last executing test programs: 2.792214957s ago: executing program 2 (id=393): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r1, 0x3) r2 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r2, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000007940), 0x55, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.948319598s ago: executing program 2 (id=428): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00000108"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f00000000c0)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x11, 0x40, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.874028284s ago: executing program 0 (id=432): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xa3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000040420f00b7030000000020008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.798080649s ago: executing program 0 (id=438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r2}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.732023414s ago: executing program 0 (id=440): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000001c0)={'syztnl1\x00', 0x0}) r0 = socket$isdn(0x22, 0x2, 0x23) dup2(0xffffffffffffffff, r0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x91, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_uring_setup(0x0, &(0x7f00000009c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000048000), 0x0) 1.411143877s ago: executing program 2 (id=448): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r1, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept(r1, 0x0, 0x0) 1.288509037s ago: executing program 2 (id=451): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="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"/718], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r3, 0x107, 0x16, &(0x7f0000000000), 0x4) 1.288312137s ago: executing program 2 (id=452): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000a1ad7d2c95"], &(0x7f0000000000)='GPL\x00'}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r1}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) mkdir(0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close_range(r3, 0xffffffffffffffff, 0x0) 1.1060726s ago: executing program 4 (id=458): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x5]}, 0x8) 1.009921267s ago: executing program 4 (id=460): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x4, 0x2}, 0x48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000002000000000000000002000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70300000000000085000000ad000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r4, 0xffffffffffffffff, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 979.382219ms ago: executing program 4 (id=461): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) ptrace$setopts(0x4206, 0x0, 0x0, 0x200001) 946.020102ms ago: executing program 4 (id=463): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000002c0)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x2c}, {0x6}]}, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) 842.441139ms ago: executing program 0 (id=467): syz_read_part_table(0x5fd, &(0x7f0000000d00)="$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") pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x6000, 0x0) 842.176399ms ago: executing program 4 (id=468): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() timer_create(0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2ae23c", 0x14, 0x6, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) 841.832519ms ago: executing program 1 (id=469): r0 = io_uring_setup(0x7fdb, &(0x7f0000000080)) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r4 = openat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='cpu.weight\x00', 0x2, 0x0) sendfile(r5, r3, 0x0, 0x10000a006) close_range(r0, 0xffffffffffffffff, 0x0) 841.500539ms ago: executing program 4 (id=470): socket$inet6_sctp(0xa, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x84, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @empty}}}}, &(0x7f0000000080)=0xb0) 836.40217ms ago: executing program 1 (id=471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000180), 0x40010) 776.486874ms ago: executing program 1 (id=472): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x3f, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000004c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0x8ec0, 0x0) fcntl$setpipe(r4, 0x408, 0x0) dup3(r2, r3, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) 776.214284ms ago: executing program 0 (id=473): r0 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) dup(0xffffffffffffffff) mount$9p_fd(0x0, 0x0, &(0x7f0000000b80), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) writev(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r2}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x500}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000021000f0000f901000000000002"], 0x1c}}, 0x0) 765.128705ms ago: executing program 0 (id=474): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000002060000000000000000000000060000050004000000000011000300486173683a69702c706f5174000008001c100780050014"], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="090000001000000000f2ff3f0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002"], 0x44}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 652.108433ms ago: executing program 1 (id=475): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000300)="ab", 0x1e000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 470.393876ms ago: executing program 2 (id=476): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000300)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@jqfmt_vfsold}, {@usrquota}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) 469.688766ms ago: executing program 1 (id=486): r0 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) unshare(0x20000600) r3 = syz_io_uring_setup(0xf3d, &(0x7f0000000480), &(0x7f0000000080)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x6, 0x0, 0x1, 0x0, 0x0}) io_uring_enter(r3, 0x4ac6, 0x0, 0x0, 0x0, 0x0) 413.96273ms ago: executing program 1 (id=477): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0000}, {0x0, 0x0, 0x7f}, {}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) r1 = epoll_create(0x7ffffffe) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x15) 238.796233ms ago: executing program 3 (id=481): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, @perf_bp={0x0}, 0x20}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000800)='syzkaller\x00') ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000001200)={'vlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) 168.926008ms ago: executing program 3 (id=482): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00000c0000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0xf3c00000) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) 100.865093ms ago: executing program 3 (id=483): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000a926007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r2, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) sendto$inet6(r2, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) sendto$inet6(r2, &(0x7f0000000600)="2501f71d330b07000000000000002bbe9196e06d9bd46973ff740219a971634887b4", 0x22, 0x0, 0x0, 0x0) recvfrom$inet6(r2, 0x0, 0x0, 0x2003, 0x0, 0x0) 100.683633ms ago: executing program 3 (id=484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000079e02200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) 100.547123ms ago: executing program 3 (id=485): socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$rfkill(r1, &(0x7f0000000080), 0xffffff1c) r2 = open(&(0x7f0000000980)='./file2\x00', 0x8040, 0x0) dup3(r2, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, 0x0}]) 0s ago: executing program 3 (id=487): unshare(0x22020600) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x43e, &(0x7f00000004c0)="$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") r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = dup2(r1, r0) close_range(r2, 0xffffffffffffffff, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r3, 0x0) kernel console output (not intermixed with test programs): [ T3269] bridge_slave_1: entered allmulticast mode [ 28.901680][ T3269] bridge_slave_1: entered promiscuous mode [ 28.913482][ T3273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.927677][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.934844][ T3272] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.942024][ T3272] bridge_slave_1: entered allmulticast mode [ 28.948416][ T3272] bridge_slave_1: entered promiscuous mode [ 28.988075][ T3272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.001267][ T3269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.016091][ T3273] team0: Port device team_slave_0 added [ 29.022698][ T3272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.032663][ T3273] team0: Port device team_slave_1 added [ 29.041696][ T3269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.051135][ T3267] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.058330][ T3267] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.065445][ T3267] bridge_slave_0: entered allmulticast mode [ 29.071866][ T3267] bridge_slave_0: entered promiscuous mode [ 29.100434][ T3267] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.107709][ T3267] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.114862][ T3267] bridge_slave_1: entered allmulticast mode [ 29.121498][ T3267] bridge_slave_1: entered promiscuous mode [ 29.133479][ T3272] team0: Port device team_slave_0 added [ 29.143065][ T3272] team0: Port device team_slave_1 added [ 29.149262][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.156243][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.182308][ T3273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.198857][ T3269] team0: Port device team_slave_0 added [ 29.205508][ T3269] team0: Port device team_slave_1 added [ 29.240463][ T3259] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.249652][ T3273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.256637][ T3273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.282561][ T3273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.302130][ T3267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.312568][ T3267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.321904][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.328982][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.354954][ T3272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.365705][ T3259] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.374817][ T3259] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.383442][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.390452][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.417328][ T3269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.433354][ T3272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.440384][ T3272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.466305][ T3272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.490669][ T3259] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.499542][ T3269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.506575][ T3269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.532649][ T3269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.549877][ T3267] team0: Port device team_slave_0 added [ 29.562985][ T3273] hsr_slave_0: entered promiscuous mode [ 29.569449][ T3273] hsr_slave_1: entered promiscuous mode [ 29.575475][ T3273] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.583055][ T3273] Cannot create hsr debugfs directory [ 29.597843][ T3267] team0: Port device team_slave_1 added [ 29.615467][ T3272] hsr_slave_0: entered promiscuous mode [ 29.621520][ T3272] hsr_slave_1: entered promiscuous mode [ 29.627387][ T3272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.634934][ T3272] Cannot create hsr debugfs directory [ 29.649489][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.656539][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.682516][ T3267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.708383][ T3267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.715345][ T3267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.741381][ T3267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.768692][ T3269] hsr_slave_0: entered promiscuous mode [ 29.774886][ T3269] hsr_slave_1: entered promiscuous mode [ 29.780744][ T3269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.788300][ T3269] Cannot create hsr debugfs directory [ 29.823665][ T3267] hsr_slave_0: entered promiscuous mode [ 29.829749][ T3267] hsr_slave_1: entered promiscuous mode [ 29.835651][ T3267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.844332][ T3267] Cannot create hsr debugfs directory [ 29.970659][ T3273] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.979670][ T3273] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.994421][ T3273] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.014195][ T3273] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.045940][ T3272] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.054825][ T3272] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.064191][ T3272] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.073219][ T3272] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.099928][ T3269] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.109352][ T3269] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.118815][ T3269] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.127956][ T3269] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.138907][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.174011][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.181871][ T3267] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.202780][ T3267] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.211297][ T3267] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.225013][ T3267] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.236671][ T3289] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.243763][ T3289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.259810][ T3289] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.267004][ T3289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.303968][ T3272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.323795][ T3273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.349028][ T3272] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.363277][ T3259] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.386727][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.393824][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.409794][ T3269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.423031][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.430396][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.445454][ T3273] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.464616][ T3269] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.480869][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.488024][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.497497][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.504585][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.514353][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.521458][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.545210][ T3273] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.555774][ T3273] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.570109][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.577200][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.625021][ T3267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.647968][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.675413][ T3267] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.689481][ T3273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.723971][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.731156][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.741525][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.748633][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.794613][ T3269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.836630][ T3272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.889114][ T3259] veth0_vlan: entered promiscuous mode [ 30.903419][ T3267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.928306][ T3259] veth1_vlan: entered promiscuous mode [ 30.953499][ T3273] veth0_vlan: entered promiscuous mode [ 30.979958][ T3273] veth1_vlan: entered promiscuous mode [ 30.988748][ T3259] veth0_macvtap: entered promiscuous mode [ 31.007888][ T3259] veth1_macvtap: entered promiscuous mode [ 31.019475][ T3269] veth0_vlan: entered promiscuous mode [ 31.034339][ T3269] veth1_vlan: entered promiscuous mode [ 31.051511][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.067670][ T3273] veth0_macvtap: entered promiscuous mode [ 31.075354][ T3273] veth1_macvtap: entered promiscuous mode [ 31.090640][ T3269] veth0_macvtap: entered promiscuous mode [ 31.098897][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.109350][ T3269] veth1_macvtap: entered promiscuous mode [ 31.118011][ T3259] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.126909][ T3259] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.135613][ T3259] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.144369][ T3259] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.160812][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.171297][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.182665][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.201627][ T3267] veth0_vlan: entered promiscuous mode [ 31.209302][ T3273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.219817][ T3273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.231193][ T3273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.243193][ T3273] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.252068][ T3273] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.260876][ T3273] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.269613][ T3273] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.290742][ T3267] veth1_vlan: entered promiscuous mode [ 31.299176][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.300228][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.300242][ T29] audit: type=1400 audit(1725093738.761:110): avc: denied { mounton } for pid=3259 comm="syz-executor" path="/root/syzkaller.veSzI7/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.309795][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.322184][ T29] audit: type=1400 audit(1725093738.771:111): avc: denied { mount } for pid=3259 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.340070][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.340088][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.349890][ T29] audit: type=1400 audit(1725093738.771:112): avc: denied { mounton } for pid=3259 comm="syz-executor" path="/root/syzkaller.veSzI7/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.374099][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.382386][ T29] audit: type=1400 audit(1725093738.771:113): avc: denied { mount } for pid=3259 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.393606][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.417341][ T29] audit: type=1400 audit(1725093738.771:114): avc: denied { unmount } for pid=3259 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.458454][ T29] audit: type=1400 audit(1725093738.921:115): avc: denied { mounton } for pid=3259 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.476581][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.476603][ T3269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.520091][ T3269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.530862][ T3269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.546070][ T3269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.554797][ T3269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.563554][ T3269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.572476][ T3269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.587226][ T3272] veth0_vlan: entered promiscuous mode [ 31.598890][ T29] audit: type=1400 audit(1725093739.051:116): avc: denied { read write } for pid=3259 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.631788][ T29] audit: type=1400 audit(1725093739.061:117): avc: denied { open } for pid=3259 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.655858][ T29] audit: type=1400 audit(1725093739.061:118): avc: denied { ioctl } for pid=3259 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.681431][ T29] audit: type=1400 audit(1725093739.081:119): avc: denied { open } for pid=3398 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 31.710412][ T3272] veth1_vlan: entered promiscuous mode [ 31.723389][ T3267] veth0_macvtap: entered promiscuous mode [ 31.740574][ T3267] veth1_macvtap: entered promiscuous mode [ 31.774598][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.785141][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.795043][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.805511][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.815441][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.825897][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.838766][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.856983][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.867473][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.877407][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.887454][ T3405] loop2: detected capacity change from 0 to 128 [ 31.887917][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.904044][ T3267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.914591][ T3267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.925969][ T3267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.950876][ T3272] veth0_macvtap: entered promiscuous mode [ 31.982587][ T3267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.991504][ T3267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.000364][ T3267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.009102][ T3267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.037518][ T3272] veth1_macvtap: entered promiscuous mode [ 32.092407][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.103124][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.113051][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.123568][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.133448][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.143887][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.153789][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.164315][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.192847][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.215368][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.225974][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.235977][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.246453][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.256469][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.266960][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.276987][ T3272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.283583][ T3406] loop3: detected capacity change from 0 to 256 [ 32.287494][ T3272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.289817][ T3272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.334679][ T3272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.338980][ T3426] loop1: detected capacity change from 0 to 512 [ 32.343525][ T3272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.358532][ T3272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.367438][ T3272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.372847][ T3426] ======================================================= [ 32.372847][ T3426] WARNING: The mand mount option has been deprecated and [ 32.372847][ T3426] and is ignored by this kernel. Remove the mand [ 32.372847][ T3426] option from the mount to silence this warning. [ 32.372847][ T3426] ======================================================= [ 32.432979][ T3429] netlink: 'syz.2.11': attribute type 10 has an invalid length. [ 32.456860][ T3426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.480788][ T3429] team0: Port device netdevsim1 added [ 32.490973][ T3426] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.513753][ T3426] Process accounting resumed [ 32.525598][ T3429] syz.2.11 (3429) used greatest stack depth: 11616 bytes left [ 32.538723][ T3426] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 32.545058][ T3440] serio: Serial port ptm0 [ 32.596345][ T3425] syz.1.10 (3425) used greatest stack depth: 11368 bytes left [ 32.613872][ T3443] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.626556][ T3273] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.632159][ T3446] netlink: 24 bytes leftover after parsing attributes in process `syz.2.17'. [ 32.644477][ T3446] netlink: 228 bytes leftover after parsing attributes in process `syz.2.17'. [ 32.693402][ T3446] netlink: 80 bytes leftover after parsing attributes in process `syz.2.17'. [ 32.702283][ T3446] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17'. [ 32.887372][ T3471] loop4: detected capacity change from 0 to 128 [ 33.233281][ T3511] netlink: 'syz.4.41': attribute type 4 has an invalid length. [ 33.241023][ T3511] netlink: 2024 bytes leftover after parsing attributes in process `syz.4.41'. [ 33.250206][ T3511] netlink: 20 bytes leftover after parsing attributes in process `syz.4.41'. [ 33.429620][ T3516] syz.0.47[3516] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.429774][ T3516] syz.0.47[3516] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 33.460198][ T3518] netlink: 'syz.0.48': attribute type 10 has an invalid length. [ 33.482382][ T3518] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 33.522987][ T3520] tipc: Started in network mode [ 33.527936][ T3520] tipc: Node identity 0eb77f7c8687, cluster identity 4711 [ 33.535170][ T3520] tipc: Enabled bearer , priority 0 [ 33.544344][ T3520] syzkaller0: MTU too low for tipc bearer [ 33.550166][ T3520] tipc: Disabling bearer [ 33.643890][ T3462] dccp_close: ABORT with 32 bytes unread [ 33.669758][ T3524] netlink: 84 bytes leftover after parsing attributes in process `syz.0.51'. [ 33.679682][ T3524] veth0_vlan: left promiscuous mode [ 33.685001][ T3524] veth0_vlan: entered allmulticast mode [ 33.700285][ T3524] veth0_vlan: entered promiscuous mode [ 33.749170][ T3532] syz_tun: entered promiscuous mode [ 33.755336][ T3532] batadv_slave_1: entered promiscuous mode [ 33.784404][ T3524] syz.0.51 (3524) used greatest stack depth: 10840 bytes left [ 33.819623][ T3536] loop0: detected capacity change from 0 to 1764 [ 33.832005][ T3538] loop3: detected capacity change from 0 to 1024 [ 33.842951][ T3538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 33.858260][ T3538] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 33.875449][ T3538] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c09c, mo2=0003] [ 33.884252][ T3538] System zones: 0-1, 3-36 [ 33.900021][ T3538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.948291][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.205131][ T11] nci: nci_rx_work: unknown MT 0x4 [ 34.665151][ T3579] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.71'. [ 35.001654][ T3582] loop3: detected capacity change from 0 to 512 [ 35.009729][ T3582] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.022798][ T3582] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.034244][ T3582] EXT4-fs (loop3): 1 truncate cleaned up [ 35.040624][ T3582] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.068077][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.088780][ T3586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.73'. [ 35.097632][ T3586] netlink: 28 bytes leftover after parsing attributes in process `syz.3.73'. [ 35.108536][ T3586] bond_slave_0: entered promiscuous mode [ 35.114731][ T3586] bond_slave_0: left promiscuous mode [ 35.205041][ T3588] loop3: detected capacity change from 0 to 512 [ 35.218606][ T3588] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.231267][ T3588] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.243822][ T3588] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.74: corrupted inode contents [ 35.255792][ T3588] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #2: comm syz.3.74: mark_inode_dirty error [ 35.267348][ T3588] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.74: corrupted inode contents [ 35.289202][ T3588] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.74: Directory hole found for htree leaf block 0 [ 35.323927][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.410019][ T3601] capability: warning: `syz.3.78' uses deprecated v2 capabilities in a way that may be insecure [ 35.420743][ T3601] program syz.3.78 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 35.617859][ T3608] syz.3.81[3608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.618015][ T3608] syz.3.81[3608] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.017067][ T28] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.301764][ T3612] chnl_net:caif_netlink_parms(): no params data found [ 36.378470][ T3604] syz.4.79 (3604) used greatest stack depth: 10056 bytes left [ 36.427752][ T3612] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.434853][ T3612] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.456256][ T3612] bridge_slave_0: entered allmulticast mode [ 36.462726][ T3612] bridge_slave_0: entered promiscuous mode [ 36.471152][ T3612] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.478445][ T3612] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.495296][ T3612] bridge_slave_1: entered allmulticast mode [ 36.507689][ T3612] bridge_slave_1: entered promiscuous mode [ 36.579078][ T3612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.602754][ T3636] loop4: detected capacity change from 0 to 2048 [ 36.614427][ T3612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.640423][ T3636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.673965][ T3612] team0: Port device team_slave_0 added [ 36.680807][ T3612] team0: Port device team_slave_1 added [ 36.693806][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 36.693824][ T29] audit: type=1400 audit(1725093744.141:279): avc: denied { append } for pid=3635 comm="syz.4.89" path="/20/file0/memory.events.local" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.732316][ T29] audit: type=1326 audit(1725093744.181:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3635 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776c859eb9 code=0x7ffc0000 [ 36.755594][ T29] audit: type=1326 audit(1725093744.181:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3635 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f776c859eb9 code=0x7ffc0000 [ 36.778883][ T29] audit: type=1326 audit(1725093744.181:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3635 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776c859eb9 code=0x7ffc0000 [ 36.803147][ T29] audit: type=1326 audit(1725093744.181:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3635 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776c859eb9 code=0x7ffc0000 [ 36.827327][ T29] audit: type=1326 audit(1725093744.181:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3635 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=75 compat=0 ip=0x7f776c859eb9 code=0x7ffc0000 [ 36.869737][ T3612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.876838][ T3612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.902902][ T3612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.923740][ T29] audit: type=1326 audit(1725093744.191:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3635 comm="syz.4.89" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f776c859eb9 code=0x7ffc0000 [ 36.924007][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.982253][ T3612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.989258][ T3612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.015651][ T3612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.030686][ T28] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.109533][ T28] team0: Port device netdevsim1 removed [ 37.124239][ T28] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.165162][ T3612] hsr_slave_0: entered promiscuous mode [ 37.173125][ T3612] hsr_slave_1: entered promiscuous mode [ 37.179251][ T3612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.186960][ T3612] Cannot create hsr debugfs directory [ 37.195406][ T28] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.209815][ T3659] Zero length message leads to an empty skb [ 37.347058][ T3632] chnl_net:caif_netlink_parms(): no params data found [ 37.379719][ T28] bridge_slave_1: left allmulticast mode [ 37.385403][ T28] bridge_slave_1: left promiscuous mode [ 37.391175][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.401870][ T28] bridge_slave_0: left allmulticast mode [ 37.407741][ T28] bridge_slave_0: left promiscuous mode [ 37.413403][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.528714][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.548025][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.567730][ T28] bond0 (unregistering): Released all slaves [ 37.625001][ T29] audit: type=1400 audit(1725093745.071:286): avc: denied { search } for pid=2998 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 37.646368][ T29] audit: type=1400 audit(1725093745.071:287): avc: denied { read } for pid=2998 comm="dhcpcd" name="n25" dev="tmpfs" ino=845 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.668035][ T29] audit: type=1400 audit(1725093745.071:288): avc: denied { open } for pid=2998 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=845 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 37.704814][ T3646] chnl_net:caif_netlink_parms(): no params data found [ 37.734407][ T28] hsr_slave_0: left promiscuous mode [ 37.740403][ T28] hsr_slave_1: left promiscuous mode [ 37.747963][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.755366][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.763919][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.771421][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.781877][ T28] veth1_macvtap: left promiscuous mode [ 37.787439][ T28] veth0_macvtap: left promiscuous mode [ 37.792950][ T28] veth1_vlan: left promiscuous mode [ 37.798317][ T28] veth0_vlan: left promiscuous mode [ 37.905658][ T28] team0 (unregistering): Port device team_slave_1 removed [ 37.917007][ T28] team0 (unregistering): Port device team_slave_0 removed [ 37.963233][ T3632] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.970371][ T3632] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.979610][ T3632] bridge_slave_0: entered allmulticast mode [ 37.988153][ T3632] bridge_slave_0: entered promiscuous mode [ 38.011900][ T3632] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.019047][ T3632] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.051204][ T3632] bridge_slave_1: entered allmulticast mode [ 38.063042][ T3632] bridge_slave_1: entered promiscuous mode [ 38.132146][ T3632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.153531][ T3688] netlink: 'syz.4.96': attribute type 4 has an invalid length. [ 38.164930][ T3632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.244375][ T3695] netlink: 'syz.4.97': attribute type 21 has an invalid length. [ 38.252250][ T3695] netlink: 128 bytes leftover after parsing attributes in process `syz.4.97'. [ 38.263612][ T3695] netlink: 'syz.4.97': attribute type 4 has an invalid length. [ 38.271563][ T3695] netlink: 'syz.4.97': attribute type 5 has an invalid length. [ 38.279283][ T3695] netlink: 3 bytes leftover after parsing attributes in process `syz.4.97'. [ 38.299548][ T3646] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.306686][ T3646] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.314259][ T3646] bridge_slave_0: entered allmulticast mode [ 38.334130][ T3646] bridge_slave_0: entered promiscuous mode [ 38.346432][ T3632] team0: Port device team_slave_0 added [ 38.358961][ T3632] team0: Port device team_slave_1 added [ 38.366037][ T3646] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.373149][ T3646] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.382187][ T3646] bridge_slave_1: entered allmulticast mode [ 38.388857][ T3646] bridge_slave_1: entered promiscuous mode [ 38.426613][ T3632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.433612][ T3632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.455056][ T3698] loop4: detected capacity change from 0 to 8192 [ 38.459625][ T3632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.500344][ T3632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.507445][ T3632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.533418][ T3632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.545932][ T3698] loop4: p2 p3 p4 [ 38.548109][ T3612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.549733][ T3698] loop4: p2 start 452985600 is beyond EOD, truncated [ 38.563148][ T3698] loop4: p3 start 4177527808 is beyond EOD, truncated [ 38.570030][ T3698] loop4: p4 size 3599499392 extends beyond EOD, truncated [ 38.611293][ T3612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.626924][ T3612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.635343][ T2960] loop4: p2 p3 p4 [ 38.639748][ T2960] loop4: p2 start 452985600 is beyond EOD, truncated [ 38.646583][ T2960] loop4: p3 start 4177527808 is beyond EOD, truncated [ 38.653384][ T2960] loop4: p4 size 3599499392 extends beyond EOD, truncated [ 38.667808][ T3646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.685661][ T3612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.724181][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.778158][ T3253] udevd[3253]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 38.810846][ T3646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.822768][ T3632] hsr_slave_0: entered promiscuous mode [ 38.845312][ T3632] hsr_slave_1: entered promiscuous mode [ 38.851625][ T3632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 38.862838][ T3632] Cannot create hsr debugfs directory [ 38.878997][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.942484][ T28] bond0: (slave netdevsim1): Releasing backup interface [ 38.970451][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.003006][ T3646] team0: Port device team_slave_0 added [ 39.023906][ T3646] team0: Port device team_slave_1 added [ 39.050360][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.081747][ T3646] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.088743][ T3646] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.115465][ T3646] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.151321][ T3646] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.158366][ T3646] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.184431][ T3646] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.214856][ T3735] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3735 comm=syz.3.106 [ 39.243389][ T3735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.106'. [ 39.284701][ T3646] hsr_slave_0: entered promiscuous mode [ 39.291432][ T3646] hsr_slave_1: entered promiscuous mode [ 39.299277][ T3646] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.307328][ T3646] Cannot create hsr debugfs directory [ 39.323836][ T3754] loop4: detected capacity change from 0 to 512 [ 39.333905][ T3754] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.344214][ T3754] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 39.344284][ T3612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.355275][ T3754] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 39.368147][ T3754] System zones: 1-12 [ 39.372885][ T3754] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.113: corrupted in-inode xattr: e_value size too large [ 39.387195][ T3754] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.113: couldn't read orphan inode 15 (err -117) [ 39.388303][ T3632] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.399866][ T3754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.439946][ T3612] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.451403][ T1692] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.458500][ T1692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.476586][ T1692] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.483810][ T1692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.513074][ T3632] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.550282][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.579296][ T3632] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.616609][ T3773] TCP: out of memory -- consider tuning tcp_mem [ 39.627645][ T3632] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.654333][ T3775] netlink: 'syz.4.115': attribute type 5 has an invalid length. [ 39.688179][ T28] bridge_slave_1: left allmulticast mode [ 39.693952][ T28] bridge_slave_1: left promiscuous mode [ 39.699778][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.718487][ T28] bridge_slave_0: left allmulticast mode [ 39.724173][ T28] bridge_slave_0: left promiscuous mode [ 39.729989][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.748356][ T28] bridge_slave_1: left allmulticast mode [ 39.754110][ T28] bridge_slave_1: left promiscuous mode [ 39.759833][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.769206][ T28] bridge_slave_0: left allmulticast mode [ 39.774860][ T28] bridge_slave_0: left promiscuous mode [ 39.780562][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.048458][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.065795][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.087709][ T28] bond0 (unregistering): Released all slaves [ 40.106485][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.133860][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.158369][ T28] bond0 (unregistering): Released all slaves [ 40.197407][ T3612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.220404][ T28] tipc: Left network mode [ 40.265360][ T3805] loop3: detected capacity change from 0 to 512 [ 40.285364][ T3805] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.306416][ T3805] ext4 filesystem being mounted at /29/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.332369][ T3612] veth0_vlan: entered promiscuous mode [ 40.345625][ T3259] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.359257][ T3612] veth1_vlan: entered promiscuous mode [ 40.368923][ T28] hsr_slave_0: left promiscuous mode [ 40.379135][ T28] hsr_slave_1: left promiscuous mode [ 40.386709][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.394120][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.404474][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.412031][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.423084][ T28] hsr_slave_0: left promiscuous mode [ 40.428986][ T28] hsr_slave_1: left promiscuous mode [ 40.434839][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.442422][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.450211][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.457662][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.468434][ T28] veth1_macvtap: left promiscuous mode [ 40.473954][ T28] veth0_macvtap: left promiscuous mode [ 40.479525][ T28] veth1_vlan: left promiscuous mode [ 40.484829][ T28] veth0_vlan: left promiscuous mode [ 40.490569][ T28] veth1_macvtap: left promiscuous mode [ 40.496083][ T28] veth0_macvtap: left promiscuous mode [ 40.501593][ T28] veth1_vlan: left promiscuous mode [ 40.506853][ T28] veth0_vlan: left promiscuous mode [ 40.655373][ T28] team0 (unregistering): Port device team_slave_1 removed [ 40.666058][ T28] team0 (unregistering): Port device team_slave_0 removed [ 40.733102][ T28] team0 (unregistering): Port device team_slave_1 removed [ 40.743457][ T28] team0 (unregistering): Port device team_slave_0 removed [ 46.733358][ T3632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 46.753180][ T3632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 46.762425][ T3632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 46.783339][ T3632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 46.794858][ T3846] netlink: 'syz.3.127': attribute type 5 has an invalid length. [ 46.805158][ T3612] veth0_macvtap: entered promiscuous mode [ 46.828844][ T3612] veth1_macvtap: entered promiscuous mode [ 46.848401][ T3646] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 46.867870][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 46.867885][ T29] audit: type=1400 audit(1725093754.321:364): avc: denied { create } for pid=3850 comm="syz.3.128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 46.873945][ T3612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.903938][ T3612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.913847][ T3612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.924346][ T3612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.937844][ T3612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.950311][ T3646] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 46.967052][ T3632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.975355][ T3612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.985952][ T3612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.996008][ T3612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.006465][ T3612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.017583][ T3612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.025107][ T3646] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.037732][ T3863] tipc: Started in network mode [ 47.042743][ T3863] tipc: Node identity , cluster identity 4711 [ 47.048925][ T3863] tipc: Failed to set node id, please configure manually [ 47.056067][ T3863] tipc: Enabling of bearer rejected, failed to enable media [ 47.068470][ T3646] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.079137][ T3612] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.087906][ T3612] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.096640][ T3612] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.105403][ T3612] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.126893][ T3632] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.149705][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.156848][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.189534][ T3878] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.203630][ T3278] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.209743][ T29] audit: type=1400 audit(1725093754.651:365): avc: denied { bind } for pid=3876 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.210749][ T3278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.229800][ T29] audit: type=1400 audit(1725093754.651:366): avc: denied { name_bind } for pid=3876 comm="syz.2.84" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 47.257660][ T29] audit: type=1400 audit(1725093754.651:367): avc: denied { node_bind } for pid=3876 comm="syz.2.84" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 47.290498][ T3632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.330733][ T3646] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.334178][ T29] audit: type=1400 audit(1725093754.761:368): avc: denied { read } for pid=3876 comm="syz.2.84" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.363155][ T3646] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.381540][ T1692] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.388773][ T1692] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.398832][ T29] audit: type=1400 audit(1725093754.811:369): avc: denied { write } for pid=3876 comm="syz.2.84" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.414065][ T1692] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.425347][ T1692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.451792][ T3632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.495202][ T3646] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.582531][ T3632] veth0_vlan: entered promiscuous mode [ 47.593196][ T3646] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.604727][ T3632] veth1_vlan: entered promiscuous mode [ 47.633377][ T3632] veth0_macvtap: entered promiscuous mode [ 47.661641][ T3632] veth1_macvtap: entered promiscuous mode [ 47.682967][ T3632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.693595][ T3632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.703645][ T3632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.714193][ T3632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.724120][ T3632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.734668][ T3632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.764932][ T3632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.778886][ T3632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.789384][ T3632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.799274][ T3632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.809730][ T3632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.819652][ T3632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.830224][ T3632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.845806][ T29] audit: type=1400 audit(1725093755.291:370): avc: denied { create } for pid=3938 comm="syz.2.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 47.856838][ T3632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.884671][ T3632] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.893497][ T3632] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.902245][ T3632] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.911045][ T3632] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.925169][ T29] audit: type=1400 audit(1725093755.361:371): avc: denied { mount } for pid=3945 comm="syz.2.139" name="/" dev="ramfs" ino=6290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 47.947295][ T29] audit: type=1400 audit(1725093755.361:372): avc: denied { mounton } for pid=3945 comm="syz.2.139" path="/6/file0/file0" dev="ramfs" ino=6292 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 47.961075][ T3646] veth0_vlan: entered promiscuous mode [ 47.983799][ T29] audit: type=1400 audit(1725093755.381:373): avc: denied { unmount } for pid=3612 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 48.008871][ T3646] veth1_vlan: entered promiscuous mode [ 48.045124][ T3646] veth0_macvtap: entered promiscuous mode [ 48.060999][ T3646] veth1_macvtap: entered promiscuous mode [ 48.077183][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.087741][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.097608][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.108103][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.117977][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.128546][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.138430][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.148900][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.161766][ T3646] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.195414][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.206004][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.215860][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.226331][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.236374][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.246963][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.256872][ T3646] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.267329][ T3646] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.281696][ T3646] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.290342][ T3971] Process accounting resumed [ 48.291895][ T3646] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.303773][ T3646] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.312556][ T3646] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.321412][ T3646] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.343373][ T3973] loop3: detected capacity change from 0 to 512 [ 48.349961][ T3973] EXT4-fs: Ignoring removed i_version option [ 48.356085][ T3973] EXT4-fs: Ignoring removed nobh option [ 48.367166][ T3973] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.393111][ T3973] EXT4-fs (loop3): 1 truncate cleaned up [ 48.410995][ T3980] loop1: detected capacity change from 0 to 512 [ 48.412530][ T3973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.419045][ T3980] EXT4-fs: Ignoring removed nomblk_io_submit option [ 48.448053][ T3980] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 48.456239][ T3980] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=1842c01c, mo2=0002] [ 48.468827][ T3980] EXT4-fs (loop1): couldn't mount RDWR because of unsupported optional features (80) [ 48.478568][ T3980] EXT4-fs (loop1): Skipping orphan cleanup due to unknown ROCOMPAT features [ 48.488994][ T3980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 48.510489][ T3980] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 48.527421][ T3973] loop3: detected capacity change from 512 to 0 [ 48.534166][ C0] I/O error, dev loop3, sector 72 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 48.538019][ T3632] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.544225][ T3986] syz.3.146: attempt to access beyond end of device [ 48.544225][ T3986] loop3: rw=0, sector=72, nr_sectors = 2 limit=0 [ 48.569924][ T3986] syz.3.146: attempt to access beyond end of device [ 48.569924][ T3986] loop3: rw=0, sector=72, nr_sectors = 2 limit=0 [ 48.582911][ T3986] syz.3.146: attempt to access beyond end of device [ 48.582911][ T3986] loop3: rw=0, sector=72, nr_sectors = 2 limit=0 [ 48.598168][ T3986] syz.3.146: attempt to access beyond end of device [ 48.598168][ T3986] loop3: rw=0, sector=72, nr_sectors = 2 limit=0 [ 48.614271][ T3986] syz.3.146: attempt to access beyond end of device [ 48.614271][ T3986] loop3: rw=0, sector=72, nr_sectors = 2 limit=0 [ 48.636996][ T3986] syz.3.146: attempt to access beyond end of device [ 48.636996][ T3986] loop3: rw=524288, sector=10, nr_sectors = 2 limit=0 [ 48.640969][ T3990] loop0: detected capacity change from 0 to 2048 [ 48.654274][ T3986] syz.3.146: attempt to access beyond end of device [ 48.654274][ T3986] loop3: rw=524288, sector=12, nr_sectors = 2 limit=0 [ 48.659378][ T3990] ext4: Unknown parameter 'mask' [ 48.692540][ T3986] syz.3.146: attempt to access beyond end of device [ 48.692540][ T3986] loop3: rw=524288, sector=14, nr_sectors = 2 limit=0 [ 48.706542][ T3986] syz.3.146: attempt to access beyond end of device [ 48.706542][ T3986] loop3: rw=524288, sector=18, nr_sectors = 2 limit=0 [ 48.720271][ T3986] syz.3.146: attempt to access beyond end of device [ 48.720271][ T3986] loop3: rw=12288, sector=16, nr_sectors = 2 limit=0 [ 48.733621][ T3986] EXT4-fs error (device loop3): ext4_get_inode_loc:4574: inode #15: block 8: comm syz.3.146: unable to read itable block [ 48.748595][ T3990] loop0: detected capacity change from 0 to 128 [ 48.753150][ T3986] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 48.769527][ T3986] EXT4-fs (loop3): I/O error while writing superblock [ 48.776388][ T3986] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: IO failure [ 48.788752][ T3986] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 48.809992][ T3986] EXT4-fs (loop3): I/O error while writing superblock [ 48.816863][ T3986] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #15: comm syz.3.146: mark_inode_dirty error [ 48.830066][ T3996] loop1: detected capacity change from 0 to 128 [ 48.831602][ T3986] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 48.849879][ T3986] EXT4-fs (loop3): I/O error while writing superblock [ 48.861976][ T3986] EXT4-fs error (device loop3): ext4_get_inode_loc:4574: inode #15: block 8: comm syz.3.146: unable to read itable block [ 48.864154][ T3996] Buffer I/O error on dev loop1, logical block 177, lost async page write [ 48.876083][ T3986] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 48.891819][ T3986] EXT4-fs (loop3): I/O error while writing superblock [ 48.898665][ T3986] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: IO failure [ 48.928526][ T3986] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 48.940367][ T3986] EXT4-fs (loop3): I/O error while writing superblock [ 48.947231][ T3986] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #15: comm syz.3.146: mark_inode_dirty error [ 48.970255][ T3986] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 48.979968][ T3986] EXT4-fs (loop3): I/O error while writing superblock [ 48.987573][ T3986] EXT4-fs error (device loop3): ext4_get_inode_loc:4574: inode #15: block 8: comm syz.3.146: unable to read itable block [ 49.001687][ T3986] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 49.010114][ T3986] EXT4-fs (loop3): I/O error while writing superblock [ 49.016977][ T3986] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: IO failure [ 49.027638][ T3986] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 49.040218][ T3986] EXT4-fs (loop3): I/O error while writing superblock [ 49.047183][ T3986] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #15: comm syz.3.146: mark_inode_dirty error [ 49.060009][ T3986] Buffer I/O error on dev loop3, logical block 1, lost sync page write [ 49.068445][ T3986] EXT4-fs (loop3): I/O error while writing superblock [ 49.075240][ T3986] EXT4-fs error (device loop3): ext4_check_bdev_write_error:225: comm syz.3.146: Error while async write back metadata [ 49.159713][ T1692] EXT4-fs warning (device loop3): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 33) [ 49.171649][ T1692] Buffer I/O error on device loop3, logical block 33 [ 49.196392][ T3259] syz_tun (unregistering): left promiscuous mode [ 49.269207][ T4024] sd 0:0:1:0: device reset [ 49.351167][ T4034] netlink: 40 bytes leftover after parsing attributes in process `syz.1.172'. [ 49.394120][ T3278] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.414173][ T4038] loop0: detected capacity change from 0 to 1024 [ 49.433195][ T4038] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 49.434599][ T4042] Illegal XDP return value 8 on prog (id 106) dev N/A, expect packet loss! [ 49.447799][ T4038] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.479261][ T3278] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.545334][ T3278] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.577050][ T3646] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.598181][ T3278] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.645363][ T4057] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.177'. [ 49.654556][ T4057] netlink: 'syz.1.177': attribute type 1 has an invalid length. [ 49.702394][ T3278] bridge_slave_1: left allmulticast mode [ 49.708127][ T3278] bridge_slave_1: left promiscuous mode [ 49.713984][ T3278] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.724818][ T3278] bridge_slave_0: left allmulticast mode [ 49.730580][ T3278] bridge_slave_0: left promiscuous mode [ 49.736248][ T3278] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.834798][ T4071] loop0: detected capacity change from 0 to 128 [ 49.841753][ T4071] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.855477][ T4071] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.869068][ T3278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.880510][ T3278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.889558][ T3646] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 49.897173][ T3646] FAT-fs (loop0): Filesystem has been set read-only [ 49.903941][ T3646] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 49.913147][ T3278] bond0 (unregistering): Released all slaves [ 49.982912][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 49.990746][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 49.998529][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.006223][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.013987][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.021700][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.029561][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.037327][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.044992][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.052678][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.060528][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.068081][ T4076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.068400][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.084409][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.092284][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.100148][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.107937][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.115676][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.123368][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.131292][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.139113][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.146795][ T24] hid-generic 0000:1000003:0000.0001: unknown main item tag 0x0 [ 50.151646][ T4044] chnl_net:caif_netlink_parms(): no params data found [ 50.163900][ T4076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.193973][ T24] hid-generic 0000:1000003:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 50.204122][ T3278] batadv_slave_1: left promiscuous mode [ 50.217227][ T3278] hsr_slave_0: left promiscuous mode [ 50.230597][ T3278] hsr_slave_1: left promiscuous mode [ 50.237282][ T3278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.244771][ T3278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.252465][ T3278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.259996][ T3278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.269268][ T3278] veth1_macvtap: left promiscuous mode [ 50.274743][ T3278] veth0_macvtap: left promiscuous mode [ 50.280360][ T3278] veth1_vlan: left promiscuous mode [ 50.285609][ T3278] veth0_vlan: left promiscuous mode [ 50.375650][ T3278] team0 (unregistering): Port device team_slave_1 removed [ 50.386225][ T3278] team0 (unregistering): Port device team_slave_0 removed [ 50.488722][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.496079][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.513939][ T4044] bridge_slave_0: entered allmulticast mode [ 50.523682][ T4044] bridge_slave_0: entered promiscuous mode [ 50.534005][ T4106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.192'. [ 50.550825][ T4044] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.558159][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.569075][ T4044] bridge_slave_1: entered allmulticast mode [ 50.602720][ T4044] bridge_slave_1: entered promiscuous mode [ 50.661068][ T4044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.699009][ T4044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.720374][ T4119] loop4: detected capacity change from 0 to 2048 [ 50.727385][ T4123] syz.1.196 uses obsolete (PF_INET,SOCK_PACKET) [ 50.730259][ T4119] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.757361][ T4119] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.778644][ T4044] team0: Port device team_slave_0 added [ 50.785321][ T4044] team0: Port device team_slave_1 added [ 50.835903][ T4119] loop4: detected capacity change from 2048 to 0 [ 50.836182][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.849277][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.875297][ T4044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.887785][ T4044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.895377][ T4044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.921372][ T4044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.972211][ T3272] EXT4-fs error (device loop4): ext4_get_inode_loc:4574: inode #2: block 4: comm syz-executor: unable to read itable block [ 50.987184][ T3272] EXT4-fs (loop4): I/O error while writing superblock [ 50.993975][ T3272] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: IO failure [ 51.005323][ T3272] EXT4-fs (loop4): I/O error while writing superblock [ 51.012206][ T3272] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 51.028063][ T3272] EXT4-fs (loop4): I/O error while writing superblock [ 51.032135][ T4044] hsr_slave_0: entered promiscuous mode [ 51.040745][ T11] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4559: inode #2: block 4: comm kworker/u8:0: unable to read itable block [ 51.061827][ T4044] hsr_slave_1: entered promiscuous mode [ 51.076907][ T11] EXT4-fs (loop4): I/O error while writing superblock [ 51.098639][ T3272] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.126991][ T3272] EXT4-fs (loop4): I/O error while writing superblock [ 51.433796][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.518170][ T4183] loop1: detected capacity change from 0 to 256 [ 51.527336][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.550019][ T4183] FAT-fs (loop1): Directory bread(block 64) failed [ 51.557487][ T4183] FAT-fs (loop1): Directory bread(block 65) failed [ 51.564042][ T4183] FAT-fs (loop1): Directory bread(block 66) failed [ 51.570726][ T4183] FAT-fs (loop1): Directory bread(block 67) failed [ 51.577864][ T4183] FAT-fs (loop1): Directory bread(block 68) failed [ 51.585037][ T4183] FAT-fs (loop1): Directory bread(block 69) failed [ 51.591712][ T4183] FAT-fs (loop1): Directory bread(block 70) failed [ 51.598788][ T4183] FAT-fs (loop1): Directory bread(block 71) failed [ 51.605511][ T4183] FAT-fs (loop1): Directory bread(block 72) failed [ 51.616003][ T4044] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.625824][ T4044] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.634725][ T4183] FAT-fs (loop1): Directory bread(block 73) failed [ 51.644487][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.662758][ T4044] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.675004][ T4044] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.698428][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.756680][ T4183] loop1: detected capacity change from 256 to 0 [ 51.811355][ T4044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.836227][ T11] FAT-fs (loop1): unable to read inode block for updating (i_pos 324) [ 51.844861][ T3632] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 51.860927][ T36] bridge_slave_1: left allmulticast mode [ 51.866645][ T36] bridge_slave_1: left promiscuous mode [ 51.872289][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.881103][ T36] bridge_slave_0: left allmulticast mode [ 51.886869][ T36] bridge_slave_0: left promiscuous mode [ 51.892637][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.998681][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.009161][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.019298][ T36] bond0 (unregistering): Released all slaves [ 52.040141][ T4044] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.063393][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.070522][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.094580][ T1692] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.101702][ T1692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.141027][ T4177] chnl_net:caif_netlink_parms(): no params data found [ 52.168428][ T36] hsr_slave_0: left promiscuous mode [ 52.175114][ T36] hsr_slave_1: left promiscuous mode [ 52.188084][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.195575][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.207238][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.214684][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.224409][ T36] veth1_macvtap: left promiscuous mode [ 52.229951][ T36] veth0_macvtap: left promiscuous mode [ 52.235568][ T36] veth1_vlan: left promiscuous mode [ 52.241287][ T36] veth0_vlan: left promiscuous mode [ 52.344255][ T36] team0 (unregistering): Port device team_slave_1 removed [ 52.355087][ T36] team0 (unregistering): Port device team_slave_0 removed [ 52.439752][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.446950][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.454184][ T4177] bridge_slave_0: entered allmulticast mode [ 52.460947][ T4177] bridge_slave_0: entered promiscuous mode [ 52.468138][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.475213][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.482701][ T4177] bridge_slave_1: entered allmulticast mode [ 52.489424][ T4177] bridge_slave_1: entered promiscuous mode [ 52.523889][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.536050][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.541774][ T4258] syz.2.212[4258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.551629][ T4044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.565614][ T4258] syz.2.212[4258] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 52.595471][ T4177] team0: Port device team_slave_0 added [ 52.617651][ T4177] team0: Port device team_slave_1 added [ 52.639436][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.647137][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.673227][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.684993][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.692133][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.718429][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.755479][ T4177] hsr_slave_0: entered promiscuous mode [ 52.761825][ T4177] hsr_slave_1: entered promiscuous mode [ 52.769684][ T4177] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 52.777422][ T4177] Cannot create hsr debugfs directory [ 52.820700][ T4044] veth0_vlan: entered promiscuous mode [ 52.885619][ T4044] veth1_vlan: entered promiscuous mode [ 52.926982][ T4279] loop2: detected capacity change from 0 to 512 [ 52.988856][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 52.988873][ T29] audit: type=1400 audit(1725093760.441:543): avc: denied { cpu } for pid=4289 comm="syz.2.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 53.029769][ T28] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.066211][ T4044] veth0_macvtap: entered promiscuous mode [ 53.077121][ T29] audit: type=1400 audit(1725093760.531:544): avc: denied { read } for pid=4294 comm="syz.2.220" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 53.100212][ T29] audit: type=1400 audit(1725093760.531:545): avc: denied { open } for pid=4294 comm="syz.2.220" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 53.123677][ T29] audit: type=1400 audit(1725093760.531:546): avc: denied { ioctl } for pid=4294 comm="syz.2.220" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 53.151835][ T28] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.180602][ T28] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.224363][ T4044] veth1_macvtap: entered promiscuous mode [ 53.233268][ T4310] loop2: detected capacity change from 0 to 512 [ 53.260571][ T28] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.273317][ T4310] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.307899][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.318478][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.328400][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.329267][ T4310] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.338832][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.338847][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.338862][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.356607][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.369783][ T29] audit: type=1400 audit(1725093760.811:547): avc: denied { map } for pid=4309 comm="syz.2.223" path="/26/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.409021][ T29] audit: type=1400 audit(1725093760.811:548): avc: denied { execute } for pid=4309 comm="syz.2.223" path="/26/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.432253][ T29] audit: type=1400 audit(1725093760.871:549): avc: denied { create } for pid=4309 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.452100][ T29] audit: type=1400 audit(1725093760.871:550): avc: denied { connect } for pid=4309 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.471746][ T29] audit: type=1400 audit(1725093760.871:551): avc: denied { write } for pid=4309 comm="syz.2.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.492270][ T3612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.530389][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.540974][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.550822][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.561483][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.571364][ T4044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.581904][ T4044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.593332][ T4044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.616194][ T29] audit: type=1400 audit(1725093761.071:552): avc: denied { name_bind } for pid=4337 comm="syz.2.224" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.645465][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 53.671909][ T4044] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.680852][ T4044] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.689786][ T4044] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.698543][ T4044] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.715135][ T28] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.748047][ T4287] chnl_net:caif_netlink_parms(): no params data found [ 53.790836][ T28] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.814245][ T4177] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 53.823557][ T4177] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 53.849746][ T4177] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 53.873422][ T28] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.884879][ T4287] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.892124][ T4287] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.901597][ T4287] bridge_slave_0: entered allmulticast mode [ 53.916924][ T4287] bridge_slave_0: entered promiscuous mode [ 53.924124][ T4287] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.928711][ T4358] loop3: detected capacity change from 0 to 764 [ 53.931346][ T4287] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.945300][ T4287] bridge_slave_1: entered allmulticast mode [ 53.952026][ T4287] bridge_slave_1: entered promiscuous mode [ 53.958740][ T4177] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 53.977638][ T28] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.009367][ T4287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.021332][ T4287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.088164][ T4287] team0: Port device team_slave_0 added [ 54.098900][ T4366] loop3: detected capacity change from 0 to 512 [ 54.113363][ T4287] team0: Port device team_slave_1 added [ 54.137994][ T4366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.151199][ T4366] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 54.176896][ T28] bridge_slave_1: left allmulticast mode [ 54.182601][ T28] bridge_slave_1: left promiscuous mode [ 54.188371][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.202949][ T28] bridge_slave_0: left allmulticast mode [ 54.208939][ T28] bridge_slave_0: left promiscuous mode [ 54.214686][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.222774][ T4044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.233154][ T28] bridge_slave_1: left allmulticast mode [ 54.238894][ T28] bridge_slave_1: left promiscuous mode [ 54.244532][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.255219][ T28] bridge_slave_0: left allmulticast mode [ 54.260989][ T28] bridge_slave_0: left promiscuous mode [ 54.266765][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.502710][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.513945][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.524696][ T28] bond0 (unregistering): Released all slaves [ 54.534569][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 54.545535][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 54.557648][ T28] bond0 (unregistering): Released all slaves [ 54.566076][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.573031][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.599110][ T4287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.610335][ T4298] chnl_net:caif_netlink_parms(): no params data found [ 54.625826][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.641161][ T4287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.648160][ T4287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.674186][ T4287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.746991][ T4287] hsr_slave_0: entered promiscuous mode [ 54.753908][ T4287] hsr_slave_1: entered promiscuous mode [ 54.762547][ T4287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.770211][ T4287] Cannot create hsr debugfs directory [ 54.777887][ T28] hsr_slave_0: left promiscuous mode [ 54.784758][ T28] hsr_slave_1: left promiscuous mode [ 54.791897][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.799534][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.824342][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.831960][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.853724][ T28] hsr_slave_0: left promiscuous mode [ 54.863082][ T28] hsr_slave_1: left promiscuous mode [ 54.870652][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.873846][ T4407] loop2: detected capacity change from 0 to 8192 [ 54.878127][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.894569][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.902136][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.918423][ T28] veth1_macvtap: left promiscuous mode [ 54.924071][ T28] veth0_macvtap: left promiscuous mode [ 54.929818][ T28] veth1_vlan: left promiscuous mode [ 54.935220][ T28] veth0_vlan: left promiscuous mode [ 54.941849][ T4407] loop2: p1 < > p4 < > [ 54.968110][ T28] veth1_macvtap: left promiscuous mode [ 54.973614][ T28] veth0_macvtap: left promiscuous mode [ 54.979203][ T28] veth1_vlan: left promiscuous mode [ 54.984515][ T28] veth0_vlan: left promiscuous mode [ 55.005284][ T4417] loop3: detected capacity change from 0 to 1024 [ 55.013141][ T4417] EXT4-fs: Ignoring removed orlov option [ 55.019018][ T4417] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.038718][ T4417] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.068845][ T4044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.169968][ T28] team0 (unregistering): Port device team_slave_1 removed [ 55.188638][ T28] team0 (unregistering): Port device team_slave_0 removed [ 55.279583][ T28] team0 (unregistering): Port device team_slave_1 removed [ 55.290750][ T28] team0 (unregistering): Port device team_slave_0 removed [ 55.362315][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.434962][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.442141][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.485151][ T4298] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.492386][ T4298] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.504492][ T4298] bridge_slave_0: entered allmulticast mode [ 55.511986][ T4298] bridge_slave_0: entered promiscuous mode [ 55.519543][ T4298] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.526844][ T4298] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.534072][ T4298] bridge_slave_1: entered allmulticast mode [ 55.540686][ T4298] bridge_slave_1: entered promiscuous mode [ 55.559249][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.566366][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.595523][ T4177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.606137][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.727554][ T4298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.766215][ T4298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.821329][ T4298] team0: Port device team_slave_0 added [ 55.835176][ T4298] team0: Port device team_slave_1 added [ 55.885922][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.893030][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.919191][ T4298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.942556][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.952632][ C0] hrtimer: interrupt took 37141 ns [ 55.972890][ T4298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.979906][ T4298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.006012][ T4298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.163364][ T4298] hsr_slave_0: entered promiscuous mode [ 56.175565][ T4298] hsr_slave_1: entered promiscuous mode [ 56.181729][ T4298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.192675][ T4298] Cannot create hsr debugfs directory [ 56.241566][ T4524] loop2: detected capacity change from 0 to 1024 [ 56.307905][ T4524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.363738][ T4177] veth0_vlan: entered promiscuous mode [ 56.376683][ T4524] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.403757][ T4287] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.431268][ T4287] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.451961][ T3612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.461891][ T4287] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.474932][ T4177] veth1_vlan: entered promiscuous mode [ 56.491653][ T4287] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.551860][ T4177] veth0_macvtap: entered promiscuous mode [ 56.565076][ T4177] veth1_macvtap: entered promiscuous mode [ 56.601392][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.611948][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.621799][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.632262][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.648584][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.679903][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.690435][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.700381][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.710845][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.723201][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.740612][ T4177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.749512][ T4177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.758265][ T4177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.766980][ T4177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.856356][ T4287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.915549][ T4287] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.948734][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.955896][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.973143][ T4298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.991727][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.998836][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.034975][ T4298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.050756][ T4298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.082964][ T4298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.112564][ T4287] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.211618][ T4298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.252451][ T4298] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.274437][ T3289] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.281587][ T3289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.301699][ T4287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.311462][ T3289] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.318661][ T3289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.364495][ T4298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.390785][ T4636] loop3: detected capacity change from 0 to 512 [ 57.427468][ T4636] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.477597][ T4636] EXT4-fs (loop3): 1 truncate cleaned up [ 57.486714][ T4298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.495236][ T4636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.524719][ T4287] veth0_vlan: entered promiscuous mode [ 57.545027][ T4287] veth1_vlan: entered promiscuous mode [ 57.594886][ T4287] veth0_macvtap: entered promiscuous mode [ 57.633349][ T4287] veth1_macvtap: entered promiscuous mode [ 57.640297][ T4674] loop4: detected capacity change from 0 to 2048 [ 57.661067][ T4674] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.682765][ T4298] veth0_vlan: entered promiscuous mode [ 57.688681][ T4044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.691799][ T4298] veth1_vlan: entered promiscuous mode [ 57.719906][ T4177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.725894][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.739422][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.749262][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.759793][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.769807][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.780241][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.791136][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.812352][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.822972][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.833083][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.843743][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.853711][ T4287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.864144][ T4287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.875211][ T4287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.889918][ T4287] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.899018][ T4287] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.907878][ T4287] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.916777][ T4287] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.943811][ T4298] veth0_macvtap: entered promiscuous mode [ 57.960299][ T4298] veth1_macvtap: entered promiscuous mode [ 57.994962][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.005642][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.015714][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.026412][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.036246][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.046710][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.056732][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.067182][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.080136][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.088563][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.099116][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.109024][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.119492][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.129333][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.139779][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.149641][ T4298] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.160210][ T4298] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.191844][ T4700] loop1: detected capacity change from 0 to 128 [ 58.199084][ T4298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.204472][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 58.204487][ T29] audit: type=1326 audit(1725093765.651:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb10369eb9 code=0x7ffc0000 [ 58.206903][ T4700] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 58.253164][ T4298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.262108][ T4298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.270973][ T4298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.279770][ T4298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.297317][ T29] audit: type=1326 audit(1725093765.741:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb10369eb9 code=0x7ffc0000 [ 58.317978][ T4700] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.320686][ T29] audit: type=1326 audit(1725093765.741:662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb10369eb9 code=0x7ffc0000 [ 58.353223][ T29] audit: type=1326 audit(1725093765.741:663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb10369eb9 code=0x7ffc0000 [ 58.366633][ T4706] loop4: detected capacity change from 0 to 512 [ 58.376552][ T29] audit: type=1326 audit(1725093765.741:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb10369eb9 code=0x7ffc0000 [ 58.406336][ T29] audit: type=1326 audit(1725093765.741:665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7feb10369eb9 code=0x7ffc0000 [ 58.429679][ T29] audit: type=1326 audit(1725093765.741:666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb10369eb9 code=0x7ffc0000 [ 58.452984][ T29] audit: type=1326 audit(1725093765.741:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4701 comm="syz.4.280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb10369eb9 code=0x7ffc0000 [ 58.478963][ T29] audit: type=1400 audit(1725093765.751:668): avc: denied { create } for pid=4703 comm="syz.2.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 58.488985][ T4706] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.498696][ T29] audit: type=1400 audit(1725093765.751:669): avc: denied { cmd } for pid=4703 comm="syz.2.282" path="socket:[9073]" dev="sockfs" ino=9073 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 58.531410][ T4706] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.544485][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 58.780254][ T4177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.804557][ T4733] loop0: detected capacity change from 0 to 512 [ 58.811498][ T4733] ext4: Unknown parameter 'obj_type' [ 58.870445][ T4740] loop4: detected capacity change from 0 to 512 [ 58.898829][ T4740] EXT4-fs (loop4): orphan cleanup on readonly fs [ 58.922271][ T4740] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 58.936914][ T4740] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 58.948627][ T4740] EXT4-fs (loop4): 1 truncate cleaned up [ 58.954800][ T4740] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 59.045454][ T4759] pim6reg1: entered promiscuous mode [ 59.053369][ T4759] pim6reg1: entered allmulticast mode [ 59.670445][ T4849] loop1: detected capacity change from 0 to 1024 [ 59.685159][ T4849] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 59.710663][ T4177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.723343][ T4849] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.781368][ T4863] loop4: detected capacity change from 0 to 2048 [ 59.808390][ T4863] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.836727][ T4878] netlink: 248 bytes leftover after parsing attributes in process `syz.3.308'. [ 59.845752][ T4878] netlink: 12 bytes leftover after parsing attributes in process `syz.3.308'. [ 59.909117][ T4878] netlink: 16 bytes leftover after parsing attributes in process `syz.3.308'. [ 59.945288][ T4878] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 59.979854][ T4177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.993981][ T4911] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.001091][ T4911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.147290][ T4925] loop3: detected capacity change from 0 to 512 [ 60.187811][ T4925] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 60.195928][ T4925] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 60.235058][ T4925] System zones: 0-1, 15-15, 18-18, 34-34 [ 60.254641][ T4925] EXT4-fs (loop3): orphan cleanup on readonly fs [ 60.286969][ T4925] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 60.301660][ T4925] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 60.325589][ T4925] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.317: bad orphan inode 16 [ 60.346426][ T4925] ext4_test_bit(bit=15, block=18) = 1 [ 60.351850][ T4925] is_bad_inode(inode)=0 [ 60.356051][ T4925] NEXT_ORPHAN(inode)=0 [ 60.360428][ T4925] max_ino=32 [ 60.363651][ T4925] i_nlink=2 [ 60.382513][ T4925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 60.463408][ T4925] syzkaller0: entered promiscuous mode [ 60.468919][ T4925] syzkaller0: entered allmulticast mode [ 60.613384][ T4044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.625336][ T4287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.766881][ T4947] loop1: detected capacity change from 0 to 2048 [ 60.788454][ T4947] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.801017][ T4947] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.829029][ T4287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.941673][ T4958] syz.1.328[4958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 60.941740][ T4958] syz.1.328[4958] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.000089][ T4962] netlink: 4 bytes leftover after parsing attributes in process `syz.1.330'. [ 61.108503][ T4934] syz.2.318 (4934) used greatest stack depth: 10040 bytes left [ 61.207082][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.336'. [ 61.374706][ T4985] sd 0:0:1:0: device reset [ 61.402092][ T4987] loop2: detected capacity change from 0 to 512 [ 61.408708][ T4987] journal_path: Lookup failure for './file0' [ 61.414729][ T4987] EXT4-fs: error: could not find journal device path [ 61.497517][ T4995] loop2: detected capacity change from 0 to 2048 [ 61.538897][ T5002] syz.3.348[5002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.538962][ T5002] syz.3.348[5002] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.569489][ T5006] loop3: detected capacity change from 0 to 512 [ 61.597309][ T5006] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #12: comm syz.3.350: corrupted in-inode xattr: invalid ea_ino [ 61.611953][ T5006] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.350: couldn't read orphan inode 12 (err -117) [ 61.624810][ T5006] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.658534][ T4044] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 61.838139][ T5011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.846856][ T5011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.862712][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 61.878916][ T5011] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.935056][ T5024] loop3: detected capacity change from 0 to 2048 [ 61.947429][ T5024] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.965345][ T5024] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.358: bg 0: block 234: padding at end of block bitmap is not set [ 61.979856][ T5024] EXT4-fs (loop3): Remounting filesystem read-only [ 61.986602][ T5024] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 18, error -5) [ 62.004186][ T4044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.075164][ T5029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 62.084676][ T5029] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (128) [ 62.450618][ T3338] hid (null): unknown global tag 0xd [ 62.456114][ T3338] hid (null): invalid report_count 18347 [ 62.461786][ T3338] hid (null): invalid report_size 9456 [ 62.467477][ T3338] hid (null): invalid report_size 15671 [ 62.473069][ T3338] hid (null): report_id 41852 is invalid [ 62.480470][ T3338] hid-generic 0007:0000:0005.0002: unknown global tag 0xd [ 62.487734][ T3338] hid-generic 0007:0000:0005.0002: item 0 0 1 13 parsing failed [ 62.495608][ T3338] hid-generic 0007:0000:0005.0002: probe with driver hid-generic failed with error -22 [ 62.553335][ T5049] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 62.900398][ T5057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.958220][ T5011] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.022814][ T5011] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.059515][ T5065] syzkaller0: entered promiscuous mode [ 63.065000][ T5065] syzkaller0: entered allmulticast mode [ 63.080678][ T5011] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.132923][ T5011] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.144559][ T5011] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.165328][ T5011] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.182241][ T5011] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.198755][ T5073] loop1: detected capacity change from 0 to 128 [ 63.207583][ T5073] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 63.220500][ T5073] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.234112][ T29] kauditd_printk_skb: 146 callbacks suppressed [ 63.234128][ T29] audit: type=1400 audit(1725093770.681:814): avc: denied { create } for pid=5072 comm="syz.1.376" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 63.245168][ T5076] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5076 comm=syz.3.375 [ 63.296334][ T5076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.375'. [ 63.300665][ T4287] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.305116][ T5076] netlink: 'syz.3.375': attribute type 15 has an invalid length. [ 63.334683][ T5076] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 63.343566][ T5076] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 63.352291][ T5076] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 63.360994][ T5076] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 63.369783][ T5076] vxlan0: entered promiscuous mode [ 63.529949][ T29] audit: type=1400 audit(1725093770.981:815): avc: denied { connect } for pid=5097 comm="syz.4.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.566983][ T5099] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 63.639036][ T5110] tipc: Started in network mode [ 63.643998][ T5110] tipc: Node identity 9e0797c7670f, cluster identity 4711 [ 63.651342][ T5110] tipc: Enabled bearer , priority 0 [ 63.654507][ T29] audit: type=1400 audit(1725093771.111:816): avc: denied { bind } for pid=5111 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 63.660223][ T5110] tipc: Resetting bearer [ 63.678671][ T29] audit: type=1400 audit(1725093771.111:817): avc: denied { name_bind } for pid=5111 comm="syz.2.393" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 63.678764][ T29] audit: type=1400 audit(1725093771.111:818): avc: denied { node_bind } for pid=5111 comm="syz.2.393" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 63.725837][ T29] audit: type=1400 audit(1725093771.111:819): avc: denied { listen } for pid=5111 comm="syz.2.393" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 63.746306][ T29] audit: type=1400 audit(1725093771.111:820): avc: denied { connect } for pid=5111 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 63.754145][ T5115] loop0: detected capacity change from 0 to 128 [ 63.765751][ T29] audit: type=1400 audit(1725093771.111:821): avc: denied { name_connect } for pid=5111 comm="syz.2.393" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 63.768426][ T29] audit: type=1400 audit(1725093771.151:822): avc: denied { accept } for pid=5111 comm="syz.2.393" lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 63.813649][ T29] audit: type=1400 audit(1725093771.161:823): avc: denied { read } for pid=5111 comm="syz.2.393" laddr=127.0.0.1 lport=44554 faddr=127.0.0.1 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 63.840152][ T5109] tipc: Disabling bearer [ 63.908658][ T5129] pim6reg1: entered promiscuous mode [ 63.914087][ T5129] pim6reg1: entered allmulticast mode [ 63.940784][ T5135] loop0: detected capacity change from 0 to 512 [ 63.958097][ T5135] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.972265][ T5135] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 63.995495][ T4298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.024106][ T5145] loop4: detected capacity change from 0 to 128 [ 64.036401][ T5145] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 64.053136][ T5145] ext4 filesystem being mounted at /42/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 64.129360][ T4177] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 64.163600][ T5161] pim6reg1: entered promiscuous mode [ 64.169142][ T5161] pim6reg1: entered allmulticast mode [ 64.197709][ T5167] netlink: 'syz.1.417': attribute type 10 has an invalid length. [ 64.211852][ T5167] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 64.224856][ T5165] netlink: 84 bytes leftover after parsing attributes in process `syz.3.416'. [ 64.235141][ T5165] veth0_vlan: left promiscuous mode [ 64.240417][ T5165] veth0_vlan: entered allmulticast mode [ 64.248664][ T5165] veth0_vlan: entered promiscuous mode [ 64.302076][ T5172] loop3: detected capacity change from 0 to 1024 [ 64.310797][ T5172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.372636][ T4044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.373275][ T5178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.421'. [ 64.418384][ T5182] vlan2: entered promiscuous mode [ 64.423546][ T5182] vlan2: entered allmulticast mode [ 64.428933][ T5182] macvtap0: entered allmulticast mode [ 64.434308][ T5182] veth0_macvtap: entered allmulticast mode [ 64.440242][ T5182] macvtap0: entered promiscuous mode [ 64.447317][ T5182] team0: Port device vlan2 added [ 64.470720][ T5184] loop3: detected capacity change from 0 to 2048 [ 64.494731][ T5188] -: renamed from syzkaller0 [ 64.503531][ T5192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.512373][ T5192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.676171][ T5212] loop4: detected capacity change from 0 to 2048 [ 64.688042][ T5212] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.709333][ T4177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.729982][ T5224] IPv4: Oversized IP packet from 172.20.20.24 [ 64.736209][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 64.742328][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 65.010269][ T5242] __nla_validate_parse: 1 callbacks suppressed [ 65.010286][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.447'. [ 65.066091][ T5246] pim6reg1: entered promiscuous mode [ 65.071432][ T5246] pim6reg1: entered allmulticast mode [ 65.189604][ T5258] loop4: detected capacity change from 0 to 2048 [ 65.209397][ T5258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.216837][ T5264] loop1: detected capacity change from 0 to 512 [ 65.227559][ T5258] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.243576][ T5258] EXT4-fs (loop4): Remounting filesystem read-only [ 65.252897][ T5264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 65.265965][ T5264] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.289058][ T5264] program syz.1.456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.312391][ T4287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 65.320249][ T5258] syz.4.454 (5258) used greatest stack depth: 8976 bytes left [ 65.340351][ T4177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.372966][ T5273] loop1: detected capacity change from 0 to 512 [ 65.384307][ T5275] loop4: detected capacity change from 0 to 512 [ 65.397795][ T5275] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.398442][ T5273] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 65.410670][ T5275] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.422787][ T5273] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.429465][ T5273] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.459: Failed to acquire dquot type 0 [ 65.464844][ T4177] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.475371][ T4287] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 65.546566][ T5219] delete_channel: no stack [ 65.600208][ T5298] loop0: detected capacity change from 0 to 2048 [ 65.636131][ T5298] loop0: p1 < > p4 [ 65.640516][ T5298] loop0: p4 size 8388608 extends beyond EOD, truncated [ 65.735161][ T5316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.474'. [ 65.744116][ T5316] netlink: 'syz.0.474': attribute type 20 has an invalid length. [ 65.986404][ T5323] loop2: detected capacity change from 0 to 1024 [ 65.993283][ T5323] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.005275][ T5323] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.144404][ T5336] loop3: detected capacity change from 0 to 512 [ 66.151426][ T5336] EXT4-fs: Ignoring removed orlov option [ 66.157896][ T5336] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 66.169834][ T5336] EXT4-fs (loop3): 1 truncate cleaned up [ 66.176237][ T5336] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.206067][ T4044] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.335945][ T5347] loop3: detected capacity change from 0 to 128 [ 66.455981][ T5328] ================================================================== [ 66.464123][ T5328] BUG: KCSAN: data-race in atime_needs_update / touch_atime [ 66.471463][ T5328] [ 66.473811][ T5328] write to 0xffff888106880620 of 4 bytes by task 5323 on cpu 1: [ 66.481455][ T5328] touch_atime+0x1f3/0x350 [ 66.485908][ T5328] filemap_splice_read+0x8b0/0x920 [ 66.491058][ T5328] ext4_file_splice_read+0x95/0xc0 [ 66.496181][ T5328] splice_direct_to_actor+0x26c/0x670 [ 66.501686][ T5328] do_splice_direct+0xd7/0x150 [ 66.506491][ T5328] do_sendfile+0x3ab/0x950 [ 66.510932][ T5328] __x64_sys_sendfile64+0x110/0x150 [ 66.516168][ T5328] x64_sys_call+0xed5/0x2d60 [ 66.520782][ T5328] do_syscall_64+0xc9/0x1c0 [ 66.525304][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.531405][ T5328] [ 66.533735][ T5328] read to 0xffff888106880620 of 4 bytes by task 5328 on cpu 0: [ 66.541296][ T5328] atime_needs_update+0x261/0x3e0 [ 66.546352][ T5328] touch_atime+0x4a/0x350 [ 66.550716][ T5328] filemap_splice_read+0x8b0/0x920 [ 66.555850][ T5328] ext4_file_splice_read+0x95/0xc0 [ 66.559854][ T5349] loop3: detected capacity change from 0 to 512 [ 66.560963][ T5328] splice_direct_to_actor+0x26c/0x670 [ 66.572586][ T5328] do_splice_direct+0xd7/0x150 [ 66.576026][ T5349] EXT4-fs: Ignoring removed bh option [ 66.577393][ T5328] do_sendfile+0x3ab/0x950 [ 66.577419][ T5328] __x64_sys_sendfile64+0x110/0x150 [ 66.590894][ T5349] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 66.592445][ T5328] x64_sys_call+0xed5/0x2d60 [ 66.605211][ T5328] do_syscall_64+0xc9/0x1c0 [ 66.609739][ T5328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.615677][ T5328] [ 66.618008][ T5328] value changed: 0x35bf880c -> 0x36581e8c [ 66.623735][ T5328] [ 66.626064][ T5328] Reported by Kernel Concurrency Sanitizer on: [ 66.632232][ T5328] CPU: 0 UID: 0 PID: 5328 Comm: syz.2.476 Not tainted 6.11.0-rc5-syzkaller-00219-g1934261d8974 #0 [ 66.642844][ T5328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 66.652914][ T5328] ================================================================== [ 66.672137][ T5351] all: renamed from bridge_slave_0 (while UP) [ 66.688367][ T5349] EXT4-fs (loop3): 1 truncate cleaned up [ 66.694513][ T5349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.717282][ T5349] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.859781][ T3612] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.