last executing test programs: 1.703130302s ago: executing program 4 (id=162): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000a40)={[{@nodots}, {@nodots}, {@nodots}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@fat=@errors_remount}, {@nodots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {}, {@dots}, {@fat=@errors_continue}, {@dots}, {@fat=@flush}, {@nodots}, {@fat=@time_offset={'time_offset', 0x3d, 0x2000582}}, {@nodots}, {@fat=@nfs}]}, 0xfd, 0x201, &(0x7f0000000740)="$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") r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000280)=0x5, r3, 0x0, 0x0, 0x1}}, 0x20) 1.574716414s ago: executing program 4 (id=166): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000020000000000000030000000000000000000000004119202532aeecfcdbb73887feb3f14db126c935954a335f6469a793"], 0x138) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000009008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) 1.473174664s ago: executing program 4 (id=167): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x2000480, &(0x7f00000002c0), 0x1, 0x78e, &(0x7f0000001480)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0QQQVDxIOilZ1/qzasvV/0vPEhL1bRY8SCR2eym22Y33bTZ3WA+H5js88zM5nm++8w888zOsBPAnjWW/slEHIqID5OIkdr8JCIGqqn+iBPr691eXcmnUxJra6//nlTXubW6ko+G96QO1DKPR8QP70Yczmwut7y0PJsrFgsLtfxEZe78RHlp+ci5udxMYaYwf2xyauro8eeOH9u5WP/8efng9Y9eefrrE3+/89jVD35M4kQcrC1rjGOnjMVY7TMZSD/Cu7y804X1WNLrCvBA0l2zb30vj0MxEn3VVAtD3awZANApb0fEGgCwxySO/wCwx9S/B7i1upKvT739RqK7brwUEfvX469f31xf0l+7Zre/eh10+FZy15WRJCJGd6D8sYj4/Ns3v0yn6NB1SIBmLl2OiDOjY5v7/2TTPQvb9cxWC9cGqy9j98y+b//3/kNWCtjwXTr+eb7Z+C+zMf6JJuOfwSb77oO4//6fubYDxbSUjv9ebLi37XZD/DWjfbXc/6pjvoHk7LliIe3b/h8R4zEwmOYnq6s2vwtq/OY/N1uV3zj+++Pjt75Iy09f76yRudY/ePd7pnOV3MPGXXfjcsQT/c3iTzbaP2kx/j3VZhmvvvDeZ62WpfGn8danzfF31tqViKeatv+dtky2vD9xoro5TNQ3iia++eXT4VblN7Z/OqXl188FuiFt/+Gt4x9NGu/XLG+/jJ+ujHzfatn942++/e9L3qim99XmXcxVKguTEfuS1zbPP3rnvfV8ff00/vEnm+//W23/6TnhmTbj77/+21cPHn9npfFPb6v9t5+4enu2r1X57bX/VDU1XpvTTv/XbgUf5rMDAAAAAAAAAAAAAAAAAAAAAAAAgHZlIuJgJJnsRjqTyWbXn+H9aAxniqVy5fDZ0uL8dFSflT0aA5n6T12ONPwe6mTt9/Dr+aP35J+NiEci4pPBoWo+my8Vp3sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHGjx/P/Ur4O9rh0A0DH7W8zv63I9AIDuaXX8BwD+u7Z3/B/qWD0AgO5x/g8Ae0/bx/8zna0HANA9zv8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADosFMnT6bT2l+rK/k0P31haXG2dOHIdKE8m51bzGfzpYXz2ZlSaaZYyOZLcy3/0aX1l2KpdH4q5hcvTlQK5cpEeWn59Fxpcb5y+txcbqZwujDQtcgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoH3lpeXZXLFYWJDYMjG0O6qxaxL9sSuqIdGxRGMvMdS7DgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgl/s3AAD//4fPK2Y=") r0 = creat(&(0x7f0000005540)='./bus\x00', 0x4a) pwrite64(r0, &(0x7f0000000280)='+', 0x1, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) r2 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) 1.459648445s ago: executing program 3 (id=168): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000000), &(0x7f00000003c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.441189426s ago: executing program 2 (id=169): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x11, &(0x7f0000000040)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nouid32}, {@noblock_validity}, {@barrier}, {@data_writeback}]}, 0x1, 0x63e, &(0x7f0000000280)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x84, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 1.117960637s ago: executing program 2 (id=170): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = gettid() tkill(r0, 0x12) tkill(r0, 0x1) tkill(r1, 0x14) 1.093510249s ago: executing program 3 (id=171): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.044243683s ago: executing program 2 (id=172): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x1, r5}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) 1.029822214s ago: executing program 4 (id=174): bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(0x0, 0xd931d3864d39dcca) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000010400020000000000e8ff120200", @ANYRES32=0x0, @ANYBLOB="2b03000000000000200012800b00010067656e6576650000100002800600050000000000040006"], 0x40}}, 0x0) 1.014251646s ago: executing program 2 (id=175): mknodat$loop(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x6004, 0x1) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 945.911912ms ago: executing program 2 (id=176): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) creat(&(0x7f0000000080)='./cgroup/file0\x00', 0x0) 835.997303ms ago: executing program 3 (id=178): r0 = syz_io_uring_setup(0x3b, &(0x7f00000004c0)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x2736, &(0x7f00000003c0)={0x0, 0x0, 0x1}, &(0x7f0000000140)=0x0, &(0x7f0000000480)) syz_io_uring_submit(r2, r1, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) io_uring_enter(r0, 0x306f, 0x0, 0x0, 0x0, 0x0) 809.453695ms ago: executing program 3 (id=180): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x110, &(0x7f0000000180)={0x0, 0x0, 0x400, 0x0, 0x3de}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000100)=@IORING_OP_RENAMEAT={0x23, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)='./file1\x00', 0xffffffffffffffff, 0x0, 0xcee0817896735dd1}) io_uring_enter(r2, 0x7d79, 0x0, 0x0, 0x0, 0x0) 775.218268ms ago: executing program 3 (id=181): r0 = socket$pptp(0x18, 0x1, 0x2) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) ftruncate(r1, 0x51a9497) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004540)=[{{0x0, 0x0, &(0x7f00000017c0)=[{0x0}], 0x1}}], 0x1, 0x240080e4) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r2, 0x0) 757.57066ms ago: executing program 4 (id=182): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) close(r2) 705.808355ms ago: executing program 3 (id=183): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000d00)='kfree\x00', r0}, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000040)={0x1d, r2}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000240)=[{0x6}]}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 677.158667ms ago: executing program 4 (id=184): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xcf}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 312.208501ms ago: executing program 0 (id=189): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x549, &(0x7f0000001800)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000400000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mknod(0x0, 0x8001420, 0x0) creat(&(0x7f0000001700)='./file0\x00', 0x191) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) utimes(&(0x7f0000000040)='./file0\x00', 0x0) 134.501147ms ago: executing program 0 (id=192): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) unshare(0x2a020400) flistxattr(r0, 0x0, 0x0) 133.886517ms ago: executing program 1 (id=202): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000000c0)="c0", 0x1}], 0x1) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7b, 0x12, r0, 0x2000000) 107.83281ms ago: executing program 0 (id=193): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7, 0x0, 0x0, @void, @value}, 0x10) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) 89.210202ms ago: executing program 1 (id=194): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {}, [{{0x254, 0x1, {{}, 0x0, 0x0, 0x0, 0x0, 0x200, 'syz1\x00', "0a6bb88ed7cb25a61c63cb8086a719da0c4aae61a3d421a933203a8c4009bf4a", "7825a0d13670a6c274267e543d2774e64f2ec231e3d9ede42ee1bfb22d22b6cf", [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, {0x3}}]}}}]}, 0x268}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0xc, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r2, 0x9, 0x0) 62.432384ms ago: executing program 1 (id=195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @random="b6b7cd1e38be", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) read(r2, &(0x7f0000000140)=""/183, 0xb7) 61.888114ms ago: executing program 0 (id=196): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) alarm(0x0) 50.985935ms ago: executing program 0 (id=197): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x88700a, 0x0) 35.486537ms ago: executing program 0 (id=198): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r2, &(0x7f0000000040)=""/148, 0xffffff96) 35.084017ms ago: executing program 1 (id=199): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000080)=0x7, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000006000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{r1}, &(0x7f0000000680), &(0x7f00000006c0)='%+9llu \x00'}, 0x20) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)=""/252, 0xfc}}], 0x1, 0x0, 0x0) 15.479158ms ago: executing program 2 (id=200): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) 14.439018ms ago: executing program 1 (id=201): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r1, 0x0) 0s ago: executing program 1 (id=203): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000080)=0x14) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0x32) close(r1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.29' (ED25519) to the list of known hosts. [ 24.685331][ T29] audit: type=1400 audit(1728266751.792:82): avc: denied { mounton } for pid=3254 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.686300][ T3254] cgroup: Unknown subsys name 'net' [ 24.708028][ T29] audit: type=1400 audit(1728266751.792:83): avc: denied { mount } for pid=3254 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.735355][ T29] audit: type=1400 audit(1728266751.822:84): avc: denied { unmount } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.933872][ T3254] cgroup: Unknown subsys name 'cpuset' [ 24.939798][ T3254] cgroup: Unknown subsys name 'rlimit' [ 25.047202][ T29] audit: type=1400 audit(1728266752.152:85): avc: denied { setattr } for pid=3254 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.070520][ T29] audit: type=1400 audit(1728266752.152:86): avc: denied { create } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.090968][ T29] audit: type=1400 audit(1728266752.152:87): avc: denied { write } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.097701][ T3257] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.111285][ T29] audit: type=1400 audit(1728266752.152:88): avc: denied { read } for pid=3254 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.140057][ T29] audit: type=1400 audit(1728266752.152:89): avc: denied { mounton } for pid=3254 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.164872][ T29] audit: type=1400 audit(1728266752.152:90): avc: denied { mount } for pid=3254 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.188112][ T29] audit: type=1400 audit(1728266752.232:91): avc: denied { relabelto } for pid=3257 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.216446][ T3254] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.772627][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 26.832026][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.839185][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.846488][ T3264] bridge_slave_0: entered allmulticast mode [ 26.852925][ T3264] bridge_slave_0: entered promiscuous mode [ 26.860660][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.867728][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.874865][ T3264] bridge_slave_1: entered allmulticast mode [ 26.881199][ T3264] bridge_slave_1: entered promiscuous mode [ 26.927526][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.948633][ T3263] chnl_net:caif_netlink_parms(): no params data found [ 26.957857][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.973019][ T3271] chnl_net:caif_netlink_parms(): no params data found [ 27.001796][ T3270] chnl_net:caif_netlink_parms(): no params data found [ 27.017988][ T3264] team0: Port device team_slave_0 added [ 27.024431][ T3264] team0: Port device team_slave_1 added [ 27.074056][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.081116][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.088324][ T3263] bridge_slave_0: entered allmulticast mode [ 27.094560][ T3263] bridge_slave_0: entered promiscuous mode [ 27.112498][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.119440][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.145328][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.160523][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.167612][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.174802][ T3263] bridge_slave_1: entered allmulticast mode [ 27.181119][ T3263] bridge_slave_1: entered promiscuous mode [ 27.207034][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.213997][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.240025][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.255607][ T3271] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.262678][ T3271] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.269865][ T3271] bridge_slave_0: entered allmulticast mode [ 27.276125][ T3271] bridge_slave_0: entered promiscuous mode [ 27.289403][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.301447][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.318979][ T3271] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.326074][ T3271] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.333309][ T3271] bridge_slave_1: entered allmulticast mode [ 27.339649][ T3271] bridge_slave_1: entered promiscuous mode [ 27.358101][ T3267] chnl_net:caif_netlink_parms(): no params data found [ 27.366712][ T3263] team0: Port device team_slave_0 added [ 27.381767][ T3270] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.388878][ T3270] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.396064][ T3270] bridge_slave_0: entered allmulticast mode [ 27.402363][ T3270] bridge_slave_0: entered promiscuous mode [ 27.411947][ T3263] team0: Port device team_slave_1 added [ 27.422648][ T3271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.432064][ T3270] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.439208][ T3270] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.446333][ T3270] bridge_slave_1: entered allmulticast mode [ 27.452690][ T3270] bridge_slave_1: entered promiscuous mode [ 27.483155][ T3271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.501037][ T3270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.522406][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.529391][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.555274][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.567424][ T3264] hsr_slave_0: entered promiscuous mode [ 27.573527][ T3264] hsr_slave_1: entered promiscuous mode [ 27.584809][ T3270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.612011][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.618975][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.644850][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.656258][ T3271] team0: Port device team_slave_0 added [ 27.676106][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.683140][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.690236][ T3267] bridge_slave_0: entered allmulticast mode [ 27.696563][ T3267] bridge_slave_0: entered promiscuous mode [ 27.703570][ T3271] team0: Port device team_slave_1 added [ 27.713854][ T3270] team0: Port device team_slave_0 added [ 27.724136][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.731167][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.738351][ T3267] bridge_slave_1: entered allmulticast mode [ 27.744653][ T3267] bridge_slave_1: entered promiscuous mode [ 27.759655][ T3270] team0: Port device team_slave_1 added [ 27.775287][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.782280][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.808228][ T3271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.819374][ T3271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.826348][ T3271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.852251][ T3271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.876622][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.894615][ T3263] hsr_slave_0: entered promiscuous mode [ 27.900525][ T3263] hsr_slave_1: entered promiscuous mode [ 27.906283][ T3263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.913874][ T3263] Cannot create hsr debugfs directory [ 27.923613][ T3270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.930575][ T3270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.956473][ T3270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.968016][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.988140][ T3270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.995252][ T3270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.021139][ T3270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.042271][ T3271] hsr_slave_0: entered promiscuous mode [ 28.048300][ T3271] hsr_slave_1: entered promiscuous mode [ 28.054142][ T3271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.061661][ T3271] Cannot create hsr debugfs directory [ 28.074578][ T3267] team0: Port device team_slave_0 added [ 28.091317][ T3267] team0: Port device team_slave_1 added [ 28.116969][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.123998][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.149918][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.164659][ T3270] hsr_slave_0: entered promiscuous mode [ 28.170454][ T3270] hsr_slave_1: entered promiscuous mode [ 28.176312][ T3270] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.183875][ T3270] Cannot create hsr debugfs directory [ 28.193500][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.200485][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.226426][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.281453][ T3267] hsr_slave_0: entered promiscuous mode [ 28.287511][ T3267] hsr_slave_1: entered promiscuous mode [ 28.293264][ T3267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.300795][ T3267] Cannot create hsr debugfs directory [ 28.392690][ T3264] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.403076][ T3264] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.415023][ T3264] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.435624][ T3264] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.455273][ T3271] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.465688][ T3271] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.480338][ T3271] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.492306][ T3271] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.506414][ T3263] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.515004][ T3263] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.524933][ T3263] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.533614][ T3263] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.563590][ T3270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.573898][ T3270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.582563][ T3270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.614983][ T3270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.651042][ T3267] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.661027][ T3271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.670676][ T3271] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.683641][ T3267] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.695734][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.702750][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.711267][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.718295][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.727775][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.737255][ T3267] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.746166][ T3267] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.762252][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.774620][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.786360][ T3263] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.804928][ T116] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.811979][ T116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.821126][ T116] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.828158][ T116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.865520][ T3264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.876179][ T3264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.889604][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.896630][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.905805][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.912902][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.951804][ T3270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.962543][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.983043][ T3270] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.017227][ T116] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.024293][ T116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.033092][ T116] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.040246][ T116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.057080][ T3267] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.067569][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.087895][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.094921][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.104495][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.111629][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.121547][ T3270] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.140011][ T3271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.167648][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.191514][ T3267] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.201920][ T3267] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.296187][ T3270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.327026][ T3264] veth0_vlan: entered promiscuous mode [ 29.344862][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.357809][ T3264] veth1_vlan: entered promiscuous mode [ 29.367179][ T3271] veth0_vlan: entered promiscuous mode [ 29.377496][ T3264] veth0_macvtap: entered promiscuous mode [ 29.389275][ T3271] veth1_vlan: entered promiscuous mode [ 29.402964][ T3264] veth1_macvtap: entered promiscuous mode [ 29.415706][ T3263] veth0_vlan: entered promiscuous mode [ 29.426186][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.440479][ T3271] veth0_macvtap: entered promiscuous mode [ 29.458606][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.469029][ T3264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.477974][ T3264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.486744][ T3264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.495495][ T3264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.509428][ T3271] veth1_macvtap: entered promiscuous mode [ 29.520298][ T3263] veth1_vlan: entered promiscuous mode [ 29.529457][ T3270] veth0_vlan: entered promiscuous mode [ 29.547024][ T3267] veth0_vlan: entered promiscuous mode [ 29.554315][ T3270] veth1_vlan: entered promiscuous mode [ 29.560681][ T3267] veth1_vlan: entered promiscuous mode [ 29.574404][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.584874][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.595359][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.615370][ T3270] veth0_macvtap: entered promiscuous mode [ 29.621916][ T3271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.632409][ T3271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.643018][ T3271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.653574][ T3271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.662263][ T3271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.671068][ T3271] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.679871][ T3271] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.681742][ T3264] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.700055][ T3270] veth1_macvtap: entered promiscuous mode [ 29.714459][ T3263] veth0_macvtap: entered promiscuous mode [ 29.722115][ T3267] veth0_macvtap: entered promiscuous mode [ 29.732272][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 29.732337][ T29] audit: type=1400 audit(1728266756.832:118): avc: denied { read write } for pid=3264 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.746364][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.762642][ T29] audit: type=1400 audit(1728266756.832:119): avc: denied { open } for pid=3264 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.772931][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.796891][ T29] audit: type=1400 audit(1728266756.832:120): avc: denied { ioctl } for pid=3264 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.806680][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.806692][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.811883][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.866206][ T29] audit: type=1400 audit(1728266756.972:121): avc: denied { map_create } for pid=3405 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.866949][ T3267] veth1_macvtap: entered promiscuous mode [ 29.885016][ T29] audit: type=1400 audit(1728266756.972:122): avc: denied { perfmon } for pid=3405 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.911312][ T29] audit: type=1400 audit(1728266756.972:123): avc: denied { map_read map_write } for pid=3405 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.921713][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.930833][ T29] audit: type=1400 audit(1728266756.972:124): avc: denied { prog_load } for pid=3405 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.941220][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.959870][ T29] audit: type=1400 audit(1728266756.972:125): avc: denied { bpf } for pid=3405 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 29.969670][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.989797][ T29] audit: type=1400 audit(1728266757.002:126): avc: denied { prog_run } for pid=3405 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 30.000196][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.028771][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.039198][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.049684][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.059356][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.069901][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.079771][ T3270] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.090302][ T3270] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.100889][ T3270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.108930][ T3263] veth1_macvtap: entered promiscuous mode [ 30.120486][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.130931][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.140827][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.151317][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.161143][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.171572][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.182232][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.190677][ T3270] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.199455][ T3270] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.208224][ T3270] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.216935][ T3270] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.234202][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.244647][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.253285][ T29] audit: type=1400 audit(1728266757.342:127): avc: denied { mounton } for pid=3407 comm="syz.0.6" path="/1/file0" dev="tmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 30.254605][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.286960][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.296771][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.307190][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.317044][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.327520][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.338172][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.349932][ T3267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.358763][ T3267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.367625][ T3267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.376399][ T3267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.388299][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.398862][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.408715][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.419243][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.429109][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.439527][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.449320][ T3263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.459747][ T3263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.470237][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.486036][ T3263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.494811][ T3263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.503763][ T3263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.512450][ T3263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.538742][ T3411] loop2: detected capacity change from 0 to 1024 [ 30.546087][ T3411] EXT4-fs: Ignoring removed orlov option [ 30.552986][ T3411] EXT4-fs: Ignoring removed nobh option [ 30.605914][ T3411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.648505][ T3271] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.863987][ T3440] syz.1.14 uses obsolete (PF_INET,SOCK_PACKET) [ 30.872546][ T3444] ======================================================= [ 30.872546][ T3444] WARNING: The mand mount option has been deprecated and [ 30.872546][ T3444] and is ignored by this kernel. Remove the mand [ 30.872546][ T3444] option from the mount to silence this warning. [ 30.872546][ T3444] ======================================================= [ 30.976687][ T3446] syz.1.17[3446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.976745][ T3446] syz.1.17[3446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 30.988477][ T3446] syz.1.17[3446] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.001539][ T3446] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 31.054469][ T3450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 31.156544][ T3453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 31.224303][ T3459] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.248475][ T3461] loop0: detected capacity change from 0 to 2048 [ 31.306752][ T3461] loop0: p1 p2 p3 [ 31.357208][ T3468] loop0: detected capacity change from 0 to 512 [ 31.363896][ T3468] EXT4-fs: test_dummy_encryption option not supported [ 31.514316][ T3478] mmap: syz.3.32 (3478) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.659565][ T3491] netlink: 104 bytes leftover after parsing attributes in process `syz.3.36'. [ 31.754762][ T3505] loop0: detected capacity change from 0 to 164 [ 31.779783][ T3507] option changes via remount are deprecated (pid=3506 comm=syz.0.43) [ 31.830344][ T3513] syz.0.46[3513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.830393][ T3513] syz.0.46[3513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 31.841714][ T3513] syz.0.46[3513] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 32.335440][ T3530] loop4: detected capacity change from 0 to 128 [ 32.355740][ T3530] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 32.368262][ T3530] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.395573][ T3263] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 32.462568][ T3534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.54'. [ 32.471439][ T3534] netlink: 'syz.4.54': attribute type 19 has an invalid length. [ 32.481637][ T3534] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.490575][ T3534] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.499303][ T3534] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.508133][ T3534] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 32.516926][ T3534] vxlan0: entered promiscuous mode [ 32.751696][ T3281] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.875852][ T3557] loop3: detected capacity change from 0 to 1024 [ 32.883590][ T3557] EXT4-fs: Ignoring removed oldalloc option [ 32.890345][ T3557] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 32.907679][ T3557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.926641][ T3541] chnl_net:caif_netlink_parms(): no params data found [ 32.944676][ T3267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.967271][ T3565] loop3: detected capacity change from 0 to 1024 [ 32.977835][ T3565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.992553][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.999841][ T3541] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.008143][ T3541] bridge_slave_0: entered allmulticast mode [ 33.014653][ T3541] bridge_slave_0: entered promiscuous mode [ 33.021598][ T3541] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.028799][ T3541] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.035991][ T3541] bridge_slave_1: entered allmulticast mode [ 33.042333][ T3541] bridge_slave_1: entered promiscuous mode [ 33.061094][ T3541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.071907][ T3541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.090417][ T3541] team0: Port device team_slave_0 added [ 33.096966][ T3541] team0: Port device team_slave_1 added [ 33.111067][ T3541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.118024][ T3541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.144075][ T3541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.155313][ T3541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.162330][ T3541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.188448][ T3541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.220202][ T3541] hsr_slave_0: entered promiscuous mode [ 33.226405][ T3541] hsr_slave_1: entered promiscuous mode [ 33.232351][ T3541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 33.240004][ T3541] Cannot create hsr debugfs directory [ 33.300502][ T3584] netlink: 'syz.1.69': attribute type 4 has an invalid length. [ 33.315638][ T3584] netlink: 'syz.1.69': attribute type 4 has an invalid length. [ 33.345650][ T3588] loop1: detected capacity change from 0 to 1024 [ 33.353408][ T3588] EXT4-fs: Ignoring removed orlov option [ 33.359286][ T3588] EXT4-fs: Ignoring removed i_version option [ 33.374921][ T3588] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.415859][ T3270] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.429835][ T3594] loop4: detected capacity change from 0 to 1024 [ 33.446217][ T3594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.474032][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.508159][ T3602] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 33.607649][ T3281] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.656897][ T3281] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.703681][ C1] Illegal XDP return value 1603896156 on prog (id 55) dev lo, expect packet loss! [ 33.710051][ T3615] loop0: detected capacity change from 0 to 256 [ 33.713775][ T3617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.728399][ T3615] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.741651][ T3617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.760742][ T3281] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.777124][ T3267] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.789352][ T3619] loop0: detected capacity change from 0 to 128 [ 33.865797][ T3281] bridge_slave_1: left allmulticast mode [ 33.866765][ T3623] Zero length message leads to an empty skb [ 33.871435][ T3281] bridge_slave_1: left promiscuous mode [ 33.871517][ T3281] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.913010][ T3281] bridge_slave_0: left allmulticast mode [ 33.918752][ T3281] bridge_slave_0: left promiscuous mode [ 33.924467][ T3281] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.036714][ T3281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.046725][ T3281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.056924][ T3281] bond0 (unregistering): Released all slaves [ 34.091425][ T3651] loop1: detected capacity change from 0 to 256 [ 34.103578][ T3281] hsr_slave_0: left promiscuous mode [ 34.109127][ T3281] hsr_slave_1: left promiscuous mode [ 34.115905][ T3281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.117773][ T3651] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 34.123296][ T3281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.138408][ T3651] FAT-fs (loop1): Filesystem has been set read-only [ 34.145405][ T3281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.152798][ T3281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.163239][ T3281] veth1_macvtap: left promiscuous mode [ 34.168816][ T3281] veth0_macvtap: left promiscuous mode [ 34.174515][ T3281] veth1_vlan: left promiscuous mode [ 34.179836][ T3281] veth0_vlan: left promiscuous mode [ 34.233337][ T3342] IPVS: starting estimator thread 0... [ 34.303447][ T3281] team0 (unregistering): Port device team_slave_1 removed [ 34.316576][ T3281] team0 (unregistering): Port device team_slave_0 removed [ 34.323499][ T3661] IPVS: using max 3024 ests per chain, 151200 per kthread [ 34.495439][ T3541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.505217][ T3541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.514839][ T3541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.528216][ T3630] chnl_net:caif_netlink_parms(): no params data found [ 34.539664][ T3541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.623474][ T3707] vcan0: tx drop: invalid sa for name 0x0000000000000008 [ 34.641090][ T3630] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.648255][ T3630] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.655399][ T3630] bridge_slave_0: entered allmulticast mode [ 34.662195][ T3630] bridge_slave_0: entered promiscuous mode [ 34.669013][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.676137][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.683238][ T3630] bridge_slave_1: entered allmulticast mode [ 34.689608][ T3630] bridge_slave_1: entered promiscuous mode [ 34.706800][ T3630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.719819][ T3630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.763087][ T3630] team0: Port device team_slave_0 added [ 34.769595][ T3630] team0: Port device team_slave_1 added [ 34.802449][ T3630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.809411][ T3630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.835817][ T3630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.857599][ T3630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.864581][ T3630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.890479][ T3630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.914836][ T3541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.944268][ T3281] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.956976][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 34.956988][ T29] audit: type=1400 audit(1728266762.062:238): avc: denied { read } for pid=3723 comm="syz.0.104" name="rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 34.973988][ T3726] loop4: detected capacity change from 0 to 512 [ 34.988943][ T29] audit: type=1400 audit(1728266762.062:239): avc: denied { open } for pid=3723 comm="syz.0.104" path="/dev/rtc0" dev="devtmpfs" ino=220 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.015631][ T29] audit: type=1400 audit(1728266762.062:240): avc: denied { ioctl } for pid=3723 comm="syz.0.104" path="/dev/rtc0" dev="devtmpfs" ino=220 ioctlcmd=0x700c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.054573][ T29] audit: type=1400 audit(1728266762.162:241): avc: denied { create } for pid=3727 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.062092][ T3541] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.082900][ T29] audit: type=1400 audit(1728266762.192:242): avc: denied { connect } for pid=3727 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.102378][ T29] audit: type=1400 audit(1728266762.192:243): avc: denied { setopt } for pid=3727 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.127512][ T3726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.136329][ T29] audit: type=1400 audit(1728266762.192:244): avc: denied { bind } for pid=3727 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.142052][ T3726] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.159163][ T29] audit: type=1400 audit(1728266762.192:245): avc: denied { write } for pid=3727 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 35.198197][ T3281] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.223230][ T3374] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.230320][ T3374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.239150][ T3726] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 35.251659][ T3630] hsr_slave_0: entered promiscuous mode [ 35.258093][ T3630] hsr_slave_1: entered promiscuous mode [ 35.264001][ T3630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.271546][ T3630] Cannot create hsr debugfs directory [ 35.303181][ T3541] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 35.313703][ T3541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 35.326427][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.344772][ T3374] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.351898][ T3374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.437715][ T3281] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.493920][ T3281] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.526989][ T3541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.561711][ T29] audit: type=1400 audit(1728266762.662:246): avc: denied { execute } for pid=3762 comm="syz.4.110" path="/17/cpu.stat" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 35.611202][ T3630] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.662065][ T3709] chnl_net:caif_netlink_parms(): no params data found [ 35.678510][ T3630] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.694401][ T3780] pim6reg1: entered promiscuous mode [ 35.699700][ T3780] pim6reg1: entered allmulticast mode [ 35.728289][ T3630] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.791556][ T3709] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.798678][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.805944][ T3709] bridge_slave_0: entered allmulticast mode [ 35.812562][ T3709] bridge_slave_0: entered promiscuous mode [ 35.826966][ T3630] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.849824][ T3541] veth0_vlan: entered promiscuous mode [ 35.856027][ T3709] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.863903][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.872990][ T3709] bridge_slave_1: entered allmulticast mode [ 35.879157][ T29] audit: type=1400 audit(1728266762.972:247): avc: denied { read write } for pid=3804 comm="syz.4.115" name="sg0" dev="devtmpfs" ino=111 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 35.905462][ T3709] bridge_slave_1: entered promiscuous mode [ 35.938112][ T3281] bridge_slave_1: left allmulticast mode [ 35.944054][ T3281] bridge_slave_1: left promiscuous mode [ 35.949709][ T3281] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.960527][ T3281] bridge_slave_0: left allmulticast mode [ 35.966327][ T3281] bridge_slave_0: left promiscuous mode [ 35.972010][ T3281] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.991664][ T3281] bridge_slave_1: left allmulticast mode [ 35.997357][ T3281] bridge_slave_1: left promiscuous mode [ 36.003047][ T3281] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.024045][ T3281] bridge_slave_0: left allmulticast mode [ 36.029732][ T3281] bridge_slave_0: left promiscuous mode [ 36.035432][ T3281] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.285270][ T3281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.296688][ T3281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.307017][ T3281] bond0 (unregistering): Released all slaves [ 36.318246][ T3281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.328618][ T3281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.338777][ T3281] bond0 (unregistering): Released all slaves [ 36.351137][ T3541] veth1_vlan: entered promiscuous mode [ 36.361145][ T3709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.391637][ T3630] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.402722][ T3709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.415203][ T3630] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.425732][ T3630] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.466498][ T3630] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.476482][ T3709] team0: Port device team_slave_0 added [ 36.496290][ T3541] veth0_macvtap: entered promiscuous mode [ 36.504092][ T3842] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 36.516248][ T3281] hsr_slave_0: left promiscuous mode [ 36.524020][ T3281] hsr_slave_1: left promiscuous mode [ 36.538027][ T3281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.541332][ T3842] syz.4.122 (3842) used greatest stack depth: 10368 bytes left [ 36.545503][ T3281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.604525][ T3281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.611908][ T3281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.625694][ T3281] hsr_slave_0: left promiscuous mode [ 36.635598][ T3281] hsr_slave_1: left promiscuous mode [ 36.649875][ T3281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.657352][ T3281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.673772][ T3281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.681159][ T3281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.716348][ T3281] veth1_macvtap: left promiscuous mode [ 36.721916][ T3281] veth0_macvtap: left promiscuous mode [ 36.727463][ T3281] veth1_vlan: left promiscuous mode [ 36.732734][ T3281] veth0_vlan: left promiscuous mode [ 36.740112][ T3281] veth1_macvtap: left promiscuous mode [ 36.745631][ T3281] veth0_macvtap: left promiscuous mode [ 36.751194][ T3281] veth1_vlan: left promiscuous mode [ 36.756503][ T3281] veth0_vlan: left promiscuous mode [ 36.760095][ T3873] syz.4.131[3873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.761730][ T3873] syz.4.131[3873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.773175][ T3873] syz.4.131[3873] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.901398][ T3885] loop4: detected capacity change from 0 to 1024 [ 36.919700][ T3885] EXT4-fs: Ignoring removed nobh option [ 36.945663][ T3281] team0 (unregistering): Port device team_slave_1 removed [ 36.955436][ T3885] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #2: comm syz.4.136: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 36.955769][ T3281] team0 (unregistering): Port device team_slave_0 removed [ 36.974906][ T3885] EXT4-fs (loop4): get root inode failed [ 36.985985][ T3885] EXT4-fs (loop4): mount failed [ 37.025695][ T3885] loop4: detected capacity change from 0 to 2048 [ 37.045377][ T3885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.059524][ T3281] team0 (unregistering): Port device team_slave_1 removed [ 37.070250][ T3281] team0 (unregistering): Port device team_slave_0 removed [ 37.086761][ T3263] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.109545][ T3709] team0: Port device team_slave_1 added [ 37.127019][ T3541] veth1_macvtap: entered promiscuous mode [ 37.141370][ T3709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.148426][ T3709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.174322][ T3709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.201022][ T3541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.211475][ T3541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.221299][ T3541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.231709][ T3541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.243084][ T3541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.252630][ T3709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.259604][ T3709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.285643][ T3709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.315472][ T3541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.326000][ T3541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.335814][ T3541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 37.346332][ T3541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.357219][ T3541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.364473][ T3902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.141'. [ 37.386238][ T3709] hsr_slave_0: entered promiscuous mode [ 37.392310][ T3709] hsr_slave_1: entered promiscuous mode [ 37.398371][ T3709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.407492][ T3709] Cannot create hsr debugfs directory [ 37.442532][ T3541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.451371][ T3541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.460106][ T3541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.468941][ T3541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.492161][ T3630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.547082][ T3630] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.610749][ T3374] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.617847][ T3374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.631279][ T3374] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.638420][ T3374] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.777228][ T3630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.877114][ T3630] veth0_vlan: entered promiscuous mode [ 37.885657][ T3630] veth1_vlan: entered promiscuous mode [ 37.897443][ T3630] veth0_macvtap: entered promiscuous mode [ 37.904657][ T3630] veth1_macvtap: entered promiscuous mode [ 37.914515][ T3630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.924960][ T3630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.934779][ T3630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.945259][ T3630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.955095][ T3630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 37.965540][ T3630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 37.976074][ T3630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.992658][ T3630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.003109][ T3630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.012969][ T3630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.023460][ T3630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.033330][ T3630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.043769][ T3630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.044365][ T3979] dccp_close: ABORT with 4 bytes unread [ 38.054464][ T3630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.099885][ T3630] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.108777][ T3630] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.117613][ T3630] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.126337][ T3630] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.145014][ T3281] IPVS: stop unused estimator thread 0... [ 38.184341][ T3709] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.197111][ T3989] loop0: detected capacity change from 0 to 512 [ 38.251784][ T3989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.274241][ T3997] loop4: detected capacity change from 0 to 256 [ 38.278073][ T4001] loop3: detected capacity change from 0 to 512 [ 38.283068][ T3989] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 38.319485][ T4001] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.82: bg 0: block 393: padding at end of block bitmap is not set [ 38.334598][ T4001] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 38.344971][ T4001] EXT4-fs (loop3): 2 truncates cleaned up [ 38.360518][ T3346] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 38.361530][ T4001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.368227][ T3346] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 38.391065][ T3346] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 38.400228][ T3346] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 38.417784][ T3709] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.450558][ T3709] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.460193][ T4023] loop4: detected capacity change from 0 to 2048 [ 38.469308][ T3630] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.482585][ T3709] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.491154][ T4023] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.511245][ T4025] loop2: detected capacity change from 0 to 1024 [ 38.529308][ T4020] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.160: corrupted inode contents [ 38.542384][ T4033] loop3: detected capacity change from 0 to 128 [ 38.551277][ T4025] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 38.559082][ T4020] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #19: comm syz.0.160: mark_inode_dirty error [ 38.562193][ T4025] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 38.583033][ T4025] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 38.593289][ T4025] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 38.601960][ T4025] EXT4-fs (loop2): filesystem has both journal inode and journal device! [ 38.621267][ T4020] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #19: comm syz.0.160: corrupted inode contents [ 38.624005][ T3709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.638310][ T4023] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 38.655201][ T4020] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3006: inode #19: comm syz.0.160: mark_inode_dirty error [ 38.667076][ T4023] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 237 with error 28 [ 38.679567][ T4023] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.679567][ T4023] [ 38.689247][ T4023] EXT4-fs (loop4): Total free blocks count 0 [ 38.692389][ T3709] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.695237][ T4023] EXT4-fs (loop4): Free/Dirty block details [ 38.695250][ T4023] EXT4-fs (loop4): free_blocks=2415919104 [ 38.713457][ T4023] EXT4-fs (loop4): dirty_blocks=256 [ 38.718667][ T4023] EXT4-fs (loop4): Block reservation details [ 38.724729][ T4023] EXT4-fs (loop4): i_reserved_data_blocks=16 [ 38.728547][ T3281] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.737964][ T3281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.748078][ T4020] EXT4-fs error (device loop0): ext4_xattr_delete_inode:3009: inode #19: comm syz.0.160: mark inode dirty (error -117) [ 38.767091][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.774191][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.791020][ T4020] EXT4-fs warning (device loop0): ext4_evict_inode:276: xattr delete (err -117) [ 38.841042][ T4023] syz.4.167 (4023) used greatest stack depth: 9944 bytes left [ 38.874576][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.889460][ T3709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.897468][ T162] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 38.977354][ T4070] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 37546 - 0 [ 38.986207][ T4070] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 37546 - 0 [ 38.995059][ T4070] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 37546 - 0 [ 39.004011][ T4070] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 37546 - 0 [ 39.030767][ T4070] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 43075 - 0 [ 39.039652][ T4070] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 43075 - 0 [ 39.048561][ T4070] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 43075 - 0 [ 39.057375][ T4070] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 43075 - 0 [ 39.086880][ T4070] geneve2: entered promiscuous mode [ 39.092087][ T4070] geneve2: entered allmulticast mode [ 39.157263][ T3709] veth0_vlan: entered promiscuous mode [ 39.169693][ T3709] veth1_vlan: entered promiscuous mode [ 39.192908][ T3709] veth0_macvtap: entered promiscuous mode [ 39.211959][ T3709] veth1_macvtap: entered promiscuous mode [ 39.218732][ T4087] loop0: detected capacity change from 0 to 8192 [ 39.234855][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.245362][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.255200][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.265698][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.275534][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.286006][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.295842][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.306427][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.316777][ T4087] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 39.319169][ T3709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.325308][ T4087] FAT-fs (loop0): Filesystem has been set read-only [ 39.339710][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.350179][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.359994][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.370493][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.380313][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.390739][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.400610][ T3709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.411023][ T3709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.427484][ T3709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.438146][ T4111] netlink: 4 bytes leftover after parsing attributes in process `syz.4.184'. [ 39.447012][ T4111] netlink: 'syz.4.184': attribute type 14 has an invalid length. [ 39.454735][ T4111] netlink: 'syz.4.184': attribute type 11 has an invalid length. [ 39.481920][ T3709] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.490690][ T3709] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.499431][ T3709] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.508182][ T3709] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.610855][ T4139] loop0: detected capacity change from 0 to 512 [ 39.635451][ T4143] tipc: Failed to remove unknown binding: 66,1,1/0:3034858929/3034858931 [ 39.644669][ T4143] tipc: Failed to remove unknown binding: 66,1,1/0:3034858929/3034858931 [ 39.656850][ T4139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.687573][ T4139] ext4 filesystem being mounted at /67/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.716421][ T4139] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.189: corrupted inode contents [ 39.728403][ T4139] EXT4-fs error (device loop0): ext4_dirty_inode:5984: inode #2: comm syz.0.189: mark_inode_dirty error [ 39.740566][ T4139] EXT4-fs error (device loop0): ext4_do_update_inode:5121: inode #2: comm syz.0.189: corrupted inode contents [ 39.752453][ T4139] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.189: mark_inode_dirty error [ 39.773654][ T3264] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.907308][ T2966] ================================================================== [ 39.915411][ T2966] BUG: KCSAN: data-race in __d_instantiate / lookup_fast [ 39.922436][ T2966] [ 39.924747][ T2966] read-write to 0xffff8881065a3b40 of 4 bytes by task 3255 on cpu 1: [ 39.932792][ T2966] __d_instantiate+0x2d5/0x3c0 [ 39.937549][ T2966] d_instantiate+0x59/0x80 [ 39.941953][ T2966] shmem_symlink+0x36a/0x3a0 [ 39.946527][ T2966] vfs_symlink+0xca/0x1d0 [ 39.950849][ T2966] do_symlinkat+0xe3/0x350 [ 39.955261][ T2966] __x64_sys_symlink+0x50/0x60 [ 39.960019][ T2966] x64_sys_call+0x2819/0x2d60 [ 39.964689][ T2966] do_syscall_64+0xc9/0x1c0 [ 39.969179][ T2966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.975064][ T2966] [ 39.977370][ T2966] read to 0xffff8881065a3b40 of 4 bytes by task 2966 on cpu 0: [ 39.984896][ T2966] lookup_fast+0xd9/0x2a0 [ 39.989211][ T2966] walk_component+0x3f/0x230 [ 39.993788][ T2966] path_lookupat+0x10a/0x2b0 [ 39.998368][ T2966] filename_lookup+0x127/0x300 [ 40.003121][ T2966] do_readlinkat+0x89/0x210 [ 40.007614][ T2966] __x64_sys_readlink+0x47/0x60 [ 40.012453][ T2966] x64_sys_call+0x13c3/0x2d60 [ 40.017121][ T2966] do_syscall_64+0xc9/0x1c0 [ 40.021608][ T2966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.027494][ T2966] [ 40.029799][ T2966] value changed: 0x00000008 -> 0x00600008 [ 40.035496][ T2966] [ 40.037802][ T2966] Reported by Kernel Concurrency Sanitizer on: [ 40.043944][ T2966] CPU: 0 UID: 0 PID: 2966 Comm: udevd Not tainted 6.12.0-rc2-syzkaller #0 [ 40.052429][ T2966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.062468][ T2966] ================================================================== [ 40.090981][ T29] kauditd_printk_skb: 189 callbacks suppressed [ 40.090993][ T29] audit: type=1400 audit(1728266767.192:437): avc: denied { ioctl } for pid=4182 comm="syz.1.203" path="/dev/mISDNtimer" dev="devtmpfs" ino=224 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.269077][ T3281] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.317076][ T3281] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.376025][ T3281] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.428600][ T3281] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.523011][ T3281] bridge_slave_1: left allmulticast mode [ 40.528697][ T3281] bridge_slave_1: left promiscuous mode [ 40.534383][ T3281] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.543823][ T3281] bridge_slave_0: left allmulticast mode [ 40.549489][ T3281] bridge_slave_0: left promiscuous mode [ 40.555159][ T3281] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.696227][ T3281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.707029][ T3281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.717227][ T3281] bond0 (unregistering): Released all slaves [ 40.776254][ T3281] hsr_slave_0: left promiscuous mode [ 40.794446][ T3281] hsr_slave_1: left promiscuous mode [ 40.799992][ T3281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.807392][ T3281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.834544][ T3281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.841961][ T3281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.851670][ T3281] veth1_macvtap: left promiscuous mode [ 40.857249][ T3281] veth0_macvtap: left promiscuous mode [ 40.862820][ T3281] veth1_vlan: left promiscuous mode [ 40.868109][ T3281] veth0_vlan: left promiscuous mode [ 40.956883][ T3281] team0 (unregistering): Port device team_slave_1 removed [ 40.968058][ T3281] team0 (unregistering): Port device team_slave_0 removed [ 42.017716][ T29] audit: type=1400 audit(1728266769.122:438): avc: denied { sys_chroot } for pid=4305 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 42.039133][ T29] audit: type=1400 audit(1728266769.122:439): avc: denied { setgid } for pid=4305 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 42.059799][ T29] audit: type=1400 audit(1728266769.122:440): avc: denied { setuid } for pid=4305 comm="dhcpcd" capability=7 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 42.080527][ T29] audit: type=1400 audit(1728266769.122:441): avc: denied { setrlimit } for pid=4305 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1