T29] audit: type=1400 audit(1729478011.731:89): avc: denied { mounton } for pid=3258 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.589791][ T29] audit: type=1400 audit(1729478011.731:90): avc: denied { mount } for pid=3258 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.613183][ T29] audit: type=1400 audit(1729478011.791:91): avc: denied { relabelto } for pid=3261 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.246699][ T3277] chnl_net:caif_netlink_parms(): no params data found [ 26.266224][ T3268] chnl_net:caif_netlink_parms(): no params data found [ 26.364289][ T3269] chnl_net:caif_netlink_parms(): no params data found [ 26.382714][ T3273] chnl_net:caif_netlink_parms(): no params data found [ 26.400186][ T3268] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.407334][ T3268] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.414560][ T3268] bridge_slave_0: entered allmulticast mode [ 26.420992][ T3268] bridge_slave_0: entered promiscuous mode [ 26.427668][ T3277] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.434769][ T3277] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.442031][ T3277] bridge_slave_0: entered allmulticast mode [ 26.448331][ T3277] bridge_slave_0: entered promiscuous mode [ 26.466043][ T3268] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.473174][ T3268] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.480570][ T3268] bridge_slave_1: entered allmulticast mode [ 26.486849][ T3268] bridge_slave_1: entered promiscuous mode [ 26.493076][ T3277] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.500178][ T3277] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.507481][ T3277] bridge_slave_1: entered allmulticast mode [ 26.513843][ T3277] bridge_slave_1: entered promiscuous mode [ 26.539613][ T3279] chnl_net:caif_netlink_parms(): no params data found [ 26.576746][ T3268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.587096][ T3277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.597146][ T3268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.615259][ T3269] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.622375][ T3269] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.629629][ T3269] bridge_slave_0: entered allmulticast mode [ 26.636315][ T3269] bridge_slave_0: entered promiscuous mode [ 26.648366][ T3277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.664288][ T3269] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.671452][ T3269] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.678611][ T3269] bridge_slave_1: entered allmulticast mode [ 26.685181][ T3269] bridge_slave_1: entered promiscuous mode [ 26.700004][ T3273] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.707064][ T3273] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.714220][ T3273] bridge_slave_0: entered allmulticast mode [ 26.720715][ T3273] bridge_slave_0: entered promiscuous mode [ 26.735035][ T3268] team0: Port device team_slave_0 added [ 26.744935][ T3273] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.752055][ T3273] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.759169][ T3273] bridge_slave_1: entered allmulticast mode [ 26.765564][ T3273] bridge_slave_1: entered promiscuous mode [ 26.784414][ T3268] team0: Port device team_slave_1 added [ 26.790919][ T3277] team0: Port device team_slave_0 added [ 26.802017][ T3273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.815315][ T3279] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.822450][ T3279] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.829693][ T3279] bridge_slave_0: entered allmulticast mode [ 26.836023][ T3279] bridge_slave_0: entered promiscuous mode [ 26.843430][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.852561][ T3279] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.859662][ T3279] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.866816][ T3279] bridge_slave_1: entered allmulticast mode [ 26.873387][ T3279] bridge_slave_1: entered promiscuous mode [ 26.884904][ T3277] team0: Port device team_slave_1 added [ 26.892272][ T3273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.907425][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.925915][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.932956][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.959220][ T3268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.978484][ T3273] team0: Port device team_slave_0 added [ 26.992881][ T3268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.999934][ T3268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.026003][ T3268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.041700][ T3277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.048810][ T3277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.074845][ T3277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.086121][ T3273] team0: Port device team_slave_1 added [ 27.101500][ T3279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.111145][ T3269] team0: Port device team_slave_0 added [ 27.119567][ T3277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.126591][ T3277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.152803][ T3277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.168583][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.175631][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.201638][ T3273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.213123][ T3269] team0: Port device team_slave_1 added [ 27.224408][ T3279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.240884][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.247863][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.273854][ T3273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.289617][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.296578][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.322556][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.350260][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.357218][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.383372][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.406290][ T3268] hsr_slave_0: entered promiscuous mode [ 27.412958][ T3268] hsr_slave_1: entered promiscuous mode [ 27.431240][ T3279] team0: Port device team_slave_0 added [ 27.450848][ T3273] hsr_slave_0: entered promiscuous mode [ 27.456955][ T3273] hsr_slave_1: entered promiscuous mode [ 27.462829][ T3273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.470686][ T3273] Cannot create hsr debugfs directory [ 27.476927][ T3279] team0: Port device team_slave_1 added [ 27.488930][ T3269] hsr_slave_0: entered promiscuous mode [ 27.494967][ T3269] hsr_slave_1: entered promiscuous mode [ 27.501071][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.508961][ T3269] Cannot create hsr debugfs directory [ 27.516290][ T3277] hsr_slave_0: entered promiscuous mode [ 27.522419][ T3277] hsr_slave_1: entered promiscuous mode [ 27.528355][ T3277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.535902][ T3277] Cannot create hsr debugfs directory [ 27.558064][ T3279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.565023][ T3279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.590998][ T3279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.619648][ T3279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.626961][ T3279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.652975][ T3279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.703856][ T3279] hsr_slave_0: entered promiscuous mode [ 27.710179][ T3279] hsr_slave_1: entered promiscuous mode [ 27.715976][ T3279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.723576][ T3279] Cannot create hsr debugfs directory [ 27.860344][ T3268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 27.875415][ T3268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 27.885434][ T3268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 27.896777][ T3268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 27.909480][ T3273] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 27.918407][ T3273] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 27.928062][ T3273] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 27.938312][ T3273] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 27.959218][ T3269] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.969549][ T3269] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.982380][ T3269] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.991362][ T3269] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.013372][ T3277] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.022706][ T3277] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.031810][ T3277] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.040663][ T3277] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.082301][ T3279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.097949][ T3279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.106614][ T3279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.116077][ T3279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.138468][ T3273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.153231][ T3273] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.169707][ T3268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.183773][ T2287] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.190965][ T2287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.201494][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.208652][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.234920][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.258582][ T3268] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.277231][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.290786][ T3273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.304166][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.311349][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.320100][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.327224][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.338284][ T2287] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.345360][ T2287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.358265][ T2287] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.365338][ T2287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.377013][ T3277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.401133][ T3277] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.415275][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.422395][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.431441][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.438616][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.457563][ T3268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.468016][ T3268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.493413][ T3269] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.503888][ T3269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.535978][ T3279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.549484][ T3273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.562181][ T3279] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.586737][ T2287] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.593837][ T2287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.602412][ T2287] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.609629][ T2287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.632593][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.694169][ T3268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.719637][ T3277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.793673][ T3273] veth0_vlan: entered promiscuous mode [ 28.817556][ T3279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.829327][ T3273] veth1_vlan: entered promiscuous mode [ 28.847021][ T3269] veth0_vlan: entered promiscuous mode [ 28.871557][ T3269] veth1_vlan: entered promiscuous mode [ 28.880145][ T3277] veth0_vlan: entered promiscuous mode [ 28.894227][ T3277] veth1_vlan: entered promiscuous mode [ 28.912832][ T3269] veth0_macvtap: entered promiscuous mode [ 28.925123][ T3269] veth1_macvtap: entered promiscuous mode [ 28.934161][ T3273] veth0_macvtap: entered promiscuous mode [ 28.947043][ T3273] veth1_macvtap: entered promiscuous mode [ 28.976768][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.984620][ T3277] veth0_macvtap: entered promiscuous mode [ 28.992266][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.002980][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.014549][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.029583][ T3277] veth1_macvtap: entered promiscuous mode [ 29.040296][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.049162][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.059690][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.070832][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.078908][ T3268] veth0_vlan: entered promiscuous mode [ 29.095051][ T3273] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.103922][ T3273] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.112932][ T3273] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.121746][ T3273] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.135677][ T3269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.144605][ T3269] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.153746][ T3269] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.162510][ T3269] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.173450][ T3279] veth0_vlan: entered promiscuous mode [ 29.184229][ T3279] veth1_vlan: entered promiscuous mode [ 29.191070][ T3277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.201551][ T3277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.211469][ T3277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.222082][ T3277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.232838][ T3277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.240793][ T3268] veth1_vlan: entered promiscuous mode [ 29.256045][ T3277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.266649][ T3277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.276517][ T3277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.286949][ T3277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.297904][ T3277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.312777][ T3277] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.321642][ T3277] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.330398][ T3277] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.339308][ T3277] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.349133][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 29.349146][ T29] audit: type=1400 audit(1729478016.611:110): avc: denied { mounton } for pid=3269 comm="syz-executor" path="/root/syzkaller.Mt2XOI/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.379621][ T29] audit: type=1400 audit(1729478016.621:111): avc: denied { mount } for pid=3269 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.401735][ T29] audit: type=1400 audit(1729478016.621:112): avc: denied { mounton } for pid=3269 comm="syz-executor" path="/root/syzkaller.Mt2XOI/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.427246][ T29] audit: type=1400 audit(1729478016.621:113): avc: denied { mount } for pid=3269 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.449250][ T29] audit: type=1400 audit(1729478016.621:114): avc: denied { mounton } for pid=3269 comm="syz-executor" path="/root/syzkaller.Mt2XOI/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.476089][ T29] audit: type=1400 audit(1729478016.621:115): avc: denied { mounton } for pid=3269 comm="syz-executor" path="/root/syzkaller.Mt2XOI/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.503654][ T29] audit: type=1400 audit(1729478016.621:116): avc: denied { unmount } for pid=3269 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.524225][ T29] audit: type=1400 audit(1729478016.621:117): avc: denied { mounton } for pid=3269 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.533722][ T3268] veth0_macvtap: entered promiscuous mode [ 29.554282][ T3269] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.561820][ T3279] veth0_macvtap: entered promiscuous mode [ 29.583924][ T3268] veth1_macvtap: entered promiscuous mode [ 29.591195][ T29] audit: type=1400 audit(1729478016.851:118): avc: denied { read write } for pid=3269 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.615447][ T29] audit: type=1400 audit(1729478016.851:119): avc: denied { open } for pid=3269 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.641165][ T3279] veth1_macvtap: entered promiscuous mode [ 29.654347][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.664866][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.674830][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.685458][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.695700][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.706266][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.719632][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.732900][ T3410] loop1: detected capacity change from 0 to 164 [ 29.742045][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.752722][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.762680][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.773261][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.783169][ T3268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.793769][ T3268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.804630][ T3410] Unable to read rock-ridge attributes [ 29.812602][ T3268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.836679][ T3279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.847177][ T3279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.857204][ T3279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.867667][ T3279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.877750][ T3279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.888239][ T3279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.898073][ T3279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.908571][ T3279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.931007][ T3410] Unable to read rock-ridge attributes [ 29.932088][ T3279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.945125][ T3268] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.946824][ T3410] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 29.954063][ T3268] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.970368][ T3268] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.979222][ T3268] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.007007][ T3279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.017571][ T3279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.027568][ T3279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.037995][ T3279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.047809][ T3279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.058226][ T3279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.068084][ T3279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.078736][ T3279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.090114][ T3279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.117037][ T3279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.125875][ T3279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.134670][ T3279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.143612][ T3279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.154373][ T3418] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8'. [ 30.164240][ T3422] Invalid ELF header magic: != ELF [ 30.170293][ T3418] netlink: 108 bytes leftover after parsing attributes in process `syz.3.8'. [ 30.179130][ T3418] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8'. [ 30.297549][ T3434] netlink: 72 bytes leftover after parsing attributes in process `syz.2.10'. [ 30.346297][ T3432] syz.1.13 (3432) used greatest stack depth: 10128 bytes left [ 30.533094][ T3478] loop0: detected capacity change from 0 to 512 [ 30.540196][ T3478] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.553459][ T3478] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 30.565047][ T3478] EXT4-fs (loop0): 1 truncate cleaned up [ 30.571840][ T3478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.588808][ T3478] syz.0.31[3478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.588866][ T3478] syz.0.31[3478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.600353][ T3478] syz.0.31[3478] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.626605][ T3279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.642617][ T3426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.671326][ T3426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.680119][ T3488] netlink: 'syz.0.32': attribute type 3 has an invalid length. [ 30.687895][ T3488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 30.825746][ T3502] loop2: detected capacity change from 0 to 1024 [ 30.834210][ T3502] EXT4-fs: Ignoring removed orlov option [ 30.840112][ T3502] EXT4-fs: Ignoring removed nomblk_io_submit option [ 30.875152][ T3502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.927447][ T3502] loop2: detected capacity change from 1024 to 64 [ 30.943883][ T3277] EXT4-fs warning (device loop2): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 30.958138][ T3277] EXT4-fs warning (device loop2): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 30.971788][ T3277] EXT4-fs warning (device loop2): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 30.985618][ T3277] EXT4-fs warning (device loop2): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 30.999821][ T3277] EXT4-fs warning (device loop2): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 31.013362][ T3277] EXT4-fs warning (device loop2): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 31.027070][ T3277] EXT4-fs warning (device loop2): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 31.040772][ T3277] EXT4-fs warning (device loop2): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 31.054374][ T3277] EXT4-fs warning (device loop2): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 31.068015][ T3277] EXT4-fs warning (device loop2): ext4_empty_dir:3090: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 31.388589][ T3528] netlink: 'syz.4.52': attribute type 6 has an invalid length. [ 31.498445][ T3538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.508034][ T3538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.517154][ T3538] netlink: 80 bytes leftover after parsing attributes in process `syz.1.57'. [ 31.529581][ T3538] netlink: 80 bytes leftover after parsing attributes in process `syz.1.57'. [ 31.874782][ T3570] syz_tun: refused to change device tx_queue_len [ 31.881268][ T3570] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 31.945883][ T3578] loop4: detected capacity change from 0 to 1764 [ 31.979715][ T3581] netlink: 12 bytes leftover after parsing attributes in process `syz.4.77'. [ 32.068574][ T3277] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.070958][ T3589] mmap: syz.1.81 (3589) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 32.091909][ T3503] kmmpd-loop2: attempt to access beyond end of device [ 32.091909][ T3503] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 32.105485][ T3503] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 32.120930][ T243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.257178][ T3612] loop3: detected capacity change from 0 to 512 [ 32.293788][ T3612] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.300456][ T3612] EXT4-fs: test_dummy_encryption option not supported [ 32.335200][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 32.346507][ T3624] loop4: detected capacity change from 0 to 512 [ 32.355115][ T3624] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 32.367788][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 32.383152][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 32.393724][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 32.399401][ T3624] EXT4-fs (loop4): 1 truncate cleaned up [ 32.403983][ T3630] loop1: detected capacity change from 0 to 1024 [ 32.406300][ T3624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.413608][ T3630] EXT4-fs: Ignoring removed oldalloc option [ 32.425213][ C1] dccp_v4_rcv: dropped packet with invalid checksum [ 32.439528][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 32.446414][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 32.453496][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 32.457976][ T3624] 9pnet_fd: Insufficient options for proto=fd [ 32.460361][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 32.487637][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.498369][ T3630] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 32.528728][ T243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.553741][ T3630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.610129][ T243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.646094][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.677714][ T3599] chnl_net:caif_netlink_parms(): no params data found [ 32.691573][ T243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.772183][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.779390][ T3599] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.786738][ T3599] bridge_slave_0: entered allmulticast mode [ 32.793493][ T3599] bridge_slave_0: entered promiscuous mode [ 32.800695][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.807886][ T3599] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.815043][ T3599] bridge_slave_1: entered allmulticast mode [ 32.821734][ T3599] bridge_slave_1: entered promiscuous mode [ 32.842051][ T3599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.858678][ T3599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.915686][ T3599] team0: Port device team_slave_0 added [ 32.923035][ T3599] team0: Port device team_slave_1 added [ 32.928993][ T243] bridge_slave_1: left allmulticast mode [ 32.934662][ T243] bridge_slave_1: left promiscuous mode [ 32.940380][ T243] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.956331][ T243] bridge_slave_0: left allmulticast mode [ 32.962156][ T243] bridge_slave_0: left promiscuous mode [ 32.967919][ T243] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.008491][ T3703] syz.0.119[3703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.008563][ T3703] syz.0.119[3703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.020334][ T3703] syz.0.119[3703] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.078882][ T3714] loop0: detected capacity change from 0 to 1024 [ 33.100554][ T3714] EXT4-fs: Ignoring removed orlov option [ 33.106579][ T3714] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.114359][ T243] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 33.125749][ T243] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 33.137039][ T3714] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842e018, mo2=0002] [ 33.143793][ T243] bond0 (unregistering): Released all slaves [ 33.145595][ T3714] System zones: 0-1, 3-12 [ 33.156043][ T3714] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.203553][ T3279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.219653][ T3599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.226644][ T3599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.252882][ T3599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.274728][ T3599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.281760][ T3599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.307879][ T3599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.364652][ T3746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.370643][ T3749] loop1: detected capacity change from 0 to 128 [ 33.383367][ T3746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.399345][ T243] hsr_slave_0: left promiscuous mode [ 33.411199][ T243] hsr_slave_1: left promiscuous mode [ 33.420113][ T243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.427817][ T243] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.450106][ T243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.457638][ T243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.470153][ T243] veth1_macvtap: left promiscuous mode [ 33.476028][ T243] veth0_macvtap: left promiscuous mode [ 33.481729][ T243] veth1_vlan: left promiscuous mode [ 33.487021][ T243] veth0_vlan: left promiscuous mode [ 33.637954][ T3807] 9pnet_fd: Insufficient options for proto=fd [ 33.758823][ T3831] loop4: detected capacity change from 0 to 512 [ 33.768108][ T243] team0 (unregistering): Port device team_slave_1 removed [ 33.779148][ T243] team0 (unregistering): Port device team_slave_0 removed [ 33.811485][ T3831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.831570][ T3831] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 33.894696][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.905943][ T3844] vhci_hcd: SetHubDepth req not supported for USB 2.0 roothub [ 33.918407][ T3599] hsr_slave_0: entered promiscuous mode [ 33.924889][ T3599] hsr_slave_1: entered promiscuous mode [ 33.941548][ T3599] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.950965][ T985] kernel write not supported for file /sg0 (pid: 985 comm: kworker/1:2) [ 33.952599][ T3599] Cannot create hsr debugfs directory [ 34.116244][ T3863] netlink: 28 bytes leftover after parsing attributes in process `+}[@'. [ 34.120333][ T3870] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.168042][ T3867] process 'syz.4.146' launched './file1' with NULL argv: empty string added [ 34.181637][ T3876] loop3: detected capacity change from 0 to 512 [ 34.200627][ T3876] EXT4-fs: Ignoring removed nobh option [ 34.206318][ T3876] EXT4-fs: quotafile must be on filesystem root [ 34.287252][ T3892] atomic_op ffff888114e73128 conn xmit_atomic 0000000000000000 [ 34.371295][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 34.371310][ T29] audit: type=1400 audit(1729478021.641:344): avc: denied { write } for pid=3899 comm="syz.0.156" name="kcm" dev="proc" ino=4026532866 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 34.440025][ T29] audit: type=1326 audit(1729478021.641:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc84bfdff9 code=0x7ffc0000 [ 34.462923][ T29] audit: type=1326 audit(1729478021.641:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc84bfdff9 code=0x7ffc0000 [ 34.485781][ T29] audit: type=1326 audit(1729478021.641:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc84bfdff9 code=0x7ffc0000 [ 34.509126][ T29] audit: type=1326 audit(1729478021.671:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc84bfdff9 code=0x7ffc0000 [ 34.532480][ T29] audit: type=1326 audit(1729478021.671:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc84bfdff9 code=0x7ffc0000 [ 34.555432][ T29] audit: type=1326 audit(1729478021.671:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fcc84bfdff9 code=0x7ffc0000 [ 34.565191][ T3913] loop4: detected capacity change from 0 to 512 [ 34.578960][ T29] audit: type=1326 audit(1729478021.671:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc84bfdff9 code=0x7ffc0000 [ 34.589005][ T3913] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.607263][ T29] audit: type=1326 audit(1729478021.671:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc84bfdff9 code=0x7ffc0000 [ 34.642091][ T3913] EXT4-fs (loop4): 1 orphan inode deleted [ 34.647937][ T3913] EXT4-fs (loop4): 1 truncate cleaned up [ 34.654270][ T3913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.670500][ T3911] sit0: entered allmulticast mode [ 34.678333][ T3913] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 34.707933][ T3916] bond1: entered promiscuous mode [ 34.713077][ T3916] bond1: entered allmulticast mode [ 34.720780][ T3916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.751446][ T3268] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.775720][ T3916] bond1 (unregistering): Released all slaves [ 34.810231][ T3917] sit0: entered promiscuous mode [ 34.858219][ T3947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=3947 comm=syz.4.164 [ 34.874362][ T3947] Zero length message leads to an empty skb [ 34.932671][ T3599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.941612][ T3599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.952735][ T3599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.960066][ T29] audit: type=1400 audit(1729478022.231:353): avc: denied { read } for pid=3953 comm="syz.3.173" name="usbmon7" dev="devtmpfs" ino=139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 34.991862][ T3963] loop0: detected capacity change from 0 to 512 [ 34.998981][ T3599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 35.019552][ T3960] loop4: detected capacity change from 0 to 128 [ 35.069226][ T3963] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.086488][ T3963] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.096055][ T3599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.111398][ T3279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.125686][ T3960] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 35.129464][ T3599] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.147013][ T2224] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.154096][ T2224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.267717][ T3960] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 38.275815][ T3599] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.286393][ T3599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.306666][ T3982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.174'. [ 38.355823][ T3991] loop1: detected capacity change from 0 to 512 [ 38.363214][ T3991] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 38.390812][ T3268] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.406043][ T3991] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 38.420627][ T3991] EXT4-fs (loop1): 1 truncate cleaned up [ 38.426589][ T3991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.489370][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.508159][ T213] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.515360][ T213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.565598][ T3599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.613141][ T4018] loop1: detected capacity change from 0 to 2048 [ 38.620306][ T4018] EXT4-fs: Ignoring removed orlov option [ 38.679952][ T4018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.693089][ T4018] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.698088][ T3599] veth0_vlan: entered promiscuous mode [ 38.711774][ T3599] veth1_vlan: entered promiscuous mode [ 38.721344][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.771584][ T4041] loop0: detected capacity change from 0 to 1024 [ 38.780028][ T3599] veth0_macvtap: entered promiscuous mode [ 38.786076][ T4041] ======================================================= [ 38.786076][ T4041] WARNING: The mand mount option has been deprecated and [ 38.786076][ T4041] and is ignored by this kernel. Remove the mand [ 38.786076][ T4041] option from the mount to silence this warning. [ 38.786076][ T4041] ======================================================= [ 38.824353][ T3599] veth1_macvtap: entered promiscuous mode [ 38.830807][ T4041] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 38.834355][ T3599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.851779][ T3599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.861687][ T3599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.864726][ T4041] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.190: Invalid block bitmap block 0 in block_group 0 [ 38.872354][ T3599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.872368][ T3599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.872382][ T3599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.872393][ T3599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.892421][ T4041] EXT4-fs error (device loop0): ext4_acquire_dquot:6879: comm syz.0.190: Failed to acquire dquot type 0 [ 38.895566][ T3599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.900200][ T3599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.928230][ T4041] EXT4-fs error (device loop0): ext4_free_blocks:6589: comm syz.0.190: Freeing blocks not in datazone - block = 0, count = 4096 [ 38.969906][ T4041] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.190: Invalid inode bitmap blk 0 in block_group 0 [ 38.970425][ T4046] loop1: detected capacity change from 0 to 1024 [ 38.983862][ T4041] EXT4-fs error (device loop0) in ext4_free_inode:360: Corrupt filesystem [ 38.991838][ T213] EXT4-fs error (device loop0): ext4_release_dquot:6902: comm kworker/u8:4: Failed to release dquot type 0 [ 39.000788][ T4041] EXT4-fs (loop0): 1 orphan inode deleted [ 39.010195][ T4046] EXT4-fs: Ignoring removed oldalloc option [ 39.022024][ T3599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.032535][ T3599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.039913][ T4041] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.042374][ T3599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.065327][ T3599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.075299][ T3599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.085832][ T3599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.095755][ T3599] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.106249][ T3599] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.117819][ T3599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.133308][ T3599] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.142154][ T3599] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.145854][ T4046] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.151009][ T3599] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.171944][ T3599] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.232250][ T4060] tls_set_device_offload_rx: netdev not found [ 39.240992][ T4063] loop2: detected capacity change from 0 to 164 [ 39.278355][ T4063] Unable to read rock-ridge attributes [ 39.284801][ T3269] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.294918][ T4063] Unable to read rock-ridge attributes [ 39.445937][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 39.445951][ T29] audit: type=1400 audit(1729478026.711:390): avc: denied { read write } for pid=4102 comm="syz.1.206" name="ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.473671][ T4106] loop4: detected capacity change from 0 to 512 [ 39.475430][ T29] audit: type=1400 audit(1729478026.711:391): avc: denied { open } for pid=4102 comm="syz.1.206" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.510459][ T29] audit: type=1400 audit(1729478026.761:392): avc: denied { ioctl } for pid=4102 comm="syz.1.206" path="/dev/ppp" dev="devtmpfs" ino=116 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 39.510772][ T4106] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.207: corrupted in-inode xattr: invalid ea_ino [ 39.564528][ T4106] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.207: couldn't read orphan inode 15 (err -117) [ 39.581990][ T4106] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.611344][ T4041] syz.0.190 (4041) used greatest stack depth: 9608 bytes left [ 39.635684][ T3279] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.682108][ T4125] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 39.694819][ T3268] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 39.759902][ T29] audit: type=1326 audit(1729478027.031:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc84bfdff9 code=0x7ffc0000 [ 39.799918][ T29] audit: type=1326 audit(1729478027.051:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc84bfdff9 code=0x7ffc0000 [ 39.823378][ T29] audit: type=1326 audit(1729478027.051:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc84bfdff9 code=0x7ffc0000 [ 39.846656][ T29] audit: type=1326 audit(1729478027.051:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc84bfdff9 code=0x7ffc0000 [ 39.869982][ T29] audit: type=1326 audit(1729478027.061:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc84bfdff9 code=0x7ffc0000 [ 39.893447][ T29] audit: type=1326 audit(1729478027.061:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc84bfdff9 code=0x7ffc0000 [ 39.916855][ T29] audit: type=1326 audit(1729478027.061:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.0.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc84bfdff9 code=0x7ffc0000 [ 39.994913][ T4155] netlink: 28 bytes leftover after parsing attributes in process `syz.3.222'. [ 40.005846][ T4151] netlink: 24 bytes leftover after parsing attributes in process `syz.0.223'. [ 40.109247][ T4168] Driver unsupported XDP return value 0 on prog (id 163) dev N/A, expect packet loss! [ 40.283705][ T4191] IPv6: Can't replace route, no match found [ 41.316725][ T4193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.245'. [ 41.334422][ T4199] SELinux: policydb version 170 does not match my version range 15-33 [ 41.343220][ T4199] SELinux: failed to load policy [ 41.508981][ T4223] tmpfs: Unknown parameter 'nolazytimeÿ' [ 43.468549][ T4230] loop4: detected capacity change from 0 to 4096 [ 44.898922][ T4230] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 44.898980][ T4230] EXT4-fs: failed to create workqueue [ 44.899332][ T4236] SELinux: policydb version 170 does not match my version range 15-33 [ 44.908494][ T4230] EXT4-fs (loop4): mount failed [ 44.927094][ T4236] SELinux: failed to load policy [ 44.982248][ T4242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.264'. [ 45.005019][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 45.005032][ T29] audit: type=1400 audit(1729478032.271:445): avc: denied { override_creds } for pid=4246 comm="syz.4.267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 45.069284][ T4260] tmpfs: Unknown parameter 'nolazytimeÿ' [ 45.072889][ T29] audit: type=1400 audit(1729478032.341:446): avc: denied { bind } for pid=4261 comm="syz.2.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.094114][ T29] audit: type=1400 audit(1729478032.341:447): avc: denied { name_bind } for pid=4261 comm="syz.2.271" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 45.115797][ T29] audit: type=1400 audit(1729478032.341:448): avc: denied { node_bind } for pid=4261 comm="syz.2.271" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 45.144552][ T29] audit: type=1400 audit(1729478032.411:449): avc: denied { listen } for pid=4261 comm="syz.2.271" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 45.165083][ T29] audit: type=1400 audit(1729478032.411:450): avc: denied { name_connect } for pid=4261 comm="syz.2.271" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 45.207558][ T29] audit: type=1400 audit(1729478032.471:451): avc: denied { create } for pid=4265 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.234244][ T29] audit: type=1400 audit(1729478032.501:452): avc: denied { bind } for pid=4265 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.254031][ T29] audit: type=1400 audit(1729478032.501:453): avc: denied { read } for pid=4265 comm="syz.2.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.278328][ T4271] syz.2.276[4271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.278386][ T4271] syz.2.276[4271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.296012][ T4271] syz.2.276[4271] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.373526][ T4284] loop3: detected capacity change from 0 to 2048 [ 45.403301][ T4284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.419295][ T29] audit: type=1326 audit(1729478032.691:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4295 comm="syz.2.286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d1eeadff9 code=0x7ffc0000 [ 45.482292][ T4284] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.282: bg 0: block 274: padding at end of block bitmap is not set [ 45.483694][ T4298] IPv6: NLM_F_CREATE should be specified when creating new route [ 45.510293][ T4284] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 117 [ 45.522873][ T4284] EXT4-fs (loop3): This should not happen!! Data will be lost [ 45.522873][ T4284] [ 45.546182][ T4284] syz.3.282 (4284) used greatest stack depth: 9488 bytes left [ 45.562270][ T3273] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.584204][ T4310] syz.3.292[4310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.584331][ T4310] syz.3.292[4310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.596006][ T4310] syz.3.292[4310] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 45.657764][ T4320] loop2: detected capacity change from 0 to 1024 [ 45.676541][ T4320] EXT4-fs: Ignoring removed bh option [ 45.688892][ T4320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.732226][ T3599] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.742423][ T4327] SELinux: Context Ü is not valid (left unmapped). [ 45.786285][ T4330] netlink: 28 bytes leftover after parsing attributes in process `syz.4.302'. [ 45.828576][ T4337] loop4: detected capacity change from 0 to 256 [ 45.841250][ T4337] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.859774][ T4337] Process accounting resumed [ 45.883301][ T4339] loop2: detected capacity change from 0 to 2048 [ 45.893385][ T4343] ================================================================== [ 45.901505][ T4343] BUG: KCSAN: data-race in pcpu_alloc_noprof / pcpu_free_area [ 45.909076][ T4343] [ 45.911429][ T4343] read-write to 0xffffffff88bdf3ac of 4 bytes by task 243 on cpu 0: [ 45.919425][ T4343] pcpu_free_area+0x4dc/0x570 [ 45.924202][ T4343] free_percpu+0x1c6/0xb30 [ 45.928640][ T4343] prealloc_destroy+0xea/0x1a0 [ 45.933485][ T4343] htab_map_free+0x4a0/0x620 [ 45.938079][ T4343] bpf_map_free_deferred+0xb0/0x140 [ 45.943295][ T4343] process_scheduled_works+0x483/0x9a0 [ 45.948847][ T4343] worker_thread+0x51d/0x6f0 [ 45.953429][ T4343] kthread+0x1d1/0x210 [ 45.957495][ T4343] ret_from_fork+0x4b/0x60 [ 45.961908][ T4343] ret_from_fork_asm+0x1a/0x30 [ 45.966667][ T4343] [ 45.968979][ T4343] read to 0xffffffff88bdf3ac of 4 bytes by task 4343 on cpu 1: [ 45.976522][ T4343] pcpu_alloc_noprof+0x9b6/0x10a0 [ 45.981603][ T4343] bpf_map_alloc_percpu+0xad/0x210 [ 45.986724][ T4343] htab_map_alloc+0x309/0x8e0 [ 45.991579][ T4343] map_create+0x850/0xb70 [ 45.995899][ T4343] __sys_bpf+0x667/0x7a0 [ 46.000129][ T4343] __x64_sys_bpf+0x43/0x50 [ 46.004546][ T4343] x64_sys_call+0x2625/0x2d60 [ 46.009219][ T4343] do_syscall_64+0xc9/0x1c0 [ 46.013739][ T4343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.019645][ T4343] [ 46.021968][ T4343] value changed: 0x0000006b -> 0x00000073 [ 46.027690][ T4343] [ 46.030003][ T4343] Reported by Kernel Concurrency Sanitizer on: [ 46.036150][ T4343] CPU: 1 UID: 0 PID: 4343 Comm: syz.1.308 Not tainted 6.12.0-rc4-syzkaller #0 [ 46.045001][ T4343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 46.055056][ T4343] ================================================================== [ 46.098013][ T4339] loop2: unable to read partition table [ 46.103685][ T4339] loop2: partition table beyond EOD, truncated [ 46.109907][ T4339] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 46.140431][ T2970] loop2: unable to read partition table [ 46.146125][ T2970] loop2: partition table beyond EOD, truncated