last executing test programs: 12.63359201s ago: executing program 4 (id=39): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'wg0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000280)=0x20, 0x4) bind$xdp(r1, &(0x7f00000001c0)={0x2c, 0x0, r2}, 0x2a) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) 12.54099645s ago: executing program 4 (id=40): mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 11.693916975s ago: executing program 4 (id=54): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x1b) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x9, 0xb7, 0x4, 0x37, 0x0, 0x8001, 0x2, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x2000000, 0x2, @perf_config_ext={0x6, 0x4}, 0x4000, 0xe1, 0x80000000, 0x7, 0x4, 0xb96, 0x10, 0x0, 0x1, 0x0, 0x80000000}, 0xffffffffffffffff, 0x5, r1, 0x1) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_NEXT_CMD_LEN(r2, 0x2284, &(0x7f0000000000)) 11.600098746s ago: executing program 4 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 11.551857936s ago: executing program 4 (id=60): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 11.185412568s ago: executing program 4 (id=68): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 11.185158238s ago: executing program 32 (id=68): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x9, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 4.383003995s ago: executing program 0 (id=185): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r1, 0x2) listen(r0, 0x3) 4.319650506s ago: executing program 0 (id=187): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000080, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) fcntl$notify(r1, 0x402, 0x29) fcntl$notify(r0, 0x402, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 4.233732707s ago: executing program 0 (id=188): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x418484, &(0x7f0000000440), 0x1, 0x775, &(0x7f0000001180)="$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") r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) name_to_handle_at(r3, &(0x7f0000004740)='\x00', 0x0, 0x0, 0x1200) 4.124900937s ago: executing program 0 (id=191): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000240), 0x1, 0x43a, &(0x7f0000000340)="$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") open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000040)=""/104, 0x4d) 3.64003048s ago: executing program 0 (id=195): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000020303000000000000000000000000000900020000000008020000000800010001"], 0x28}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020301040000000000000000000000100800010001"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.417262201s ago: executing program 0 (id=198): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 3.394245191s ago: executing program 33 (id=198): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmsg(r2, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 3.228493922s ago: executing program 2 (id=201): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r3, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000440)={r4, 0x0, 0x11, 0x0, &(0x7f0000000600)="61df712bc884fef053a7a9a26e9b722780", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.214154222s ago: executing program 2 (id=203): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mtu(r0, 0x29, 0x17, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000009be1b79dca663132f9572b16a7dd2558358e017eba3c0ac12b24c71131ed015db2fbd2102315356a39951ab121fa8fc17bc876531850a9d21a4cb170694ef5a1e5443e29b2c0fefa8ebf630d0a5f198aa64274c4eead2ae04544c7bc2c6b37f4e682bd345398b4c26ad71ea3bb0aa9941e357ec50b31e71179125841b01ec5d6678463b5c0e350", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendfile(r1, r1, 0x0, 0x800000009) 3.027526953s ago: executing program 5 (id=208): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2804049, &(0x7f0000001580)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYBLOB="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"], 0x41, 0x304, &(0x7f0000001880)="$eJzs3M9rE1sUwPGTNG3SlDZZPB6v7/HoRTe6Gdq4V4K0IAaU2og/QJg2Ew0Zk5CJlRSxceXWf8PQZTdS0PoHdOPOlRtx043gpqA1ksykSdpJG1ObtOT7gXJP594zP3In4czAzPadV4/TSUtL6gXxBpR4RUqyKxKuRo6lcRHxiEdqzYi9MGA3Jbk49u3j/0pEorHY7LxSc9GFSxGl1MTU26fP1s5tFsZur09s+GUr/GD7a+Tz1t9bk9s/Fx6lLJWyVCZbULpazH4q6IumoRIpK60pddM0dMtQqYxl5O3+bMHZrORyRaVnEuPBXN6wLKVniiptFFUhqwr5otIf6qmM0jRNjQdlcOxM1Zrc7+bFy/PzerTLjS51mYc/bvPQ3ny+/uV5X2ntiZdPbp8AAMBpVa///c31/05r/e9xWm9z/e8oSala/9+6e+96B/X/xkib+j97oP53ri+kpT9pZqn/uxU4uCheHuq+/scZkR8VKa9J4xv94v7adC2g/gcAAAAAAAAAAAAAAAAAAAAA4CzYqVRClUolVG29YsfVP7/zwEj9/37vJ05G8/zbc+2rzjrzPyCaHtwLiJgvl+PLcbu1+6NJSYkphkxLSH7UzgeHHc9di816VE1Y3pmrTv7qcnyoNX9GQhJ2z5+x81Vr/rAEm/MjEpK/3PMjrvkjcuF8U74mIfmwJFkxJVE7rxv5z2eUunojti9/VBIuT8wBAAAAAHAWaWqP6/W7prXrt/M7uT8w7Xp97pN/ff09dgAAAAAABoVVXEnrpmnkjwxeOxlHDv7iDOx4zccNhjs9Cn/na35TCzzt1hzY++ie/NPDI20E9XcyHzp41BnU0uXcnlnt/T4fO5jqy9Z91ZO+aUmw7eCJIbcP/LDA77yVubpkt7JvzOX1/74XV65MHjHLJxT09GcIAAAAQA80iv5+7wkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOrF68T6/cxAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKfFrwAAAP//CgoTZA==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0xc0185879, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r0, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 2.741399734s ago: executing program 5 (id=210): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x3f, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000000020000000000000000018190000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 2.741193755s ago: executing program 2 (id=211): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) getcwd(0x0, 0x0) 1.115412184s ago: executing program 6 (id=199): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 1.114207643s ago: executing program 2 (id=225): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r2, 0x400, 0x1) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x81000) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r4, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 1.113202434s ago: executing program 5 (id=227): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f0000000000)={'\x00', 0x7ffb, 0x9, 0x1, 0x9, 0x36}) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) 1.030873224s ago: executing program 6 (id=215): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x6988b500, 0x0, 0x0, 0x0, 0x0, 0x0) 1.030583224s ago: executing program 2 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x2, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xf20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x63db, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.025398474s ago: executing program 5 (id=219): setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000180)={0x0, 0xd, 0x9, 0x1}, 0x10) r0 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x0, 0x3}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 929.332945ms ago: executing program 5 (id=222): r0 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0x21}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe2, 0x0) 821.798795ms ago: executing program 3 (id=229): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}], [], 0x6b}}) umount2(&(0x7f0000000340)='./file0\x00', 0x0) 821.550125ms ago: executing program 2 (id=230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 787.237315ms ago: executing program 3 (id=232): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x6, 0x4, 0x599, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x6f, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000c50000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 768.625655ms ago: executing program 3 (id=233): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58db, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r2, &(0x7f0000000440)={'#! ', './file0'}, 0xb) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 687.998366ms ago: executing program 3 (id=235): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1001a, &(0x7f0000000280)={[{@quota}, {@resuid={'resuid', 0x3d, 0xee01}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x1, 0x42e, &(0x7f0000000940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) write$cgroup_int(r0, &(0x7f00000000c0), 0x12) write$binfmt_script(r1, &(0x7f0000000140), 0xfcb8) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000000)={0x17c04, 0xffffffffffffffff, 0x0, 0x100000001}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000080)={0x17c04, r0, 0xfffffffffffffdfd, 0x100000000, 0x3}) 503.340147ms ago: executing program 3 (id=238): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 422.906177ms ago: executing program 3 (id=240): pipe2$9p(0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 395.414198ms ago: executing program 6 (id=241): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs(r0, &(0x7f0000000140)='smaps\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffff00, 0x0, 0x7}) close_range(r3, 0xffffffffffffffff, 0x0) 204.368519ms ago: executing program 1 (id=245): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x3ff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, @void, @value, @void, @value}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fsync(0xffffffffffffffff) 133.645829ms ago: executing program 1 (id=246): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000000)={@val={0x4}, @void, @eth={@broadcast, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "01d55e", 0x44, 0x29, 0x1, @local, @mcast2={0xff, 0x3}, {[], {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{}, 0xff88}}, {0x8, 0x6558, 0x1}}}}}}}}, 0x7e) 93.327449ms ago: executing program 1 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fb000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) sendmsg$tipc(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) close(r2) 86.270229ms ago: executing program 5 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x6, 0x8f}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x924924924924c31, 0x3ec0) recvmsg$unix(r2, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x0) write$binfmt_script(r2, 0x0, 0x0) recvmsg(r1, &(0x7f0000003640)={0x0, 0x0, 0x0}, 0x0) 5.51123ms ago: executing program 1 (id=249): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.20894ms ago: executing program 1 (id=250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000041000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 0s ago: executing program 1 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001800)={&(0x7f0000000580)='kfree\x00', r1}, 0x9) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) r2 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/cgroup.procs\x00', 0x802, 0x0) syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r4}}, 0x58) kernel console output (not intermixed with test programs): [ 20.221578][ T29] audit: type=1400 audit(1731807477.176:81): avc: denied { read } for pid=2999 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts. [ 27.184973][ T29] audit: type=1400 audit(1731807484.136:82): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.186257][ T3305] cgroup: Unknown subsys name 'net' [ 27.207718][ T29] audit: type=1400 audit(1731807484.146:83): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.235558][ T29] audit: type=1400 audit(1731807484.196:84): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.376113][ T3305] cgroup: Unknown subsys name 'cpuset' [ 27.382420][ T3305] cgroup: Unknown subsys name 'rlimit' [ 27.491222][ T29] audit: type=1400 audit(1731807484.446:85): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.516569][ T29] audit: type=1400 audit(1731807484.446:86): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.534823][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.537092][ T29] audit: type=1400 audit(1731807484.446:87): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.566132][ T29] audit: type=1400 audit(1731807484.446:88): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.586496][ T29] audit: type=1400 audit(1731807484.456:89): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.609955][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.611299][ T29] audit: type=1400 audit(1731807484.456:90): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.643194][ T29] audit: type=1400 audit(1731807484.506:91): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.834773][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 28.881504][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 28.940777][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.947934][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.955192][ T3319] bridge_slave_0: entered allmulticast mode [ 28.961608][ T3319] bridge_slave_0: entered promiscuous mode [ 28.983635][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.990719][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.998027][ T3319] bridge_slave_1: entered allmulticast mode [ 29.004486][ T3319] bridge_slave_1: entered promiscuous mode [ 29.037484][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.049702][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.058925][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.066085][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.073354][ T3316] bridge_slave_0: entered allmulticast mode [ 29.080147][ T3316] bridge_slave_0: entered promiscuous mode [ 29.095651][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.115583][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.122754][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.130055][ T3316] bridge_slave_1: entered allmulticast mode [ 29.136609][ T3316] bridge_slave_1: entered promiscuous mode [ 29.156273][ T3319] team0: Port device team_slave_0 added [ 29.166515][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 29.185536][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.195419][ T3319] team0: Port device team_slave_1 added [ 29.205495][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 29.219484][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.265710][ T3316] team0: Port device team_slave_0 added [ 29.271667][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.278688][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.304664][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.325490][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.332584][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.339796][ T3315] bridge_slave_0: entered allmulticast mode [ 29.346320][ T3315] bridge_slave_0: entered promiscuous mode [ 29.355564][ T3316] team0: Port device team_slave_1 added [ 29.366480][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.373447][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.399356][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.424908][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.432027][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.439259][ T3315] bridge_slave_1: entered allmulticast mode [ 29.445644][ T3315] bridge_slave_1: entered promiscuous mode [ 29.463500][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.470495][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.496572][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.520033][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.527086][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.552999][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.576302][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.583389][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.590595][ T3317] bridge_slave_0: entered allmulticast mode [ 29.596912][ T3317] bridge_slave_0: entered promiscuous mode [ 29.619398][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.628584][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.635669][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.642906][ T3317] bridge_slave_1: entered allmulticast mode [ 29.649609][ T3317] bridge_slave_1: entered promiscuous mode [ 29.662009][ T3319] hsr_slave_0: entered promiscuous mode [ 29.668102][ T3319] hsr_slave_1: entered promiscuous mode [ 29.674149][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.681312][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.688520][ T3322] bridge_slave_0: entered allmulticast mode [ 29.694901][ T3322] bridge_slave_0: entered promiscuous mode [ 29.702385][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.711643][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.719208][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.726511][ T3322] bridge_slave_1: entered allmulticast mode [ 29.732872][ T3322] bridge_slave_1: entered promiscuous mode [ 29.751519][ T3316] hsr_slave_0: entered promiscuous mode [ 29.757667][ T3316] hsr_slave_1: entered promiscuous mode [ 29.763498][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.771103][ T3316] Cannot create hsr debugfs directory [ 29.796218][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.817349][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.827834][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.837775][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.857390][ T3315] team0: Port device team_slave_0 added [ 29.863978][ T3315] team0: Port device team_slave_1 added [ 29.901659][ T3317] team0: Port device team_slave_0 added [ 29.922114][ T3322] team0: Port device team_slave_0 added [ 29.928777][ T3322] team0: Port device team_slave_1 added [ 29.935051][ T3317] team0: Port device team_slave_1 added [ 29.952832][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.959833][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.986006][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.997142][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.004185][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.030231][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.052343][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.059401][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.085473][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.107646][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.114617][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.141005][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.152276][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.159290][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.185401][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.212169][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.219206][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.245157][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.286754][ T3317] hsr_slave_0: entered promiscuous mode [ 30.292769][ T3317] hsr_slave_1: entered promiscuous mode [ 30.298747][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.306336][ T3317] Cannot create hsr debugfs directory [ 30.313728][ T3315] hsr_slave_0: entered promiscuous mode [ 30.319760][ T3315] hsr_slave_1: entered promiscuous mode [ 30.325668][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.333225][ T3315] Cannot create hsr debugfs directory [ 30.370140][ T3322] hsr_slave_0: entered promiscuous mode [ 30.376144][ T3322] hsr_slave_1: entered promiscuous mode [ 30.382006][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.389758][ T3322] Cannot create hsr debugfs directory [ 30.438468][ T3316] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.464045][ T3316] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.475021][ T3316] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.510293][ T3316] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.568544][ T3319] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.579881][ T3319] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.588988][ T3319] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.601555][ T3319] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.629255][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.641762][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.652465][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.667133][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.706539][ T3322] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.717555][ T3322] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.726604][ T3322] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.741446][ T3322] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.755353][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.772804][ T3317] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.781881][ T3317] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.790847][ T3317] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.800130][ T3317] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.832338][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.861912][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.876310][ T373] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.883382][ T373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.892311][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.899502][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.934044][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.948839][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.957636][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.964696][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.977337][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.986747][ T373] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.993992][ T373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.021451][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.033953][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.053201][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.060329][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.069328][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.076391][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.089270][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.096383][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.106943][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.114009][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.153436][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.182082][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.196904][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.217708][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.224810][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.257358][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.264503][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.300492][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.327134][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.389987][ T3316] veth0_vlan: entered promiscuous mode [ 31.427279][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.439036][ T3316] veth1_vlan: entered promiscuous mode [ 31.468527][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.479437][ T3319] veth0_vlan: entered promiscuous mode [ 31.510707][ T3315] veth0_vlan: entered promiscuous mode [ 31.523466][ T3316] veth0_macvtap: entered promiscuous mode [ 31.532081][ T3319] veth1_vlan: entered promiscuous mode [ 31.551902][ T3316] veth1_macvtap: entered promiscuous mode [ 31.561883][ T3315] veth1_vlan: entered promiscuous mode [ 31.577161][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.594527][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.606082][ T3319] veth0_macvtap: entered promiscuous mode [ 31.614349][ T3319] veth1_macvtap: entered promiscuous mode [ 31.623746][ T3316] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.632732][ T3316] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.641496][ T3316] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.650238][ T3316] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.672004][ T3317] veth0_vlan: entered promiscuous mode [ 31.681351][ T3317] veth1_vlan: entered promiscuous mode [ 31.695006][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.705516][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.716730][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.733562][ T3319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.744472][ T3319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.754963][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.766803][ T3319] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.775695][ T3319] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.784413][ T3319] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.793213][ T3319] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.809900][ T3315] veth0_macvtap: entered promiscuous mode [ 31.821261][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.844256][ T3315] veth1_macvtap: entered promiscuous mode [ 31.872887][ T3317] veth0_macvtap: entered promiscuous mode [ 31.893095][ T3317] veth1_macvtap: entered promiscuous mode [ 31.907563][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.918096][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.927959][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.931808][ T3453] loop3: detected capacity change from 0 to 2048 [ 31.938402][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.940017][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.983904][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.994598][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.004570][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.015159][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.024976][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.035463][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.050344][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.059000][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.069466][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.079305][ T3315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.089814][ T3315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.101026][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.110726][ T3453] loop3: p1 < > p4 [ 32.117235][ T3322] veth0_vlan: entered promiscuous mode [ 32.124340][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.134912][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.144820][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.155337][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.165235][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.175760][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.186931][ T3453] loop3: p4 size 8388608 extends beyond EOD, truncated [ 32.187894][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.195326][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 32.195343][ T29] audit: type=1400 audit(1731807489.146:132): avc: denied { mounton } for pid=3452 comm="syz.3.6" path="/1/bus" dev="tmpfs" ino=22 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.234688][ T3317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.243516][ T3317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.252252][ T3317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.261058][ T3317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.274763][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.283639][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.292427][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.298422][ T29] audit: type=1400 audit(1731807489.256:133): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 32.301232][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.323677][ T3017] loop3: p1 < > p4 [ 32.336889][ T3322] veth1_vlan: entered promiscuous mode [ 32.343493][ T3017] loop3: p4 size 8388608 extends beyond EOD, truncated [ 32.373287][ T3322] veth0_macvtap: entered promiscuous mode [ 32.411583][ T3322] veth1_macvtap: entered promiscuous mode [ 32.427893][ T3309] udevd[3309]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 32.446402][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 32.453880][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.466785][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.476755][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.487323][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.497298][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.507927][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.517923][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.528425][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.543044][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.579024][ T29] audit: type=1400 audit(1731807489.536:134): avc: denied { create } for pid=3471 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.598526][ T29] audit: type=1400 audit(1731807489.536:135): avc: denied { ioctl } for pid=3471 comm="syz.0.1" path="socket:[4696]" dev="sockfs" ino=4696 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.626047][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.636613][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.646672][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.657175][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.667022][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.677490][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.687359][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.697832][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.709518][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.718460][ T3477] loop3: detected capacity change from 0 to 2048 [ 32.736424][ T29] audit: type=1400 audit(1731807489.696:136): avc: denied { create } for pid=3472 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 32.749077][ T3477] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.756173][ T29] audit: type=1400 audit(1731807489.696:137): avc: denied { ioctl } for pid=3472 comm="syz.1.2" path="socket:[4698]" dev="sockfs" ino=4698 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 32.792934][ T29] audit: type=1400 audit(1731807489.726:138): avc: denied { mount } for pid=3476 comm="syz.3.11" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.801569][ T3477] 9p: Unknown Cache mode or invalid value l=any [ 32.814449][ T29] audit: type=1400 audit(1731807489.746:139): avc: denied { mounton } for pid=3476 comm="syz.3.11" path="/4/file0/file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 32.852921][ T3474] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.860270][ T3474] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.886248][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.913960][ T29] audit: type=1400 audit(1731807489.866:140): avc: denied { write } for pid=3484 comm="syz.2.13" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 32.940893][ T29] audit: type=1400 audit(1731807489.866:141): avc: denied { mount } for pid=3486 comm="syz.3.12" name="/" dev="ramfs" ino=4707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 33.002309][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.024626][ T3474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.087307][ T3474] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.096513][ T3474] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.105722][ T3474] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.114624][ T3474] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.151909][ T3478] bridge_slave_0: left allmulticast mode [ 33.157706][ T3478] bridge_slave_0: left promiscuous mode [ 33.163367][ T3478] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.171623][ T3498] loop3: detected capacity change from 0 to 512 [ 33.181298][ T3498] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.190576][ T3478] bridge_slave_1: left allmulticast mode [ 33.196546][ T3478] bridge_slave_1: left promiscuous mode [ 33.202330][ T3478] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.207104][ T3498] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.222252][ T3498] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.233775][ T3478] bond0: (slave bond_slave_0): Releasing backup interface [ 33.244291][ T3478] bond0: (slave bond_slave_1): Releasing backup interface [ 33.253942][ T3478] team0: Port device team_slave_0 removed [ 33.261007][ T3478] team0: Port device team_slave_1 removed [ 33.267027][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.274832][ T3478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.292415][ T3322] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.301440][ T3322] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.310284][ T3322] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.319118][ T3322] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.341446][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.381919][ T3504] loop0: detected capacity change from 0 to 512 [ 33.388847][ T3502] loop1: detected capacity change from 0 to 2048 [ 33.396887][ T3504] EXT4-fs: Ignoring removed i_version option [ 33.439394][ T3504] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c018, mo2=0002] [ 33.449507][ T3502] loop1: p1 < > p3 [ 33.455995][ T3502] loop1: p3 size 134217728 extends beyond EOD, truncated [ 33.463614][ T3504] System zones: 0-2, 18-18, 34-35 [ 33.474871][ T3504] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.506568][ T3504] ext4 filesystem being mounted at /1/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.510982][ T3017] loop1: p1 < > p3 [ 33.521261][ T3017] loop1: p3 size 134217728 extends beyond EOD, truncated [ 33.531811][ T3515] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.550488][ T3518] loop1: detected capacity change from 0 to 128 [ 33.557211][ T3504] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 33.573497][ T3468] udevd[3468]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 33.585234][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 33.619746][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 33.630099][ T3521] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 33.651949][ T3518] syz.1.23: attempt to access beyond end of device [ 33.651949][ T3518] loop1: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 33.661392][ T3524] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'. [ 33.675756][ T3468] udevd[3468]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 33.688160][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.700209][ T3525] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.806651][ T3535] loop3: detected capacity change from 0 to 1024 [ 33.829089][ T3535] EXT4-fs: Ignoring removed bh option [ 33.834594][ T3535] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.846801][ T3535] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.896933][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.928761][ T3542] pim6reg1: entered promiscuous mode [ 33.934136][ T3542] pim6reg1: entered allmulticast mode [ 33.946693][ T3545] loop3: detected capacity change from 0 to 1024 [ 33.954465][ T3545] EXT4-fs: Ignoring removed orlov option [ 33.955588][ T3546] loop4: detected capacity change from 0 to 512 [ 33.960247][ T3545] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.976601][ T3546] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.989762][ T3546] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.000660][ T3546] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.007365][ T3545] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.014145][ T3546] EXT4-fs (loop4): 1 truncate cleaned up [ 34.032101][ T3546] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.065475][ T3546] EXT4-fs error (device loop4): ext4_xattr_inode_iget:440: comm syz.4.31: inode #1073372648: comm syz.4.31: iget: illegal inode # [ 34.079650][ T3546] EXT4-fs error (device loop4): ext4_xattr_inode_iget:445: comm syz.4.31: error while reading EA inode 1073372648 err=-117 [ 34.093062][ T3546] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.31: corrupted xattr block 33: invalid header [ 34.115244][ T3546] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 34.139933][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.169940][ T3322] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.192750][ T3556] loop3: detected capacity change from 0 to 512 [ 34.202055][ T3556] ======================================================= [ 34.202055][ T3556] WARNING: The mand mount option has been deprecated and [ 34.202055][ T3556] and is ignored by this kernel. Remove the mand [ 34.202055][ T3556] option from the mount to silence this warning. [ 34.202055][ T3556] ======================================================= [ 34.242107][ T3558] loop4: detected capacity change from 0 to 512 [ 34.255032][ T3556] EXT4-fs error (device loop3): ext4_orphan_get:1388: inode #17: comm syz.3.36: iget: bogus i_mode (0) [ 34.266955][ T3556] EXT4-fs error (device loop3): ext4_orphan_get:1393: comm syz.3.36: couldn't read orphan inode 17 (err -117) [ 34.268417][ T3558] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.35: corrupted in-inode xattr: invalid ea_ino [ 34.280189][ T3556] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.293982][ T3558] EXT4-fs error (device loop4): ext4_orphan_get:1393: comm syz.4.35: couldn't read orphan inode 15 (err -117) [ 34.317326][ T3556] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.36: bg 0: block 7: invalid block bitmap [ 34.317489][ T3558] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.364484][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.419956][ T3322] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 34.779650][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 34.787698][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 34.799478][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 34.807380][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 34.815369][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 34.823236][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 34.831229][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 34.839150][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 34.847014][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 34.854850][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 34.862690][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 34.870516][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 34.878389][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 34.886240][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 34.894126][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 34.902030][ T8] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x0 [ 34.910923][ T8] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 35.110323][ T3590] syzkaller0: entered promiscuous mode [ 35.115890][ T3590] syzkaller0: entered allmulticast mode [ 35.324334][ T3599] loop3: detected capacity change from 0 to 1024 [ 35.331237][ T3599] EXT4-fs: Ignoring removed orlov option [ 35.337164][ T3599] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.364309][ T3597] syzkaller0: entered promiscuous mode [ 35.369881][ T3597] syzkaller0: entered allmulticast mode [ 35.381948][ T3599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.396658][ T3601] sd 0:0:1:0: device reset [ 35.400143][ T3599] process 'syz.3.53' launched './file0/file0' with NULL argv: empty string added [ 35.437592][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.489777][ T3615] : renamed from bond0 (while UP) [ 35.708333][ T3629] loop0: detected capacity change from 0 to 1024 [ 35.737780][ T3629] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 35.799391][ T3631] loop1: detected capacity change from 0 to 164 [ 35.825876][ T373] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.842325][ T3631] Unable to read rock-ridge attributes [ 35.856585][ T3631] Unable to read rock-ridge attributes [ 35.898691][ T373] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.961032][ T373] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.050992][ T373] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.129745][ T3638] chnl_net:caif_netlink_parms(): no params data found [ 36.177601][ T373] bridge_slave_1: left allmulticast mode [ 36.183301][ T373] bridge_slave_1: left promiscuous mode [ 36.189481][ T373] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.200442][ T373] bridge_slave_0: left allmulticast mode [ 36.206173][ T373] bridge_slave_0: left promiscuous mode [ 36.211969][ T373] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.328429][ T373] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.350171][ T373] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.385038][ T373] bond0 (unregistering): Released all slaves [ 36.449583][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.456761][ T3638] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.474381][ T3638] bridge_slave_0: entered allmulticast mode [ 36.482339][ T3638] bridge_slave_0: entered promiscuous mode [ 36.491025][ T373] hsr_slave_0: left promiscuous mode [ 36.515574][ T373] hsr_slave_1: left promiscuous mode [ 36.534309][ T373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.541856][ T373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.571508][ T373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.579100][ T373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.593803][ T373] veth1_macvtap: left promiscuous mode [ 36.599422][ T373] veth0_macvtap: left promiscuous mode [ 36.605032][ T373] veth1_vlan: left promiscuous mode [ 36.610473][ T373] veth0_vlan: left promiscuous mode [ 36.632404][ T3666] loop3: detected capacity change from 0 to 1024 [ 36.655669][ T3666] EXT4-fs: Ignoring removed bh option [ 36.676954][ T3666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.743352][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.860721][ T373] team0 (unregistering): Port device team_slave_1 removed [ 36.871737][ T373] team0 (unregistering): Port device team_slave_0 removed [ 36.916174][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.923381][ T3638] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.932996][ T3638] bridge_slave_1: entered allmulticast mode [ 36.940007][ T3638] bridge_slave_1: entered promiscuous mode [ 36.998708][ T3638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.024050][ T3638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.030327][ T3690] loop1: detected capacity change from 0 to 256 [ 37.069266][ T3690] FAT-fs (loop1): Directory bread(block 64) failed [ 37.083430][ T3638] team0: Port device team_slave_0 added [ 37.084253][ T3695] loop3: detected capacity change from 0 to 512 [ 37.093467][ T3638] team0: Port device team_slave_1 added [ 37.105187][ T3690] FAT-fs (loop1): Directory bread(block 65) failed [ 37.121362][ T3690] FAT-fs (loop1): Directory bread(block 66) failed [ 37.136080][ T3638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.143072][ T3638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.143822][ T3695] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.169291][ T3638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.189897][ T3695] EXT4-fs (loop3): invalid inodes per group: 4294901792 [ 37.189897][ T3695] [ 37.199123][ T3690] FAT-fs (loop1): Directory bread(block 67) failed [ 37.210614][ T3638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.217642][ T3638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.218545][ T3690] FAT-fs (loop1): Directory bread(block 68) failed [ 37.243842][ T3638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.283366][ T3690] FAT-fs (loop1): Directory bread(block 69) failed [ 37.292695][ T3690] FAT-fs (loop1): Directory bread(block 70) failed [ 37.301804][ T3638] hsr_slave_0: entered promiscuous mode [ 37.309830][ T3638] hsr_slave_1: entered promiscuous mode [ 37.315703][ T3690] FAT-fs (loop1): Directory bread(block 71) failed [ 37.322776][ T3638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.331773][ T3690] FAT-fs (loop1): Directory bread(block 72) failed [ 37.335524][ T3695] loop3: detected capacity change from 0 to 512 [ 37.338416][ T3638] Cannot create hsr debugfs directory [ 37.368897][ T3695] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.371176][ T3690] FAT-fs (loop1): Directory bread(block 73) failed [ 37.402039][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 37.402054][ T29] audit: type=1400 audit(1731807494.356:389): avc: denied { mount } for pid=3689 comm="syz.1.79" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.443778][ T3695] EXT4-fs (loop3): 1 truncate cleaned up [ 37.450166][ T3695] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.450414][ T3690] syz.1.79: attempt to access beyond end of device [ 37.450414][ T3690] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 37.481160][ T3690] syz.1.79: attempt to access beyond end of device [ 37.481160][ T3690] loop1: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 37.494296][ T3690] Buffer I/O error on dev loop1, logical block 442, async page read [ 37.513395][ T29] audit: type=1400 audit(1731807494.466:390): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 37.540149][ T3695] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.80: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 37.560547][ T29] audit: type=1400 audit(1731807494.496:391): avc: denied { create } for pid=3692 comm="syz.3.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 37.629459][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.662724][ T29] audit: type=1400 audit(1731807494.616:392): avc: denied { create } for pid=3710 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.728929][ T29] audit: type=1400 audit(1731807494.636:393): avc: denied { connect } for pid=3710 comm="syz.1.82" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 37.748459][ T29] audit: type=1400 audit(1731807494.646:394): avc: denied { read } for pid=3708 comm="syz.0.81" path="socket:[5152]" dev="sockfs" ino=5152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.783304][ T3638] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.798157][ T3719] loop2: detected capacity change from 0 to 256 [ 37.807130][ T29] audit: type=1400 audit(1731807494.766:395): avc: denied { watch watch_reads } for pid=3713 comm="syz.1.84" path="/19/file0" dev="tmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.832653][ T3638] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.841583][ T3719] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 37.850819][ T29] audit: type=1400 audit(1731807494.806:396): avc: denied { create } for pid=3723 comm="syz.3.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 37.874568][ T29] audit: type=1400 audit(1731807494.806:397): avc: denied { sys_admin } for pid=3723 comm="syz.3.86" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 37.895379][ T29] audit: type=1400 audit(1731807494.806:398): avc: denied { checkpoint_restore } for pid=3723 comm="syz.3.86" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 37.926254][ T3638] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.944902][ T3638] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.023415][ T3738] tipc: Started in network mode [ 38.028373][ T3738] tipc: Node identity ac1414aa, cluster identity 4711 [ 38.035483][ T3738] tipc: Enabled bearer , priority 10 [ 38.096143][ T3746] pim6reg1: entered promiscuous mode [ 38.101498][ T3746] pim6reg1: entered allmulticast mode [ 38.138793][ C0] hrtimer: interrupt took 36726 ns [ 38.236862][ T3638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.265895][ T3757] loop2: detected capacity change from 0 to 512 [ 38.292785][ T3638] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.428393][ T3774] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.97'. [ 38.443025][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.450211][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.459136][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.466305][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.513197][ T3638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.523629][ T3638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.645559][ T3638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.819447][ T3638] veth0_vlan: entered promiscuous mode [ 38.828458][ T3638] veth1_vlan: entered promiscuous mode [ 38.859620][ T3638] veth0_macvtap: entered promiscuous mode [ 38.874785][ T3638] veth1_macvtap: entered promiscuous mode [ 38.905769][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.916285][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.926407][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.937046][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.946905][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.957402][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.970591][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.984565][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.995076][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.005026][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.015589][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.025488][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.036226][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.072334][ T3835] loop1: detected capacity change from 0 to 512 [ 39.079606][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.095542][ T3638] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.104372][ T3638] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.112480][ T3837] syz.3.104[3837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.113127][ T3638] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.113531][ T3837] syz.3.104[3837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.124387][ T3638] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.155248][ T3837] syz.3.104[3837] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.157838][ T3393] tipc: Node number set to 2886997162 [ 39.184313][ T3835] EXT4-fs error (device loop1): __ext4_iget:4952: inode #15: block 1803188595: comm syz.1.103: invalid block [ 39.216404][ T3835] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.103: couldn't read orphan inode 15 (err -117) [ 39.256838][ T3835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.287276][ T3845] veth0_vlan: entered allmulticast mode [ 39.384700][ T3845] veth0_vlan: left promiscuous mode [ 39.399481][ T3845] veth0_vlan: entered promiscuous mode [ 39.424202][ T3864] syz.2.109[3864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.424349][ T3864] syz.2.109[3864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.425248][ T3835] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.103: invalid indirect mapped block 234881024 (level 0) [ 39.476462][ T3864] syz.2.109[3864] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 39.517066][ T3867] pim6reg1: entered promiscuous mode [ 39.534183][ T3867] pim6reg1: entered allmulticast mode [ 39.634702][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.771528][ T3890] syz.3.117 (3890) used greatest stack depth: 10128 bytes left [ 39.803833][ T3900] syz.0.121 uses obsolete (PF_INET,SOCK_PACKET) [ 40.093283][ T3942] loop0: detected capacity change from 0 to 256 [ 40.108969][ T3942] FAT-fs (loop0): bogus number of FAT sectors [ 40.115146][ T3942] FAT-fs (loop0): Can't find a valid FAT filesystem [ 40.117093][ T3926] loop3: detected capacity change from 0 to 8192 [ 40.277303][ T3957] loop0: detected capacity change from 0 to 128 [ 40.471912][ T3978] loop1: detected capacity change from 0 to 512 [ 40.497808][ T3978] EXT4-fs: Ignoring removed nobh option [ 40.503454][ T3978] EXT4-fs: Ignoring removed nobh option [ 40.534813][ T3978] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 40.543663][ T3978] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.143: invalid indirect mapped block 2683928664 (level 1) [ 40.560525][ T3978] EXT4-fs (loop1): 1 truncate cleaned up [ 40.566812][ T3978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.607956][ T3994] rdma_op ffff88811552b580 conn xmit_rdma 0000000000000000 [ 40.673177][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.720032][ T4006] loop5: detected capacity change from 0 to 1024 [ 40.721009][ T4008] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 40.737270][ T4006] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.787173][ T4008] netlink: 'syz.2.149': attribute type 4 has an invalid length. [ 40.817784][ T3638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.379376][ T4045] netlink: 'syz.0.164': attribute type 27 has an invalid length. [ 41.382493][ T4050] loop1: detected capacity change from 0 to 128 [ 41.387258][ T4045] C: renamed from team_slave_0 [ 41.404357][ T4050] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.417685][ T4050] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.479522][ T4057] loop0: detected capacity change from 0 to 128 [ 41.519917][ T4057] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.534914][ T4057] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.588475][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.598819][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.533464][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 42.533478][ T29] audit: type=1400 audit(1731807499.486:492): avc: denied { tracepoint } for pid=4091 comm="syz.2.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 42.736990][ T29] audit: type=1400 audit(1731807499.696:493): avc: denied { watch watch_reads } for pid=4108 comm="syz.0.187" path="/proc/94" dev="proc" ino=6736 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 42.798820][ T4112] loop0: detected capacity change from 0 to 2048 [ 42.829642][ T4117] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.833808][ T4112] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.854434][ T29] audit: type=1400 audit(1731807499.806:494): avc: denied { create } for pid=4111 comm="syz.0.188" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.876293][ T4121] syz.2.190[4121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.876371][ T4121] syz.2.190[4121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.882532][ T29] audit: type=1400 audit(1731807499.806:495): avc: denied { write open } for pid=4111 comm="syz.0.188" path="/39/file1/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 42.889248][ T4121] syz.2.190[4121] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 42.902289][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.948042][ T4117] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.980434][ T4123] loop0: detected capacity change from 0 to 512 [ 42.987477][ T4123] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 42.998418][ T4123] EXT4-fs (loop0): 1 truncate cleaned up [ 43.004565][ T4123] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.019599][ T29] audit: type=1400 audit(1731807499.976:496): avc: denied { read } for pid=4122 comm="syz.0.191" path="/40/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.042471][ T29] audit: type=1400 audit(1731807499.996:497): avc: denied { mounton } for pid=4122 comm="syz.0.191" path="/40/bus/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.068391][ T4117] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.087334][ T29] audit: type=1400 audit(1731807500.046:498): avc: denied { map } for pid=4125 comm="syz.3.192" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.111165][ T29] audit: type=1400 audit(1731807500.046:499): avc: denied { execute } for pid=4125 comm="syz.3.192" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.148088][ T4123] loop0: detected capacity change from 512 to 0 [ 43.154775][ C0] I/O error, dev loop0, sector 26 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 0 [ 43.164655][ T4127] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz.0.191: error -5 reading directory block [ 43.181037][ T4127] syz.0.191: attempt to access beyond end of device [ 43.181037][ T4127] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 43.195354][ T4127] syz.0.191: attempt to access beyond end of device [ 43.195354][ T4127] loop0: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 43.212205][ T4127] syz.0.191: attempt to access beyond end of device [ 43.212205][ T4127] loop0: rw=524288, sector=16, nr_sectors = 2 limit=0 [ 43.219022][ T4117] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.226027][ T4127] syz.0.191: attempt to access beyond end of device [ 43.226027][ T4127] loop0: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 43.249742][ T4127] syz.0.191: attempt to access beyond end of device [ 43.249742][ T4127] loop0: rw=12288, sector=10, nr_sectors = 2 limit=0 [ 43.263026][ T4127] EXT4-fs error (device loop0): ext4_get_inode_loc:4541: inode #2: block 5: comm syz.0.191: unable to read itable block [ 43.275873][ T4127] syz.0.191: attempt to access beyond end of device [ 43.275873][ T4127] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 43.289156][ T4127] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 43.297878][ T4127] EXT4-fs (loop0): I/O error while writing superblock [ 43.304674][ T4127] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5780: IO failure [ 43.314128][ T4127] syz.0.191: attempt to access beyond end of device [ 43.314128][ T4127] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 43.327425][ T4127] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 43.336028][ T4127] EXT4-fs (loop0): I/O error while writing superblock [ 43.342823][ T4127] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.191: mark_inode_dirty error [ 43.354312][ T4127] syz.0.191: attempt to access beyond end of device [ 43.354312][ T4127] loop0: rw=145409, sector=2, nr_sectors = 2 limit=0 [ 43.367594][ T4127] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 43.376343][ T4127] EXT4-fs (loop0): I/O error while writing superblock [ 43.407232][ T3317] syz-executor: attempt to access beyond end of device [ 43.407232][ T3317] loop0: rw=12288, sector=26, nr_sectors = 2 limit=0 [ 43.411794][ T4131] loop5: detected capacity change from 0 to 2048 [ 43.422234][ T3317] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 43.452134][ T28] kworker/u8:1: attempt to access beyond end of device [ 43.452134][ T28] loop0: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 43.469871][ T28] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4526: inode #2: block 5: comm kworker/u8:1: unable to read itable block [ 43.477190][ T4131] EXT4-fs error (device loop5): __ext4_fill_super:5458: inode #2: comm syz.5.194: casefold flag without casefold feature [ 43.483811][ T28] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 43.505867][ T28] EXT4-fs (loop0): I/O error while writing superblock [ 43.512724][ T4131] EXT4-fs (loop5): get root inode failed [ 43.518441][ T4131] EXT4-fs (loop5): mount failed [ 43.523982][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.533317][ T3317] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 43.557219][ T3317] EXT4-fs (loop0): I/O error while writing superblock [ 43.593918][ T4136] loop5: detected capacity change from 0 to 2048 [ 43.607898][ T4117] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.632884][ T29] audit: type=1400 audit(1731807500.586:500): avc: denied { remount } for pid=4133 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.649474][ T4117] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.662759][ T4136] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.683693][ T4136] netlink: zone id is out of range [ 43.688922][ T4136] netlink: zone id is out of range [ 43.694056][ T4136] netlink: zone id is out of range [ 43.720297][ T3638] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.720763][ T4117] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.740909][ T4117] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 43.778411][ T29] audit: type=1400 audit(1731807500.736:501): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 43.870882][ T4156] loop2: detected capacity change from 0 to 512 [ 43.886304][ T4156] EXT4-fs: Ignoring removed oldalloc option [ 43.949974][ T4164] loop3: detected capacity change from 0 to 2048 [ 43.961123][ T4168] loop1: detected capacity change from 0 to 512 [ 43.988642][ T4156] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.010814][ T4168] EXT4-fs error (device loop1): ext4_orphan_get:1388: inode #15: comm syz.1.206: iget: bad extended attribute block 1 [ 44.027445][ T4164] loop3: p1 < > p4 [ 44.062971][ T4175] loop5: detected capacity change from 0 to 128 [ 44.065228][ T4164] loop3: p4 size 393216 extends beyond EOD, truncated [ 44.075715][ T4175] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 44.090492][ T4168] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.206: couldn't read orphan inode 15 (err -117) [ 44.108501][ T4156] EXT4-fs (loop2): 1 truncate cleaned up [ 44.135662][ T4156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.148510][ T4168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.167642][ T11] bond0 (unregistering): Released all slaves [ 44.175613][ T4168] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.195788][ T4175] netlink: 8 bytes leftover after parsing attributes in process `syz.5.208'. [ 44.235419][ T11] hsr_slave_0: left promiscuous mode [ 44.242171][ T11] hsr_slave_1: left promiscuous mode [ 44.281521][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.353006][ T4195] syz.5.210[4195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.353078][ T4195] syz.5.210[4195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.372765][ T4195] syz.5.210[4195] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 44.419838][ T4195] serio: Serial port ptm1 [ 44.611041][ T4141] chnl_net:caif_netlink_parms(): no params data found [ 44.712459][ T4141] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.719747][ T4141] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.727079][ T4141] bridge_slave_0: entered allmulticast mode [ 44.733618][ T4141] bridge_slave_0: entered promiscuous mode [ 44.740713][ T4141] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.748053][ T4141] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.755630][ T4141] bridge_slave_1: entered allmulticast mode [ 44.762377][ T4141] bridge_slave_1: entered promiscuous mode [ 44.835546][ T4141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.853483][ T4141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.886667][ T4141] team0: Port device team_slave_0 added [ 44.901860][ T4141] team0: Port device team_slave_1 added [ 44.936714][ T4141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.943695][ T4141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.970002][ T4141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.040957][ T4141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.047978][ T4141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.075039][ T4141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.108766][ T4141] hsr_slave_0: entered promiscuous mode [ 45.115065][ T4141] hsr_slave_1: entered promiscuous mode [ 45.122465][ T4141] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.130371][ T4141] Cannot create hsr debugfs directory [ 45.233502][ T4141] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 45.243568][ T4141] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 45.252974][ T4141] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 45.274592][ T4141] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 45.322780][ T4141] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.336579][ T4141] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.346285][ T2128] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.353416][ T2128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.366660][ T2128] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.373926][ T2128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.393769][ T4141] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 45.404216][ T4141] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 45.490276][ T4141] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.629627][ T4141] veth0_vlan: entered promiscuous mode [ 45.638797][ T4141] veth1_vlan: entered promiscuous mode [ 45.656756][ T4141] veth0_macvtap: entered promiscuous mode [ 45.664141][ T4141] veth1_macvtap: entered promiscuous mode [ 45.675847][ T4141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.686440][ T4141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.696301][ T4141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.707656][ T4141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.717878][ T4141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.728338][ T4141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.738310][ T4141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 45.748854][ T4141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.760298][ T4141] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.771421][ T4141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.781913][ T4141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.791925][ T4141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.802618][ T4141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.812474][ T4141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.822986][ T4141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.832894][ T4141] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 45.843348][ T4141] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 45.854612][ T4141] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.863265][ T4141] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.872104][ T4141] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.880900][ T4141] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.889723][ T4141] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.045960][ T4339] Zero length message leads to an empty skb [ 46.067212][ T4338] ref_ctr_offset mismatch. inode: 0xe0 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x82 [ 46.238547][ T4365] pim6reg1: entered promiscuous mode [ 46.243947][ T4365] pim6reg1: entered allmulticast mode [ 46.323647][ T4376] loop3: detected capacity change from 0 to 512 [ 46.341514][ T4376] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 46.369729][ T4376] EXT4-fs (loop3): 1 truncate cleaned up [ 46.390276][ T4376] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.498701][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.711444][ T4418] syz.1.243[4418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.711549][ T4418] syz.1.243[4418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.722997][ T4418] syz.1.243[4418] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.515227][ C0] ================================================================== [ 112.534540][ C0] BUG: KCSAN: data-race in __tmigr_cpu_deactivate / tmigr_handle_remote [ 112.542891][ C0] [ 112.545208][ C0] write to 0xffff888237d205dc of 1 bytes by task 0 on cpu 1: [ 112.552572][ C0] __tmigr_cpu_deactivate+0xa1/0x410 [ 112.557876][ C0] tmigr_cpu_deactivate+0x66/0x180 [ 112.563002][ C0] __get_next_timer_interrupt+0x137/0x530 [ 112.568722][ C0] timer_base_try_to_set_idle+0x54/0x60 [ 112.574268][ C0] tick_nohz_idle_stop_tick+0x15b/0x650 [ 112.579817][ C0] do_idle+0x178/0x230 [ 112.583896][ C0] cpu_startup_entry+0x25/0x30 [ 112.588665][ C0] start_secondary+0x96/0xa0 [ 112.593254][ C0] common_startup_64+0x12c/0x137 [ 112.598218][ C0] [ 112.600531][ C0] read to 0xffff888237d205dc of 1 bytes by interrupt on cpu 0: [ 112.608066][ C0] tmigr_handle_remote+0x26e/0x940 [ 112.613196][ C0] run_timer_softirq+0x5f/0x70 [ 112.618053][ C0] handle_softirqs+0xbf/0x280 [ 112.622746][ C0] irq_exit_rcu+0x3e/0x90 [ 112.627070][ C0] sysvec_apic_timer_interrupt+0x73/0x80 [ 112.632712][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 112.638690][ C0] acpi_safe_halt+0x21/0x30 [ 112.643192][ C0] acpi_idle_do_entry+0x1d/0x30 [ 112.648059][ C0] acpi_idle_enter+0x96/0xb0 [ 112.652655][ C0] cpuidle_enter_state+0xc5/0x260 [ 112.657683][ C0] cpuidle_enter+0x40/0x70 [ 112.662104][ C0] do_idle+0x195/0x230 [ 112.666178][ C0] cpu_startup_entry+0x25/0x30 [ 112.670954][ C0] rest_init+0xef/0xf0 [ 112.675039][ C0] start_kernel+0x586/0x5e0 [ 112.679543][ C0] x86_64_start_reservations+0x2a/0x30 [ 112.685006][ C0] x86_64_start_kernel+0x9a/0xa0 [ 112.689946][ C0] common_startup_64+0x12c/0x137 [ 112.694896][ C0] [ 112.697212][ C0] value changed: 0x01 -> 0x00 [ 112.701880][ C0] [ 112.704192][ C0] Reported by Kernel Concurrency Sanitizer on: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 112.710343][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.12.0-rc7-syzkaller-00192-gb5a24181e461 #0 [ 112.720663][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 112.730715][ C0] ================================================================== [ 112.741532][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 112.741547][ T29] audit: type=1400 audit(1731807569.696:605): avc: denied { write } for pid=3305 comm="syz-executor" path="pipe:[2462]" dev="pipefs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 113.029993][ T2128] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.088957][ T2128] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.148698][ T2128] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.228197][ T2128] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.312961][ T2128] bridge_slave_1: left allmulticast mode [ 113.318709][ T2128] bridge_slave_1: left promiscuous mode [ 113.324452][ T2128] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.332249][ T2128] bridge_slave_0: left allmulticast mode [ 113.338021][ T2128] bridge_slave_0: left promiscuous mode [ 113.343690][ T2128] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.437623][ T2128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.447912][ T2128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.457852][ T2128] bond0 (unregistering): Released all slaves [ 113.498891][ T2128] hsr_slave_0: left promiscuous mode [ 113.504613][ T2128] hsr_slave_1: left promiscuous mode [ 113.510588][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.518035][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.526885][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.534303][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.544080][ T2128] veth1_macvtap: left promiscuous mode [ 113.549687][ T2128] veth0_macvtap: left promiscuous mode [ 113.555377][ T2128] veth1_vlan: left promiscuous mode [ 113.560618][ T2128] veth0_vlan: left promiscuous mode [ 113.643831][ T2128] team0 (unregistering): Port device team_slave_1 removed [ 113.654047][ T2128] team0 (unregistering): Port device team_slave_0 removed [ 113.941081][ T2128] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.988977][ T2128] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.038423][ T2128] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.088518][ T2128] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.164087][ T2128] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.208585][ T2128] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.247850][ T2128] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.298491][ T2128] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.368565][ T2128] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.417475][ T2128] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.456987][ T2128] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.497811][ T2128] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.569537][ T2128] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.608368][ T2128] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.649302][ T2128] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.698606][ T2128] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.769685][ T2128] bridge_slave_1: left allmulticast mode [ 114.775398][ T2128] bridge_slave_1: left promiscuous mode [ 114.781103][ T2128] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.791154][ T2128] bridge_slave_0: left allmulticast mode [ 114.796924][ T2128] bridge_slave_0: left promiscuous mode [ 114.802584][ T2128] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.811005][ T2128] bridge_slave_1: left allmulticast mode [ 114.816716][ T2128] bridge_slave_1: left promiscuous mode [ 114.822395][ T2128] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.830975][ T2128] bridge_slave_0: left allmulticast mode [ 114.836701][ T2128] bridge_slave_0: left promiscuous mode [ 114.842327][ T2128] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.850582][ T2128] bridge_slave_1: left allmulticast mode [ 114.856383][ T2128] bridge_slave_1: left promiscuous mode [ 114.862032][ T2128] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.869899][ T2128] bridge_slave_0: left allmulticast mode [ 114.875636][ T2128] bridge_slave_0: left promiscuous mode [ 114.881450][ T2128] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.889785][ T2128] bridge_slave_1: left allmulticast mode [ 114.895511][ T2128] bridge_slave_1: left promiscuous mode [ 114.901229][ T2128] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.909059][ T2128] bridge_slave_0: left allmulticast mode [ 114.914751][ T2128] bridge_slave_0: left promiscuous mode [ 114.920551][ T2128] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.337761][ T2128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.347962][ T2128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.358283][ T2128] bond0 (unregistering): Released all slaves [ 115.367269][ T2128]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.377109][ T2128]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.387217][ T2128]  (unregistering): Released all slaves [ 115.396145][ T2128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.406261][ T2128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.416828][ T2128] bond0 (unregistering): Released all slaves [ 115.425608][ T2128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.435907][ T2128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.445880][ T2128] bond0 (unregistering): Released all slaves [ 115.488712][ T2128] tipc: Disabling bearer [ 115.493720][ T2128] tipc: Left network mode [ 115.503756][ T2128] hsr_slave_0: left promiscuous mode [ 115.509682][ T2128] hsr_slave_1: left promiscuous mode [ 115.516519][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.523954][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.532080][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.539541][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.550318][ T2128] hsr_slave_0: left promiscuous mode [ 115.556250][ T2128] hsr_slave_1: left promiscuous mode [ 115.561887][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.569349][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.578489][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.586108][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.596686][ T2128] hsr_slave_0: left promiscuous mode [ 115.602440][ T2128] hsr_slave_1: left promiscuous mode [ 115.608183][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.615702][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.623183][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.630610][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.639557][ T2128] hsr_slave_0: left promiscuous mode [ 115.645987][ T2128] hsr_slave_1: left promiscuous mode [ 115.651684][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.659139][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.666698][ T2128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.674073][ T2128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.686827][ T2128] veth1_macvtap: left promiscuous mode [ 115.692534][ T2128] veth0_macvtap: left promiscuous mode [ 115.698071][ T2128] veth1_vlan: left promiscuous mode [ 115.703393][ T2128] veth0_vlan: left promiscuous mode [ 115.709223][ T2128] veth1_macvtap: left promiscuous mode [ 115.714755][ T2128] veth0_macvtap: left promiscuous mode [ 115.720507][ T2128] veth1_vlan: left promiscuous mode [ 115.725781][ T2128] veth0_vlan: left promiscuous mode [ 115.731440][ T2128] veth1_macvtap: left promiscuous mode [ 115.737034][ T2128] veth0_macvtap: left promiscuous mode [ 115.742652][ T2128] veth1_vlan: left promiscuous mode [ 115.747939][ T2128] veth0_vlan: left promiscuous mode [ 115.753718][ T2128] veth1_macvtap: left promiscuous mode [ 115.759288][ T2128] veth0_macvtap: left promiscuous mode [ 115.764970][ T2128] veth1_vlan: left promiscuous mode [ 115.770315][ T2128] veth0_vlan: left promiscuous mode [ 115.966294][ T2128] team0 (unregistering): Port device team_slave_1 removed [ 115.976657][ T2128] team0 (unregistering): Port device team_slave_0 removed [ 116.037624][ T2128] team0 (unregistering): Port device team_slave_1 removed [ 116.049058][ T2128] team0 (unregistering): Port device team_slave_0 removed [ 116.109709][ T2128] team0 (unregistering): Port device team_slave_1 removed [ 116.119766][ T2128] team0 (unregistering): Port device team_slave_0 removed [ 116.179659][ T2128] team0 (unregistering): Port device team_slave_1 removed [ 116.189787][ T2128] team0 (unregistering): Port device team_slave_0 removed