last executing test programs: 3.540371912s ago: executing program 0 (id=42): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$iso9660(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.677082007s ago: executing program 0 (id=62): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000200)='\f\x8b\x8a\xa9\x16\x11O\xdd\xdfk(F\x99\xdf\x9a\xd5>oJ\x02u\x9b\x94a\xac\xfe6A\xc4\a\x9e\xbd\xa2\xfb\rD\xefq\x1f!\x01\xc3\xa5U\x98\xee\xcd;A\xe8\x00~V\xbf\xd4\x00\xd2,7\xa0\xfd7\xe8\xf9M\x02\xec\f3\xd4\xb8\xc3\x85\xda\xeb\xce7y%S\x1e\xa9\xe9\x92!\x95\xf1Ek\x95\x9bQ\x1d\xa4\xc2\xbb\xfa\x96\x14\x7f\xb9\x90\x9cn\xb5\x10\xd2\x84\xe9\x9e1\x9a\x9e\xa7\x9e\xcd\x1a\x86\x14%\xbaS\x90\xb1j\xf9\x00\xd7@D\x04\xaa\xb55\xd8x?z\xff\x85j3\xbe\axo\x05)\xcc\xcd\x9b\xb3\xe7w\x0e\x9f\xd3\aU\xf0M\xc1\xad\x17t\xeb\x1b\x11m\xec\x00\x00\x00\x00R\xb6v\x88\a\x82\x9e\x00\x00\x00\x10\x00\x00\x00\xa6!\xb3\xa8\xe7[&\x165\x84\xce\xa5\xc4wT\xf2E\tj\x92G\x14\x04\x93\xa4\xba\xcb\xce\"Y\xd68\xeb\x01\xc9/\x19\x85\xc6\x8do\xcb\x17\xb5\xffW\xe6\x8a\xfb\a\xf6', 0x2) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[], 0xff9d) sendfile(r0, r1, &(0x7f0000000100), 0x2) fcntl$addseals(r1, 0x409, 0x8) fchown(r1, 0x0, 0x0) 2.470791945s ago: executing program 0 (id=65): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c000000020603000000000000000000ffea000005000100070000000900020073797a300000000014000780080012401b0000000800084000000000050005000000001005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 1.766998926s ago: executing program 4 (id=86): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040041e1d113c812e5d601adda05c7b5d27c9"}) r1 = syz_open_pts(r0, 0x2) r2 = dup3(r1, r0, 0x0) io_setup(0xba, &(0x7f0000000340)=0x0) io_submit(r3, 0x1, &(0x7f0000002500)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, r2, 0x0, 0x0, 0x1000000001000040}]) 1.693892003s ago: executing program 1 (id=90): rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfefffbfd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x6}) rt_tgsigqueueinfo(r1, r0, 0xe, &(0x7f0000000140)) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) 1.679839524s ago: executing program 1 (id=91): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newtaction={0x84, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x70, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0xb, @loopback}]}, {0x9, 0x6, "17e74d749f"}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) 1.647296687s ago: executing program 1 (id=92): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x1f0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {0xff}, {0xff}, 0x11, 0x81, 0x6, 0x1d}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x2b, 0x2, 0x5, 0x4, 0x6, 0x401, 0x1}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00', 0x4}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x2, 0xfffffffc, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) 1.646875407s ago: executing program 4 (id=93): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000001e40)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000580)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffff8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 1.61728543s ago: executing program 4 (id=94): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) keyctl$KEYCTL_MOVE(0x1e, r0, r0, r1, 0x0) 1.61208898s ago: executing program 0 (id=95): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) getpgrp(0x0) 1.60917582s ago: executing program 1 (id=96): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000100)='ns/cgroup\x00') 1.559947885s ago: executing program 0 (id=99): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x1000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x0, 0x0) 1.555155805s ago: executing program 4 (id=100): pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x800ff06, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0x12) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[], 0xfffffc8f) splice(r0, 0x0, r3, 0x0, 0x800, 0x0) 1.228333013s ago: executing program 3 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f00000001c0)='mqueue\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.205221575s ago: executing program 3 (id=116): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fchmodat(r0, &(0x7f0000000140)='./file1\x00', 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) 1.100078254s ago: executing program 3 (id=120): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 1.047013109s ago: executing program 3 (id=123): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r1, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r0, 0x20, &(0x7f0000000380)={&(0x7f0000001580)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) 945.412568ms ago: executing program 2 (id=125): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r1 = syz_io_uring_setup(0x4a9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r4, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) 851.722616ms ago: executing program 1 (id=126): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba0700000000ebffffff0000f7ffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, "1f00000800"}) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, 0x0, 0x0) 834.102208ms ago: executing program 2 (id=127): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) 793.717761ms ago: executing program 2 (id=128): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/211, 0xd3) 750.871745ms ago: executing program 2 (id=129): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0400", "0d07080d004fcf0000e8ffff1a8600", "cf0d00", "8657e2b7e43b34e4"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="98", 0x1}], 0x1) 699.864309ms ago: executing program 2 (id=130): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x105, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e23, 0x80, @empty}, 0x1c) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x147, 0x0) 690.37133ms ago: executing program 0 (id=131): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, &(0x7f0000000100)) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @dev, 0x34}]}, &(0x7f0000002100)=0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) setsockopt(r0, 0x84, 0x76, &(0x7f0000000200)="0c00000002000000", 0x8) 683.445431ms ago: executing program 4 (id=132): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xe) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 632.457995ms ago: executing program 2 (id=133): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='+', 0x1}], 0x1}}], 0x1, 0x400c404) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0xff}]}) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0x4) 632.123935ms ago: executing program 4 (id=134): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000004c0)=""/211, 0xd3}], 0x2}}], 0x1, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000000240)="60dbc0f4aca2fd393c58413552ee20a6ffb194eb866939781720f1a589bd4a5c95c4be84deeeb45c8ce7954b1c1057ede4df0326ff749c8aabb67b0138b7c5bc96cb44ea1d", 0x45}], 0x1}}], 0x1, 0x0) 159.561246ms ago: executing program 3 (id=135): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000440)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x45, 0x0, "1e6c1c2a0033af1199d01e93a0c5d3b12a1acf7a58ceadd43298708a8a7470c3f8f6c087c01f22e3d2edcd1b0349e7cf54e1131821607b899e64075662acd23741b42c43cb101a83af7caf5d5af2940b"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "d4f8d09ded49a9c1", "835ba731a620276b74beef313d36611d", "399d99a1", "4fea4c4cbd4e3266"}, 0xffffffffffffff0b) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 124.157359ms ago: executing program 3 (id=136): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x40014001) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=137): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x408e, &(0x7f0000000240), 0x3, 0x43a, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000040)='./bus\x00', 0x1459c2, 0x0) ftruncate(r0, 0x2007ffd) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x3000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x0, 0x0, &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f000014b000/0x1000)=nil, 0x1000, 0x9) kernel console output (not intermixed with test programs): [ 23.084365][ T29] audit: type=1400 audit(1725885741.270:81): avc: denied { read } for pid=2943 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 27.014542][ T29] audit: type=1400 audit(1725885745.200:82): avc: denied { mounton } for pid=3249 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.015901][ T3249] cgroup: Unknown subsys name 'net' [ 27.037360][ T29] audit: type=1400 audit(1725885745.200:83): avc: denied { mount } for pid=3249 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.064946][ T29] audit: type=1400 audit(1725885745.230:84): avc: denied { unmount } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.261982][ T3249] cgroup: Unknown subsys name 'rlimit' [ 27.385159][ T29] audit: type=1400 audit(1725885745.570:85): avc: denied { setattr } for pid=3249 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.409115][ T29] audit: type=1400 audit(1725885745.570:86): avc: denied { create } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.429820][ T29] audit: type=1400 audit(1725885745.570:87): avc: denied { write } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.439073][ T3253] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.452173][ T29] audit: type=1400 audit(1725885745.570:88): avc: denied { read } for pid=3249 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.482374][ T29] audit: type=1400 audit(1725885745.570:89): avc: denied { mounton } for pid=3249 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.507674][ T29] audit: type=1400 audit(1725885745.570:90): avc: denied { mount } for pid=3249 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.531593][ T29] audit: type=1400 audit(1725885745.650:91): avc: denied { relabelto } for pid=3253 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.563277][ T3249] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.663904][ T3259] chnl_net:caif_netlink_parms(): no params data found [ 28.754529][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.761783][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.769010][ T3259] bridge_slave_0: entered allmulticast mode [ 28.775739][ T3259] bridge_slave_0: entered promiscuous mode [ 28.784218][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.791345][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.798658][ T3259] bridge_slave_1: entered allmulticast mode [ 28.805320][ T3259] bridge_slave_1: entered promiscuous mode [ 28.811515][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 28.830558][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 28.874982][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.901691][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.934640][ T3259] team0: Port device team_slave_0 added [ 28.941299][ T3259] team0: Port device team_slave_1 added [ 28.963119][ T3265] chnl_net:caif_netlink_parms(): no params data found [ 28.992998][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.000011][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.026200][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.037139][ T3261] chnl_net:caif_netlink_parms(): no params data found [ 29.046135][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.053293][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.060527][ T3260] bridge_slave_0: entered allmulticast mode [ 29.067028][ T3260] bridge_slave_0: entered promiscuous mode [ 29.088223][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.095329][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.121522][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.135451][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.142655][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.150151][ T3260] bridge_slave_1: entered allmulticast mode [ 29.156887][ T3260] bridge_slave_1: entered promiscuous mode [ 29.167948][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.175152][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.182589][ T3266] bridge_slave_0: entered allmulticast mode [ 29.188959][ T3266] bridge_slave_0: entered promiscuous mode [ 29.197820][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.205197][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.212463][ T3266] bridge_slave_1: entered allmulticast mode [ 29.219111][ T3266] bridge_slave_1: entered promiscuous mode [ 29.242866][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.267796][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.280403][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.290842][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.345026][ T3260] team0: Port device team_slave_0 added [ 29.357555][ T3259] hsr_slave_0: entered promiscuous mode [ 29.363779][ T3259] hsr_slave_1: entered promiscuous mode [ 29.376509][ T3266] team0: Port device team_slave_0 added [ 29.383171][ T3266] team0: Port device team_slave_1 added [ 29.389515][ T3260] team0: Port device team_slave_1 added [ 29.395364][ T3265] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.402485][ T3265] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.409689][ T3265] bridge_slave_0: entered allmulticast mode [ 29.416261][ T3265] bridge_slave_0: entered promiscuous mode [ 29.443669][ T3265] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.450846][ T3265] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.457992][ T3265] bridge_slave_1: entered allmulticast mode [ 29.464625][ T3265] bridge_slave_1: entered promiscuous mode [ 29.475940][ T3261] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.483234][ T3261] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.490829][ T3261] bridge_slave_0: entered allmulticast mode [ 29.497514][ T3261] bridge_slave_0: entered promiscuous mode [ 29.514596][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.521693][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.547894][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.563258][ T3261] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.570467][ T3261] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.577672][ T3261] bridge_slave_1: entered allmulticast mode [ 29.584341][ T3261] bridge_slave_1: entered promiscuous mode [ 29.596126][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.603491][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.629817][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.640960][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.647935][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.674386][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.687131][ T3265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.711721][ T3261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.721377][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.728529][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.755042][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.773159][ T3265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.791083][ T3261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.830332][ T3261] team0: Port device team_slave_0 added [ 29.843285][ T3260] hsr_slave_0: entered promiscuous mode [ 29.849584][ T3260] hsr_slave_1: entered promiscuous mode [ 29.855652][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.863257][ T3260] Cannot create hsr debugfs directory [ 29.877898][ T3261] team0: Port device team_slave_1 added [ 29.884424][ T3265] team0: Port device team_slave_0 added [ 29.891407][ T3265] team0: Port device team_slave_1 added [ 29.907533][ T3266] hsr_slave_0: entered promiscuous mode [ 29.913831][ T3266] hsr_slave_1: entered promiscuous mode [ 29.919869][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.927555][ T3266] Cannot create hsr debugfs directory [ 29.969564][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.976987][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.003606][ T3265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.023505][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.030757][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.058349][ T3261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.074084][ T3265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.081513][ T3265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.109252][ T3265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.124125][ T3261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.131137][ T3261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.157395][ T3261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.218283][ T3265] hsr_slave_0: entered promiscuous mode [ 30.224891][ T3265] hsr_slave_1: entered promiscuous mode [ 30.231585][ T3265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.239452][ T3265] Cannot create hsr debugfs directory [ 30.257947][ T3261] hsr_slave_0: entered promiscuous mode [ 30.264241][ T3261] hsr_slave_1: entered promiscuous mode [ 30.270656][ T3261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.278733][ T3261] Cannot create hsr debugfs directory [ 30.297251][ T3259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.306208][ T3259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.330289][ T3259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.342409][ T3259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.457326][ T3260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.466672][ T3260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.482790][ T3260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.500132][ T3260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.522831][ T3266] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.536018][ T3266] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.546127][ T3266] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.555147][ T3266] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.591077][ T3261] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.600064][ T3261] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.609689][ T3261] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.619240][ T3261] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.641049][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.662919][ T3265] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.672178][ T3265] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.693302][ T3265] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.702585][ T3265] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.726345][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.739618][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.754006][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.761178][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.792400][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.803610][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.810737][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.830987][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.838105][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.849992][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.857382][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.867941][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.925781][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.953086][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.960377][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.983466][ T3265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.992455][ T3261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.001108][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.008700][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.037863][ T3265] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.046669][ T3261] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.065016][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.078705][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.086096][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.101887][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.109036][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.124909][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.132165][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.146750][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.154130][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.167333][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.223347][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.285703][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.384763][ T3259] veth0_vlan: entered promiscuous mode [ 31.392854][ T3261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.404682][ T3259] veth1_vlan: entered promiscuous mode [ 31.415414][ T3265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.447910][ T3259] veth0_macvtap: entered promiscuous mode [ 31.458864][ T3259] veth1_macvtap: entered promiscuous mode [ 31.488154][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.512951][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.535949][ T3260] veth0_vlan: entered promiscuous mode [ 31.545013][ T3259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.554017][ T3259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.562804][ T3259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.571643][ T3259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.591254][ T3260] veth1_vlan: entered promiscuous mode [ 31.640333][ T3266] veth0_vlan: entered promiscuous mode [ 31.650269][ T3260] veth0_macvtap: entered promiscuous mode [ 31.674881][ T3260] veth1_macvtap: entered promiscuous mode [ 31.681846][ T3265] veth0_vlan: entered promiscuous mode [ 31.694612][ T3261] veth0_vlan: entered promiscuous mode [ 31.711924][ T3266] veth1_vlan: entered promiscuous mode [ 31.722527][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.733160][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.751585][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.760814][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.771394][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.788569][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.803581][ T3261] veth1_vlan: entered promiscuous mode [ 31.821385][ T3265] veth1_vlan: entered promiscuous mode [ 31.838103][ T3266] veth0_macvtap: entered promiscuous mode [ 31.845908][ T3260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.854856][ T3260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.863743][ T3260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.872714][ T3260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.886106][ T3406] pim6reg1: entered promiscuous mode [ 31.891555][ T3406] pim6reg1: entered allmulticast mode [ 31.900502][ T3266] veth1_macvtap: entered promiscuous mode [ 31.939856][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.950425][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.960437][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.971057][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.983002][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.991584][ T3265] veth0_macvtap: entered promiscuous mode [ 32.009369][ T3265] veth1_macvtap: entered promiscuous mode [ 32.025372][ T3261] veth0_macvtap: entered promiscuous mode [ 32.036378][ T3261] veth1_macvtap: entered promiscuous mode [ 32.048420][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.059201][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.069423][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.079972][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.094475][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 32.094491][ T29] audit: type=1400 audit(1725885750.240:119): avc: denied { prog_load } for pid=3411 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.119484][ T29] audit: type=1400 audit(1725885750.240:120): avc: denied { bpf } for pid=3411 comm="syz.0.10" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.140158][ T29] audit: type=1400 audit(1725885750.240:121): avc: denied { perfmon } for pid=3411 comm="syz.0.10" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.141147][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.160930][ T29] audit: type=1400 audit(1725885750.260:122): avc: denied { create } for pid=3413 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 32.185757][ T3266] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.187700][ T29] audit: type=1400 audit(1725885750.260:123): avc: denied { map_create } for pid=3413 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.196349][ T3266] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.196386][ T3266] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.196419][ T3266] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.215360][ T29] audit: type=1400 audit(1725885750.260:124): avc: denied { map_read map_write } for pid=3413 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.215392][ T29] audit: type=1400 audit(1725885750.260:125): avc: denied { prog_run } for pid=3413 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.282213][ T29] audit: type=1326 audit(1725885750.280:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3413 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961d0ccef9 code=0x7ffc0000 [ 32.305546][ T29] audit: type=1326 audit(1725885750.280:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3413 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7f961d0ccef9 code=0x7ffc0000 [ 32.329476][ T29] audit: type=1326 audit(1725885750.280:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3413 comm="syz.0.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f961d0ccef9 code=0x7ffc0000 [ 32.358220][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.368826][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.378893][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.389434][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.399508][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.410246][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.422015][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.437850][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.448641][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.458900][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.469442][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.479489][ T3261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.489984][ T3261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.504827][ T3261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.515064][ T3261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.523946][ T3261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.532714][ T3261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.541662][ T3261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.560338][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.570869][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.580712][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.591230][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.601070][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.611645][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.621711][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.632259][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.644388][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.684109][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.685672][ T3426] tls_set_device_offload_rx: netdev not found [ 32.694617][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.694636][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.694677][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.694687][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.742298][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.752368][ T3265] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.763205][ T3265] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.775967][ T3265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.796537][ T3265] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.805617][ T3265] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.814756][ T3265] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.823683][ T3265] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.971014][ T3445] loop3: detected capacity change from 0 to 1024 [ 32.982817][ T3445] EXT4-fs: Ignoring removed orlov option [ 32.988677][ T3445] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.054288][ T3445] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.082598][ T3458] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 33.089375][ T3458] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 33.097061][ T3458] vhci_hcd vhci_hcd.0: Device attached [ 33.142405][ T3458] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 33.177588][ T3458] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 33.177620][ T3458] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 33.177718][ T3458] vhci_hcd vhci_hcd.0: Device attached [ 33.196438][ T3261] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.207751][ T3458] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 33.207830][ T3458] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 33.207998][ T3458] vhci_hcd vhci_hcd.0: Device attached [ 33.216623][ T3458] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(11) [ 33.216652][ T3458] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 33.216700][ T3458] vhci_hcd vhci_hcd.0: Device attached [ 33.297768][ T3478] vhci_hcd vhci_hcd.0: pdev(0) rhport(5) sockfd(13) [ 33.304437][ T3478] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 33.312141][ T3478] vhci_hcd vhci_hcd.0: Device attached [ 33.317784][ T3340] vhci_hcd: vhci_device speed not set [ 33.368165][ T3479] vhci_hcd: connection closed [ 33.368373][ T50] vhci_hcd: stop threads [ 33.377535][ T50] vhci_hcd: release socket [ 33.382121][ T50] vhci_hcd: disconnect device [ 33.390580][ T3340] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 33.399022][ T3483] Zero length message leads to an empty skb [ 33.407574][ T3471] vhci_hcd: connection closed [ 33.409923][ T3466] vhci_hcd: connection closed [ 33.418822][ T3459] vhci_hcd: connection closed [ 33.428872][ T3460] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 33.439992][ T3474] vhci_hcd: connection closed [ 33.450567][ T50] vhci_hcd: stop threads [ 33.460078][ T50] vhci_hcd: release socket [ 33.464692][ T50] vhci_hcd: disconnect device [ 33.488896][ T3488] batadv_slave_1: entered promiscuous mode [ 33.495826][ T50] vhci_hcd: stop threads [ 33.500242][ T50] vhci_hcd: release socket [ 33.504692][ T50] vhci_hcd: disconnect device [ 33.510382][ T3488] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.535338][ T50] vhci_hcd: stop threads [ 33.539776][ T50] vhci_hcd: release socket [ 33.542315][ T3488] bridge0: entered promiscuous mode [ 33.544194][ T50] vhci_hcd: disconnect device [ 33.555767][ T50] vhci_hcd: stop threads [ 33.560213][ T50] vhci_hcd: release socket [ 33.564677][ T50] vhci_hcd: disconnect device [ 33.574913][ T3494] loop4: detected capacity change from 0 to 128 [ 33.584312][ T3487] bridge0: left promiscuous mode [ 33.589536][ T3487] batadv_slave_1: left promiscuous mode [ 33.606519][ T3494] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.656748][ T3494] ext4 filesystem being mounted at /7/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.763854][ T3266] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.043431][ T3517] Falling back ldisc for ttyS3. [ 34.131379][ T3523] syz.4.41[3523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.132008][ T3523] syz.4.41[3523] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.545088][ T3529] syz.1.44 (3529) used greatest stack depth: 11128 bytes left [ 34.567668][ T3543] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 34.630023][ T3549] process 'syz.2.53' launched './file0' with NULL argv: empty string added [ 34.785975][ T3555] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 34.795937][ T3553] tipc: Enabling of bearer rejected, failed to enable media [ 34.874446][ T3563] loop2: detected capacity change from 0 to 128 [ 35.193987][ T3579] syz.2.64[3579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.194039][ T3579] syz.2.64[3579] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.738396][ T3616] ======================================================= [ 35.738396][ T3616] WARNING: The mand mount option has been deprecated and [ 35.738396][ T3616] and is ignored by this kernel. Remove the mand [ 35.738396][ T3616] option from the mount to silence this warning. [ 35.738396][ T3616] ======================================================= [ 35.820497][ T3624] syz.1.82 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 35.979192][ T3648] netlink: 16 bytes leftover after parsing attributes in process `syz.1.91'. [ 35.996919][ T3648] syz.1.91 (3648) used greatest stack depth: 10952 bytes left [ 36.234801][ T3685] netlink: 272 bytes leftover after parsing attributes in process `syz.3.106'. [ 36.455344][ T3706] loop3: detected capacity change from 0 to 128 [ 36.475036][ T3706] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 36.499276][ T3706] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 36.552306][ T3261] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 36.577217][ T3716] netlink: 56 bytes leftover after parsing attributes in process `syz.2.121'. [ 37.464844][ T3730] syz.3.123 (3730) used greatest stack depth: 10856 bytes left [ 37.660553][ T3760] loop1: detected capacity change from 0 to 512 [ 37.667606][ T3760] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 37.680902][ T3760] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.692081][ T3760] EXT4-fs (loop1): 1 truncate cleaned up [ 37.698264][ T3760] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.713720][ T29] kauditd_printk_skb: 238 callbacks suppressed [ 37.713735][ T29] audit: type=1400 audit(1725885755.900:367): avc: denied { read } for pid=3759 comm="syz.1.137" path="/22/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.742632][ T29] audit: type=1400 audit(1725885755.900:368): avc: denied { map } for pid=3759 comm="syz.1.137" path="/22/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 37.768525][ T3762] ================================================================== [ 37.776706][ T3762] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 37.785798][ T3762] [ 37.788141][ T3762] read-write to 0xffff888106a31e20 of 8 bytes by task 3760 on cpu 1: [ 37.796242][ T3762] __filemap_add_folio+0x439/0x710 [ 37.801573][ T3762] filemap_add_folio+0x9c/0x1b0 [ 37.806472][ T3762] page_cache_ra_unbounded+0x148/0x2e0 [ 37.812598][ T3762] page_cache_async_ra+0x40c/0x420 [ 37.817737][ T3762] filemap_fault+0x2d3/0xa60 [ 37.822630][ T3762] __do_fault+0xb6/0x200 [ 37.827008][ T3762] handle_mm_fault+0xe8b/0x2a30 [ 37.832166][ T3762] __get_user_pages+0x499/0x10d0 [ 37.837321][ T3762] __mm_populate+0x25b/0x3b0 [ 37.841969][ T3762] vm_mmap_pgoff+0x1d6/0x290 [ 37.847472][ T3762] ksys_mmap_pgoff+0x292/0x340 [ 37.852376][ T3762] x64_sys_call+0x1884/0x2d60 [ 37.857180][ T3762] do_syscall_64+0xc9/0x1c0 [ 37.861885][ T3762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.867904][ T3762] [ 37.870344][ T3762] read to 0xffff888106a31e20 of 8 bytes by task 3762 on cpu 0: [ 37.878178][ T3762] filemap_write_and_wait_range+0x58/0x1f0 [ 37.884023][ T3762] ext4_punch_hole+0xc5/0x7e0 [ 37.888811][ T3762] ext4_fallocate+0x209/0x1190 [ 37.893813][ T3762] vfs_fallocate+0x392/0x3e0 [ 37.898530][ T3762] do_madvise+0x1177/0x2620 [ 37.903493][ T3762] __x64_sys_madvise+0x61/0x70 [ 37.908576][ T3762] x64_sys_call+0x2320/0x2d60 [ 37.913463][ T3762] do_syscall_64+0xc9/0x1c0 [ 37.918024][ T3762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.924144][ T3762] [ 37.926501][ T3762] value changed: 0x00000000000006c0 -> 0x00000000000006c5 [ 37.933973][ T3762] [ 37.936488][ T3762] Reported by Kernel Concurrency Sanitizer on: [ 37.942679][ T3762] CPU: 0 UID: 0 PID: 3762 Comm: syz.1.137 Not tainted 6.11.0-rc7-syzkaller #0 [ 37.951821][ T3762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 37.961899][ T3762] ================================================================== [ 38.049176][ T3260] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.489979][ T3340] usb 1-1: enqueue for inactive port 0 [ 38.495538][ T3340] usb 1-1: enqueue for inactive port 0 [ 38.579802][ T3340] vhci_hcd: vhci_device speed not set