last executing test programs: 1.387459723s ago: executing program 0 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 1.270576674s ago: executing program 0 (id=184): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="5000000027000100"], 0x50}}, 0x0) 1.244243624s ago: executing program 0 (id=185): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000fcff0018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000004300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r1, 0x0, 0x10}, 0x18) unshare(0x2c060000) 1.157818944s ago: executing program 0 (id=188): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x8, 0x5, 0x84, 0x10}]}) 1.115789315s ago: executing program 0 (id=193): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000000)=r0, 0x4) r1 = io_uring_setup(0x6d7, &(0x7f0000001240)={0x0, 0x919d}) close_range(r1, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x40010102) 964.219835ms ago: executing program 1 (id=204): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@noextend}], [], 0x6b}}) 900.976336ms ago: executing program 4 (id=208): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xffc, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000080)='asymmetric\x00', 0x0, &(0x7f0000000980)="53ac", 0x2, 0xfffffffffffffffe) 852.266156ms ago: executing program 1 (id=210): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x80000001}}, {@debug}, {@i_version}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@grpquota}, {@barrier}, {@dioread_nolock}]}, 0x25, 0x4b6, &(0x7f0000000540)="$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") unlink(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40086610, &(0x7f0000000140)={0x1, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 820.574196ms ago: executing program 4 (id=213): r0 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2}, 0x10) write$selinux_attr(r0, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 772.190576ms ago: executing program 4 (id=215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x8fd, &(0x7f0000000000)={0x0, 0x949f, 0x100, 0xffffffff, 0x2b}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1083) 733.319726ms ago: executing program 4 (id=217): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r0, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000000400), 0x20000000}, 0x20) 717.241657ms ago: executing program 4 (id=218): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x4, 0x102, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000980)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) unshare(0x42000000) 619.095597ms ago: executing program 3 (id=220): unshare(0x2000400) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) r2 = socket$key(0xf, 0x3, 0x2) io_submit(r1, 0x2, &(0x7f00000006c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r0}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x6, r2, 0x0, 0x0, 0x6, 0x0, 0x1}]) 588.025307ms ago: executing program 1 (id=221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000001600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000040002850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) io_setup(0x6, &(0x7f0000000680)=0x0) io_submit(r2, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x80, 0xffffffffffffffff, 0x0}]) 526.080578ms ago: executing program 3 (id=224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kfree\x00', r2}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)={0x2c, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x2c}}, 0x0) 518.575517ms ago: executing program 4 (id=225): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 485.696418ms ago: executing program 3 (id=227): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) poll(0x0, 0x0, 0x2) 445.903138ms ago: executing program 1 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x38, 0x3b, 0x9, 0x0, 0x0, {0x1}, [@nested={0x24, 0x4, 0x0, 0x1, [@typed={0x1d, 0x0, 0x0, 0x0, @str='\x006\xb2\x8e\xb8Ta\xcb\xdb\xf3B&4K\xc7\xc5\xde\x19q\xff\xff\xac\xe8\xc4\xab'}]}]}, 0x38}}, 0x0) 435.107778ms ago: executing program 3 (id=230): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 404.294879ms ago: executing program 2 (id=231): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x14a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7b7b, 0x0, @perf_config_ext={0x7ffa, 0xaea}, 0x110100, 0x32, 0x0, 0x3, 0x4002, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x1, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="58000000020101010000000000000000020000463800048034000280050002000000000005000100970000000500020008000000050002000300000005000200a800000005000200060004000c00198008000200040000"], 0x58}, 0x1, 0x0, 0x0, 0x4094}, 0x4000) 398.342538ms ago: executing program 1 (id=232): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r0, &(0x7f0000000200)=ANY=[], 0x6) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 371.393608ms ago: executing program 1 (id=233): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xc0000000, 0x16a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x967f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 352.791029ms ago: executing program 3 (id=234): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x3, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x7a000}], 0x1, 0x33000, 0x0, 0x3) 291.633919ms ago: executing program 2 (id=235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) close_range(r1, 0xffffffffffffffff, 0x400000000000000) 240.30696ms ago: executing program 0 (id=236): socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x0, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x891}, 0x0) 170.275229ms ago: executing program 2 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000200001801400020073797a5f74756e000000000000000000080003000300000014000380"], 0x48}}, 0x840) 129.37079ms ago: executing program 2 (id=238): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000009c0)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000150000003d36000002"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r2, &(0x7f0000001940), 0x0}, 0x20) 69.77619ms ago: executing program 2 (id=239): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, 0x0, 0x0}, 0x20) 60.08077ms ago: executing program 3 (id=240): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@version_9p2000}]}}) 0s ago: executing program 2 (id=241): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) migrate_pages(0x0, 0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 20.682985][ T29] audit: type=1400 audit(1732084589.335:81): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.97' (ED25519) to the list of known hosts. [ 26.904632][ T29] audit: type=1400 audit(1732084595.555:82): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.905916][ T3304] cgroup: Unknown subsys name 'net' [ 26.927485][ T29] audit: type=1400 audit(1732084595.555:83): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.954977][ T29] audit: type=1400 audit(1732084595.585:84): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.130480][ T3304] cgroup: Unknown subsys name 'cpuset' [ 27.136736][ T3304] cgroup: Unknown subsys name 'rlimit' [ 27.264455][ T29] audit: type=1400 audit(1732084595.915:85): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.289889][ T29] audit: type=1400 audit(1732084595.915:86): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.309175][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.310451][ T29] audit: type=1400 audit(1732084595.915:87): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.339414][ T29] audit: type=1400 audit(1732084595.915:88): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.359788][ T29] audit: type=1400 audit(1732084595.925:89): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.380032][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.384783][ T29] audit: type=1400 audit(1732084595.925:90): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.416759][ T29] audit: type=1400 audit(1732084595.965:91): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.485829][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 28.545458][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 28.608151][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 28.626321][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.633522][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.640941][ T3315] bridge_slave_0: entered allmulticast mode [ 28.647461][ T3315] bridge_slave_0: entered promiscuous mode [ 28.656770][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.663930][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.671310][ T3315] bridge_slave_1: entered allmulticast mode [ 28.677779][ T3315] bridge_slave_1: entered promiscuous mode [ 28.684150][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.704176][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 28.720636][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.727891][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.735120][ T3317] bridge_slave_0: entered allmulticast mode [ 28.741701][ T3317] bridge_slave_0: entered promiscuous mode [ 28.767961][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.778343][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.788019][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.795128][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.802354][ T3317] bridge_slave_1: entered allmulticast mode [ 28.809035][ T3317] bridge_slave_1: entered promiscuous mode [ 28.855342][ T3315] team0: Port device team_slave_0 added [ 28.862102][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.871808][ T3315] team0: Port device team_slave_1 added [ 28.892375][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.905563][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.912742][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.919943][ T3318] bridge_slave_0: entered allmulticast mode [ 28.926198][ T3318] bridge_slave_0: entered promiscuous mode [ 28.947393][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.954378][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.980349][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.991187][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.998291][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.005490][ T3318] bridge_slave_1: entered allmulticast mode [ 29.011967][ T3318] bridge_slave_1: entered promiscuous mode [ 29.032691][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.039740][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.065827][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.085960][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.093084][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.100364][ T3314] bridge_slave_0: entered allmulticast mode [ 29.106750][ T3314] bridge_slave_0: entered promiscuous mode [ 29.113760][ T3317] team0: Port device team_slave_0 added [ 29.120435][ T3317] team0: Port device team_slave_1 added [ 29.133432][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.140631][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.147811][ T3321] bridge_slave_0: entered allmulticast mode [ 29.154268][ T3321] bridge_slave_0: entered promiscuous mode [ 29.161047][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.168102][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.175346][ T3314] bridge_slave_1: entered allmulticast mode [ 29.181878][ T3314] bridge_slave_1: entered promiscuous mode [ 29.198611][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.212593][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.219756][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.227223][ T3321] bridge_slave_1: entered allmulticast mode [ 29.233617][ T3321] bridge_slave_1: entered promiscuous mode [ 29.251073][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.261150][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.270625][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.277572][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.303546][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.325750][ T3315] hsr_slave_0: entered promiscuous mode [ 29.331784][ T3315] hsr_slave_1: entered promiscuous mode [ 29.338518][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.352743][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.359917][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.385832][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.415180][ T3318] team0: Port device team_slave_0 added [ 29.422105][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.432348][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.457258][ T3318] team0: Port device team_slave_1 added [ 29.472704][ T3314] team0: Port device team_slave_0 added [ 29.497243][ T3314] team0: Port device team_slave_1 added [ 29.507843][ T3321] team0: Port device team_slave_0 added [ 29.514323][ T3321] team0: Port device team_slave_1 added [ 29.521841][ T3317] hsr_slave_0: entered promiscuous mode [ 29.527937][ T3317] hsr_slave_1: entered promiscuous mode [ 29.533838][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.541446][ T3317] Cannot create hsr debugfs directory [ 29.550101][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.557147][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.583188][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.620617][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.627581][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.653519][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.664500][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.671501][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.697463][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.708702][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.715689][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.741617][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.756777][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.763786][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.789731][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.811339][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.818306][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.844309][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.874832][ T3318] hsr_slave_0: entered promiscuous mode [ 29.881110][ T3318] hsr_slave_1: entered promiscuous mode [ 29.886922][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.894796][ T3318] Cannot create hsr debugfs directory [ 29.916410][ T3314] hsr_slave_0: entered promiscuous mode [ 29.922510][ T3314] hsr_slave_1: entered promiscuous mode [ 29.928506][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.936195][ T3314] Cannot create hsr debugfs directory [ 29.969387][ T3321] hsr_slave_0: entered promiscuous mode [ 29.975650][ T3321] hsr_slave_1: entered promiscuous mode [ 29.981678][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.989242][ T3321] Cannot create hsr debugfs directory [ 30.113546][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.131634][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.141180][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.166661][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.194401][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.203207][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.212211][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.220961][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.252748][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.266229][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.275306][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.283921][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.306745][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.315934][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.325379][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.342599][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.374199][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.382923][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.399669][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.413224][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.471758][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.481437][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.490711][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.503449][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.515481][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.535135][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.542246][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.553681][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.565229][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.574665][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.581741][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.590852][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.598007][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.618589][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.625765][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.634986][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.642085][ T3352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.651460][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.658516][ T3352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.668238][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.681945][ T3352] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.688995][ T3352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.706097][ T3352] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.713220][ T3352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.768447][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.807317][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.851723][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.883039][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.901180][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.908271][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.922195][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.929365][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.944035][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.968063][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.998944][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.113905][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.147482][ T3317] veth0_vlan: entered promiscuous mode [ 31.160219][ T3315] veth0_vlan: entered promiscuous mode [ 31.166935][ T3314] veth0_vlan: entered promiscuous mode [ 31.178119][ T3314] veth1_vlan: entered promiscuous mode [ 31.184761][ T3317] veth1_vlan: entered promiscuous mode [ 31.192174][ T3315] veth1_vlan: entered promiscuous mode [ 31.216910][ T3317] veth0_macvtap: entered promiscuous mode [ 31.229361][ T3314] veth0_macvtap: entered promiscuous mode [ 31.241965][ T3317] veth1_macvtap: entered promiscuous mode [ 31.254246][ T3315] veth0_macvtap: entered promiscuous mode [ 31.279341][ T3314] veth1_macvtap: entered promiscuous mode [ 31.300851][ T3315] veth1_macvtap: entered promiscuous mode [ 31.318944][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.327001][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.337526][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.349578][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.366736][ T3321] veth0_vlan: entered promiscuous mode [ 31.378410][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.388427][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.398930][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.410499][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.423102][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.433669][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.443662][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.454122][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.464826][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.473192][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.481988][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.490954][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.499766][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.510504][ T3321] veth1_vlan: entered promiscuous mode [ 31.518898][ T3317] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.527825][ T3317] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.536595][ T3317] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.545369][ T3317] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.556355][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.566837][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.576759][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.587248][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.597851][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.608199][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.616974][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.626001][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.634862][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.657327][ T3318] veth0_vlan: entered promiscuous mode [ 31.682830][ T3318] veth1_vlan: entered promiscuous mode [ 31.694067][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.707940][ T3321] veth0_macvtap: entered promiscuous mode [ 31.733831][ T3321] veth1_macvtap: entered promiscuous mode [ 31.757692][ T3318] veth0_macvtap: entered promiscuous mode [ 31.785947][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.796516][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.806452][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.816931][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.826925][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.837465][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.851586][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.880341][ T3318] veth1_macvtap: entered promiscuous mode [ 31.891039][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.901566][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.911469][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.922171][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.932246][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.942791][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.956605][ T3471] loop1: detected capacity change from 0 to 256 [ 31.962241][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.974365][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.984883][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.994778][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.005314][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.015172][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.025667][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.035534][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.046021][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.046860][ T3471] ======================================================= [ 32.046860][ T3471] WARNING: The mand mount option has been deprecated and [ 32.046860][ T3471] and is ignored by this kernel. Remove the mand [ 32.046860][ T3471] option from the mount to silence this warning. [ 32.046860][ T3471] ======================================================= [ 32.060652][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.093552][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 32.093569][ T29] audit: type=1400 audit(1732084600.745:129): avc: denied { create } for pid=3472 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.106024][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.134555][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.143350][ T29] audit: type=1400 audit(1732084600.775:130): avc: denied { getopt } for pid=3472 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.144400][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.163604][ T29] audit: type=1400 audit(1732084600.775:131): avc: denied { connect } for pid=3472 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.173972][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.173989][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.193274][ T29] audit: type=1400 audit(1732084600.775:132): avc: denied { name_connect } for pid=3472 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 32.203088][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.243708][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.254241][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.267123][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.279982][ T3321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.288743][ T3321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.297509][ T3321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.306303][ T3321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.334381][ T29] audit: type=1400 audit(1732084600.885:133): avc: denied { setopt } for pid=3472 comm="syz.2.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.353722][ T29] audit: type=1400 audit(1732084600.905:134): avc: denied { mount } for pid=3470 comm="syz.1.8" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 32.375518][ T29] audit: type=1400 audit(1732084600.955:135): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 32.385172][ T3318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.395506][ T29] audit: type=1400 audit(1732084600.975:136): avc: denied { create } for pid=3477 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.404080][ T3318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.423592][ T29] audit: type=1400 audit(1732084600.975:137): avc: denied { setopt } for pid=3477 comm="syz.1.11" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.432059][ T3318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.452050][ T29] audit: type=1400 audit(1732084600.975:138): avc: denied { write } for pid=3477 comm="syz.1.11" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.460743][ T3318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.717196][ T3501] Illegal XDP return value 2642518052 on prog (id 18) dev N/A, expect packet loss! [ 32.755626][ T3507] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21'. [ 32.820123][ T3515] loop0: detected capacity change from 0 to 512 [ 32.844164][ T3515] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.24: corrupted in-inode xattr: invalid ea_ino [ 32.845073][ T3519] syz.3.25[3519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.867666][ T3519] syz.3.25[3519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.883804][ T3519] syz.3.25[3519] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.895136][ T3515] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.24: couldn't read orphan inode 15 (err -117) [ 32.898371][ T3523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.25'. [ 32.911818][ T3515] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.971982][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.089716][ T3540] loop0: detected capacity change from 0 to 164 [ 33.116152][ T3540] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 33.162929][ T3540] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 33.234086][ T3562] loop3: detected capacity change from 0 to 256 [ 33.257671][ T3565] Invalid ELF header magic: != ELF [ 33.328176][ T3577] Process accounting resumed [ 33.340606][ T3578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.50'. [ 33.349405][ T3578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.50'. [ 33.364569][ T3578] bond1: entered promiscuous mode [ 33.369784][ T3578] bond1: entered allmulticast mode [ 33.377429][ T3578] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.476376][ T3594] IPVS: stopping master sync thread 3595 ... [ 33.482759][ T3595] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 1, id = 0 [ 33.491339][ T3590] hub 9-0:1.0: USB hub found [ 33.499293][ T3590] hub 9-0:1.0: 8 ports detected [ 33.533182][ T3597] netlink: 16 bytes leftover after parsing attributes in process `syz.2.60'. [ 33.580656][ T3606] xt_hashlimit: max too large, truncated to 1048576 [ 33.688568][ T3619] syz.3.71[3619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.688674][ T3619] syz.3.71[3619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.711630][ T3619] syz.3.71[3619] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.726194][ T3619] loop3: detected capacity change from 0 to 128 [ 33.773459][ T3619] syz.3.71: attempt to access beyond end of device [ 33.773459][ T3619] loop3: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 33.797494][ T3352] kworker/u8:6: attempt to access beyond end of device [ 33.797494][ T3352] loop3: rw=1, sector=145, nr_sectors = 8 limit=128 [ 33.841641][ T3635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.78'. [ 33.903681][ T3645] sctp: [Deprecated]: syz.2.83 (pid 3645) Use of struct sctp_assoc_value in delayed_ack socket option. [ 33.903681][ T3645] Use struct sctp_sack_info instead [ 34.011892][ T3661] netlink: 140 bytes leftover after parsing attributes in process `+}[@'. [ 34.041894][ T3665] netlink: 32 bytes leftover after parsing attributes in process `syz.3.94'. [ 34.265735][ T3680] loop3: detected capacity change from 0 to 8192 [ 34.278593][ T3680] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 34.297441][ T3680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.99'. [ 34.464801][ T3702] netlink: 28 bytes leftover after parsing attributes in process `syz.2.110'. [ 34.473795][ T3702] netlink: 'syz.2.110': attribute type 7 has an invalid length. [ 34.481529][ T3702] netlink: 'syz.2.110': attribute type 8 has an invalid length. [ 34.491785][ T3702] gretap0: entered promiscuous mode [ 34.497894][ T3702] batadv_slave_1: entered promiscuous mode [ 34.504804][ T3702] gretap0: left promiscuous mode [ 34.510310][ T3702] batadv_slave_1: left promiscuous mode [ 34.542769][ T3705] loop1: detected capacity change from 0 to 164 [ 34.549305][ T3705] iso9660: Unknown parameter '.' [ 34.729347][ T3728] mmap: syz.1.124 (3728) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.797690][ T3736] loop1: detected capacity change from 0 to 512 [ 34.801239][ T3737] loop2: detected capacity change from 0 to 1024 [ 34.805358][ T3736] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.810914][ T3737] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 34.825917][ T3736] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.863524][ T3736] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 34.873783][ T3736] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 34.885152][ T3736] EXT4-fs (loop1): 1 truncate cleaned up [ 34.891380][ T3736] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.923319][ T3736] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 34.944572][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.967378][ T3751] loop4: detected capacity change from 0 to 2048 [ 35.025841][ T3751] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.031360][ T3756] loop1: detected capacity change from 0 to 2048 [ 35.081913][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.094766][ T3756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.107094][ T3756] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.154897][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.171026][ T3772] SELinux: Context Ü is not valid (left unmapped). [ 35.378506][ T3802] netlink: 'syz.0.156': attribute type 34 has an invalid length. [ 35.450601][ T3807] loop0: detected capacity change from 0 to 2048 [ 35.470648][ T3811] netlink: 'syz.4.160': attribute type 10 has an invalid length. [ 35.478966][ T3811] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.486167][ T3811] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.498123][ T3811] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.505386][ T3811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.512746][ T3811] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.519958][ T3811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.532112][ T3811] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 35.542947][ T3807] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.577618][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.775813][ T3834] program syz.0.170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.847278][ T3851] loop0: detected capacity change from 0 to 256 [ 35.866488][ T3851] FAT-fs (loop0): bogus sectors per cluster 223 [ 35.871341][ T3853] hub 9-0:1.0: USB hub found [ 35.872850][ T3851] FAT-fs (loop0): Can't find a valid FAT filesystem [ 35.877442][ T3853] hub 9-0:1.0: 8 ports detected [ 36.050995][ T3864] unsupported nlmsg_type 40 [ 36.116501][ T3870] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 36.433782][ T3917] mmap: syz.3.209 (3917): VmData 167489536 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 36.467971][ T3919] loop1: detected capacity change from 0 to 512 [ 36.478856][ T3919] EXT4-fs: Ignoring removed i_version option [ 36.508482][ T3919] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c018, mo2=0002] [ 36.517590][ T3923] loop3: detected capacity change from 0 to 512 [ 36.532483][ T3919] System zones: 0-2, 18-18, 34-35 [ 36.551434][ T3919] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.566259][ T3919] ext4 filesystem being mounted at /32/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.577390][ T3923] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.601063][ T3937] sg_write: data in/out 231/14 bytes for SCSI command 0x0-- guessing data in; [ 36.601063][ T3937] program syz.2.216 not setting count and/or reply_len properly [ 36.605878][ T3923] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.639026][ T3919] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 36.650075][ T3923] EXT4-fs (loop3): shut down requested (0) [ 36.668172][ T3941] syz.2.219 uses obsolete (PF_INET,SOCK_PACKET) [ 36.677932][ T3919] EXT4-fs warning (device loop1): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 36.692232][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.726638][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.976026][ T3972] loop3: detected capacity change from 0 to 2048 [ 37.082992][ T3972] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.260669][ T28] ================================================================== [ 37.268792][ T28] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 37.276124][ T28] [ 37.278473][ T28] read-write to 0xffff8881136ab6b0 of 8 bytes by task 3317 on cpu 1: [ 37.286562][ T28] xas_clear_mark+0x90/0x180 [ 37.291194][ T28] __folio_start_writeback+0x2e2/0x440 [ 37.296694][ T28] __block_write_full_folio+0x506/0x8c0 [ 37.302271][ T28] block_write_full_folio+0x293/0x2b0 [ 37.307679][ T28] write_cache_pages+0x62/0x100 [ 37.312571][ T28] blkdev_writepages+0x59/0x90 [ 37.317358][ T28] do_writepages+0x1d8/0x480 [ 37.322073][ T28] filemap_flush+0xe7/0x120 [ 37.326617][ T28] sync_blockdev_nowait+0x29/0x40 [ 37.331681][ T28] sync_filesystem+0xe3/0x190 [ 37.336387][ T28] generic_shutdown_super+0x46/0x220 [ 37.341700][ T28] kill_block_super+0x2a/0x70 [ 37.346406][ T28] ext4_kill_sb+0x44/0x80 [ 37.350785][ T28] deactivate_locked_super+0x7d/0x1c0 [ 37.356183][ T28] deactivate_super+0x9f/0xb0 [ 37.360883][ T28] cleanup_mnt+0x268/0x2e0 [ 37.365343][ T28] __cleanup_mnt+0x19/0x20 [ 37.369785][ T28] task_work_run+0x13a/0x1a0 [ 37.374440][ T28] syscall_exit_to_user_mode+0xa8/0x120 [ 37.380006][ T28] do_syscall_64+0xd6/0x1c0 [ 37.384529][ T28] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.390447][ T28] [ 37.392774][ T28] read to 0xffff8881136ab6b0 of 8 bytes by task 28 on cpu 0: [ 37.400153][ T28] xas_find_marked+0x216/0x660 [ 37.404945][ T28] find_get_entry+0x54/0x390 [ 37.409554][ T28] filemap_get_folios_tag+0x136/0x210 [ 37.414949][ T28] writeback_iter+0x4b0/0x830 [ 37.419651][ T28] write_cache_pages+0x4b/0x100 [ 37.424549][ T28] blkdev_writepages+0x59/0x90 [ 37.429411][ T28] do_writepages+0x1d8/0x480 [ 37.434026][ T28] __writeback_single_inode+0x89/0x850 [ 37.439501][ T28] writeback_sb_inodes+0x461/0xa30 [ 37.444730][ T28] __writeback_inodes_wb+0x9a/0x1a0 [ 37.449955][ T28] wb_writeback+0x274/0x640 [ 37.454483][ T28] wb_workfn+0x67f/0x940 [ 37.458746][ T28] process_scheduled_works+0x483/0x9a0 [ 37.464222][ T28] worker_thread+0x51d/0x6f0 [ 37.468826][ T28] kthread+0x1d1/0x210 [ 37.472911][ T28] ret_from_fork+0x4b/0x60 [ 37.477514][ T28] ret_from_fork_asm+0x1a/0x30 [ 37.482315][ T28] [ 37.484648][ T28] value changed: 0x000000000000010f -> 0x000000000000010c [ 37.491765][ T28] [ 37.494100][ T28] Reported by Kernel Concurrency Sanitizer on: [ 37.500264][ T28] CPU: 0 UID: 0 PID: 28 Comm: kworker/u8:1 Not tainted 6.12.0-syzkaller-01782-gbf9aa14fc523 #0 [ 37.510708][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 37.520777][ T28] Workqueue: writeback wb_workfn (flush-7:3) [ 37.526798][ T28] ================================================================== [ 37.545549][ T29] kauditd_printk_skb: 201 callbacks suppressed [ 37.545566][ T29] audit: type=1326 audit(1732084606.185:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11789e759 code=0x7ffc0000 [ 37.575168][ T29] audit: type=1326 audit(1732084606.185:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11789e759 code=0x7ffc0000 [ 37.585042][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.598395][ T29] audit: type=1326 audit(1732084606.185:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc11789e759 code=0x7ffc0000 [ 37.630607][ T29] audit: type=1326 audit(1732084606.185:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11789e759 code=0x7ffc0000 [ 37.653995][ T29] audit: type=1326 audit(1732084606.185:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11789e759 code=0x7ffc0000 [ 37.677291][ T29] audit: type=1326 audit(1732084606.185:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc11789e759 code=0x7ffc0000 [ 37.700522][ T29] audit: type=1326 audit(1732084606.185:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11789e759 code=0x7ffc0000 [ 37.723842][ T29] audit: type=1326 audit(1732084606.185:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11789e759 code=0x7ffc0000 [ 37.747253][ T29] audit: type=1326 audit(1732084606.195:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc11789e759 code=0x7ffc0000 [ 37.770762][ T29] audit: type=1326 audit(1732084606.195:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.4.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc11789e759 code=0x7ffc0000