last executing test programs: 882.886224ms ago: executing program 0 (id=135): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000600459e850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) pwritev(r1, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 807.911293ms ago: executing program 0 (id=139): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x6000, @fd, 0xbff, &(0x7f0000000240)=[{&(0x7f0000000480)="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", 0xcf1}, {&(0x7f00000000c0)="72bef5603e2b5ef8d5d28a6cd1056e99ce9d2cb21d0280b07acab08aaff45c661497240e3dbc5553581c3c112deb", 0x2e}], 0x2, 0x1, 0x1, {0x2}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 708.043913ms ago: executing program 0 (id=144): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa0}}, 0x0) 701.281533ms ago: executing program 4 (id=147): creat(&(0x7f0000000300)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) 638.363163ms ago: executing program 4 (id=149): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffffffffffffffff, 0x1}, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) faccessat2(0xffffffffffffffff, 0x0, 0x1, 0x1100) clock_getres(0x2, 0x0) 633.427293ms ago: executing program 2 (id=150): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 631.626093ms ago: executing program 0 (id=151): r0 = epoll_create1(0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000400)={0xa}) 596.476932ms ago: executing program 4 (id=153): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7ff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xae) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 566.019712ms ago: executing program 0 (id=154): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) ioperm(0x0, 0xfffc, 0x8005) personality(0xc417fec07cb910d1) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f00000033c0)={0x0, 0x989680}, 0x0) 560.554752ms ago: executing program 2 (id=155): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r1, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017000000000008001d00040000000c00220006000000000000000800040081000000050024"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) 480.176693ms ago: executing program 0 (id=156): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 448.854712ms ago: executing program 2 (id=157): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000240)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x3, 0x11ee, 0x9, 0xfffffffa, 0xfffffffe, 0x7fff, "dc781d"}}, 0x11b) 377.019341ms ago: executing program 4 (id=159): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f00000021c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) clock_gettime(0x0, &(0x7f0000002080)) 361.698982ms ago: executing program 1 (id=160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001880)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x34, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 326.415722ms ago: executing program 2 (id=161): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000200)={0x5000000, 0x0, 0x6, 0x0, 0x0, r0, 0x0}]) 316.228222ms ago: executing program 3 (id=162): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000800000000000800090000000100180001801400020076657468305f746f5f626f6e640000000800070000000000080006"], 0x4c}}, 0x0) 293.614161ms ago: executing program 4 (id=163): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000055d000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000899000/0x2000)=nil) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) mbind(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2) 283.257182ms ago: executing program 1 (id=164): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000400)='mqueue\x00', 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) 276.321982ms ago: executing program 3 (id=165): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/cpuinfo\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/4092, 0xffc) pread64(r0, &(0x7f00000013c0)=""/208, 0x31, 0x401) read$hiddev(r0, &(0x7f0000001100)=""/234, 0xea) 233.042311ms ago: executing program 3 (id=166): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 231.678571ms ago: executing program 1 (id=167): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) 207.190681ms ago: executing program 2 (id=168): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) 177.059521ms ago: executing program 1 (id=169): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xd91b, 0x0, "8b0712550cf6df5ed68aec9f00"}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x55) 159.553941ms ago: executing program 3 (id=170): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000000000000f0070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c00128014000180090001006c617374000000000400028010000180090001006c61737400000000140001800c000100636f756e746572000400028008000340000001"], 0xc8}}, 0x20050800) 133.016951ms ago: executing program 3 (id=171): mkdir(&(0x7f0000000000)='./control\x00', 0x0) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000100)='./control\x00', 0x0) openat(r0, &(0x7f0000000280)='./control\x00', 0x470082, 0x0) 106.833671ms ago: executing program 1 (id=172): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_mempolicy(0x3, &(0x7f0000000000)=0x8201, 0xe5) 75.58775ms ago: executing program 2 (id=173): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) semget(0x1, 0x0, 0x100) 74.457331ms ago: executing program 3 (id=174): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0x2005e, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100987, 0x7ff, 0x7, 0x0, 0x81, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x4, 0x12011, r0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 73.69949ms ago: executing program 4 (id=175): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000900)='kfree\x00', r1, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newtaction={0x88c, 0x30, 0xffff, 0x3, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x0, 0x0, 0xfffffffe, {0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x4, 0x2, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x3}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x88c}}, 0x0) 0s ago: executing program 1 (id=176): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x54, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x0, 0xcd, 0x8, 0x0, 0x6, 0x5}}, {0x4}}]}]}, 0x54}}, 0x44080) kernel console output (not intermixed with test programs): [ 21.463068][ T29] audit: type=1400 audit(1738697588.102:81): avc: denied { read } for pid=2982 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.165' (ED25519) to the list of known hosts. [ 26.291562][ T29] audit: type=1400 audit(1738697592.932:82): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.292545][ T3287] cgroup: Unknown subsys name 'net' [ 26.314293][ T29] audit: type=1400 audit(1738697592.932:83): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.341814][ T29] audit: type=1400 audit(1738697592.962:84): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.497360][ T3287] cgroup: Unknown subsys name 'cpuset' [ 26.503588][ T3287] cgroup: Unknown subsys name 'rlimit' [ 26.694275][ T29] audit: type=1400 audit(1738697593.332:85): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.717820][ T29] audit: type=1400 audit(1738697593.332:86): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.734510][ T3292] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.738400][ T29] audit: type=1400 audit(1738697593.332:87): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.767305][ T29] audit: type=1400 audit(1738697593.332:88): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.783309][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.787547][ T29] audit: type=1400 audit(1738697593.352:89): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.821163][ T29] audit: type=1400 audit(1738697593.352:90): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.844466][ T29] audit: type=1400 audit(1738697593.392:91): avc: denied { relabelto } for pid=3292 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.908743][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 27.939928][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 27.960061][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 28.030763][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.037921][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.045105][ T3299] bridge_slave_0: entered allmulticast mode [ 28.051534][ T3299] bridge_slave_0: entered promiscuous mode [ 28.058073][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.065168][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.072385][ T3299] bridge_slave_1: entered allmulticast mode [ 28.078843][ T3299] bridge_slave_1: entered promiscuous mode [ 28.103713][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.110857][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.118231][ T3298] bridge_slave_0: entered allmulticast mode [ 28.124678][ T3298] bridge_slave_0: entered promiscuous mode [ 28.153418][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.160531][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.167707][ T3298] bridge_slave_1: entered allmulticast mode [ 28.174277][ T3298] bridge_slave_1: entered promiscuous mode [ 28.190902][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 28.200645][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.210885][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.244380][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.251487][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.258692][ T3312] bridge_slave_0: entered allmulticast mode [ 28.265062][ T3312] bridge_slave_0: entered promiscuous mode [ 28.272687][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.281847][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.289388][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.296560][ T3312] bridge_slave_1: entered allmulticast mode [ 28.303010][ T3312] bridge_slave_1: entered promiscuous mode [ 28.322167][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.344432][ T3299] team0: Port device team_slave_0 added [ 28.351034][ T3299] team0: Port device team_slave_1 added [ 28.357205][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 28.371667][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.410325][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.420035][ T3298] team0: Port device team_slave_0 added [ 28.428506][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.435465][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.461565][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.475122][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.482129][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.508172][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.519644][ T3298] team0: Port device team_slave_1 added [ 28.551968][ T3312] team0: Port device team_slave_0 added [ 28.570454][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.577464][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.603474][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.615083][ T3312] team0: Port device team_slave_1 added [ 28.625379][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.632562][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.639735][ T3307] bridge_slave_0: entered allmulticast mode [ 28.646063][ T3307] bridge_slave_0: entered promiscuous mode [ 28.659403][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.666371][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.692385][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.707826][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.714926][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.722238][ T3307] bridge_slave_1: entered allmulticast mode [ 28.728782][ T3307] bridge_slave_1: entered promiscuous mode [ 28.746627][ T3299] hsr_slave_0: entered promiscuous mode [ 28.752633][ T3299] hsr_slave_1: entered promiscuous mode [ 28.758956][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.765972][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.792588][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.804151][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.811567][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.837967][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.870860][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.878022][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.885218][ T3300] bridge_slave_0: entered allmulticast mode [ 28.891698][ T3300] bridge_slave_0: entered promiscuous mode [ 28.910589][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.919791][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.926925][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.934150][ T3300] bridge_slave_1: entered allmulticast mode [ 28.940571][ T3300] bridge_slave_1: entered promiscuous mode [ 28.968078][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.983811][ T3298] hsr_slave_0: entered promiscuous mode [ 28.990087][ T3298] hsr_slave_1: entered promiscuous mode [ 28.995921][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.003513][ T3298] Cannot create hsr debugfs directory [ 29.026210][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.037492][ T3312] hsr_slave_0: entered promiscuous mode [ 29.043373][ T3312] hsr_slave_1: entered promiscuous mode [ 29.049288][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.056997][ T3312] Cannot create hsr debugfs directory [ 29.069610][ T3307] team0: Port device team_slave_0 added [ 29.080894][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.093673][ T3307] team0: Port device team_slave_1 added [ 29.132224][ T3300] team0: Port device team_slave_0 added [ 29.145017][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.152036][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.178098][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.191752][ T3300] team0: Port device team_slave_1 added [ 29.211524][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.218658][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.244628][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.257773][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.264796][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.291080][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.309228][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.316195][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.342209][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.418556][ T3307] hsr_slave_0: entered promiscuous mode [ 29.424575][ T3307] hsr_slave_1: entered promiscuous mode [ 29.430513][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.438147][ T3307] Cannot create hsr debugfs directory [ 29.445592][ T3300] hsr_slave_0: entered promiscuous mode [ 29.451671][ T3300] hsr_slave_1: entered promiscuous mode [ 29.457587][ T3300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.465154][ T3300] Cannot create hsr debugfs directory [ 29.538423][ T3299] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.547076][ T3299] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.555776][ T3299] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.566669][ T3299] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.607093][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.617645][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.636959][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.658598][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.670606][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.679770][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.689157][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.697686][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.731622][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.741440][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.751822][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.777187][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.805206][ T3307] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.814136][ T3307] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.823743][ T3307] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.837122][ T3307] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.870719][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.892533][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.902620][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.916497][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.927363][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.934475][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.963542][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.970667][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.980017][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.987157][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.995759][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.002835][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.033947][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.064858][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.082730][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.098395][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.107679][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.130114][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.137242][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.146241][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.153430][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.162365][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.169457][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.181550][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.190395][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.197502][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.214744][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.222107][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.242391][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.249549][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.288585][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.299151][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.312009][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.326340][ T3300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.358102][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.394601][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.415593][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.434531][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.535960][ T3298] veth0_vlan: entered promiscuous mode [ 30.563344][ T3298] veth1_vlan: entered promiscuous mode [ 30.570774][ T3299] veth0_vlan: entered promiscuous mode [ 30.599845][ T3299] veth1_vlan: entered promiscuous mode [ 30.610677][ T3298] veth0_macvtap: entered promiscuous mode [ 30.625982][ T3312] veth0_vlan: entered promiscuous mode [ 30.641674][ T3300] veth0_vlan: entered promiscuous mode [ 30.652321][ T3298] veth1_macvtap: entered promiscuous mode [ 30.661260][ T3300] veth1_vlan: entered promiscuous mode [ 30.669267][ T3312] veth1_vlan: entered promiscuous mode [ 30.685899][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.706117][ T3300] veth0_macvtap: entered promiscuous mode [ 30.714753][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.729917][ T3307] veth0_vlan: entered promiscuous mode [ 30.738139][ T3307] veth1_vlan: entered promiscuous mode [ 30.744962][ T3299] veth0_macvtap: entered promiscuous mode [ 30.752716][ T3299] veth1_macvtap: entered promiscuous mode [ 30.760548][ T3300] veth1_macvtap: entered promiscuous mode [ 30.768002][ T3298] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.776765][ T3298] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.785592][ T3298] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.794389][ T3298] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.810979][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.821486][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.832045][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.847019][ T3312] veth0_macvtap: entered promiscuous mode [ 30.854393][ T3312] veth1_macvtap: entered promiscuous mode [ 30.863829][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.874386][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.885058][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.895973][ T3307] veth0_macvtap: entered promiscuous mode [ 30.910337][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.920876][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.930817][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.941430][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.952198][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.960554][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.971042][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.980918][ T3300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.991617][ T3300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.002248][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.011057][ T3299] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.019896][ T3299] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.028674][ T3299] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.037391][ T3299] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.048388][ T3307] veth1_macvtap: entered promiscuous mode [ 31.061985][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.072508][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.082451][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.092887][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.102761][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.113202][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.124236][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.138127][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.148683][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.158526][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.169040][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.178880][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.189411][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.201087][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.208684][ T3300] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.217476][ T3300] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.226175][ T3300] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.235143][ T3300] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.236325][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.258591][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.269144][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.279065][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.289570][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.299560][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.310064][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.319897][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.330434][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.341277][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.349584][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.358375][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.367184][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.375956][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.392245][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 31.392260][ T29] audit: type=1400 audit(1738697598.032:119): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.422685][ T29] audit: type=1400 audit(1738697598.032:120): avc: denied { open } for pid=3298 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.453163][ T29] audit: type=1400 audit(1738697598.032:121): avc: denied { ioctl } for pid=3298 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.456108][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.478752][ T29] audit: type=1400 audit(1738697598.092:122): avc: denied { prog_load } for pid=3438 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.478783][ T29] audit: type=1400 audit(1738697598.092:123): avc: denied { bpf } for pid=3438 comm="syz.1.2" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.489337][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.489434][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.508222][ T29] audit: type=1400 audit(1738697598.092:124): avc: denied { perfmon } for pid=3438 comm="syz.1.2" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 31.528385][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.528400][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.538204][ T29] audit: type=1400 audit(1738697598.092:125): avc: denied { prog_run } for pid=3438 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 31.548815][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.618068][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.628554][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.642378][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.652738][ T3307] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.661584][ T3307] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.670324][ T3307] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.679055][ T3307] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.742872][ T3443] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 31.746904][ T29] audit: type=1400 audit(1738697598.382:126): avc: denied { write } for pid=3440 comm="syz.1.6" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 31.763118][ T3443] vhci_hcd: invalid port number 23 [ 31.787089][ T29] audit: type=1326 audit(1738697598.422:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37080acda9 code=0x7ffc0000 [ 31.810245][ T29] audit: type=1326 audit(1738697598.422:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3444 comm="syz.2.3" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37080acda9 code=0x7ffc0000 [ 31.894371][ T3452] loop3: detected capacity change from 0 to 1024 [ 31.997322][ T3452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.034865][ T3463] geneve2: entered promiscuous mode [ 32.040201][ T3463] geneve2: entered allmulticast mode [ 32.090509][ T3452] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 32.176461][ T3493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 32.180907][ T3489] loop1: detected capacity change from 0 to 1024 [ 32.196616][ T3493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 32.219785][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.236702][ T3489] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 32.252587][ T3497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26'. [ 32.261508][ T3497] netlink: 28 bytes leftover after parsing attributes in process `syz.2.26'. [ 32.263325][ T3489] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 32.287925][ T3497] gretap0: entered promiscuous mode [ 32.294965][ T3489] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 32.303657][ T3489] EXT4-fs (loop1): orphan cleanup on readonly fs [ 32.321020][ T3504] hugetlbfs: syz.3.25 (3504): Using mlock ulimits for SHM_HUGETLB is obsolete [ 32.330548][ T3497] gretap0: left promiscuous mode [ 32.338848][ T3489] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 32.352489][ T3489] EXT4-fs (loop1): Remounting filesystem read-only [ 32.380074][ T3489] EXT4-fs (loop1): 1 orphan inode deleted [ 32.384146][ T3502] xt_CT: You must specify a L4 protocol and not use inversions on it [ 32.405692][ T3489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 32.424724][ T3489] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 32.453724][ T3489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.489163][ T3516] Zero length message leads to an empty skb [ 32.499165][ T3489] netlink: 92 bytes leftover after parsing attributes in process `syz.1.22'. [ 32.545384][ T3489] syz.1.22 (3489) used greatest stack depth: 9624 bytes left [ 32.597268][ T3527] netlink: 'syz.0.39': attribute type 21 has an invalid length. [ 32.692179][ T3539] loop3: detected capacity change from 0 to 512 [ 32.701683][ T3539] EXT4-fs: Ignoring removed i_version option [ 32.723128][ T3544] loop2: detected capacity change from 0 to 2048 [ 32.739407][ T3539] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.772068][ T3544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.773027][ T3539] ext4 filesystem being mounted at /5/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.807501][ T3551] netlink: 'syz.4.50': attribute type 13 has an invalid length. [ 32.828725][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.842472][ T3551] gretap0: refused to change device tx_queue_len [ 32.858926][ T3551] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 32.879212][ T3558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.54'. [ 32.895735][ T3560] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.47: bg 0: block 234: padding at end of block bitmap is not set [ 32.924361][ T3560] EXT4-fs (loop2): Remounting filesystem read-only [ 33.056105][ T3574] loop1: detected capacity change from 0 to 512 [ 33.076298][ T3574] ======================================================= [ 33.076298][ T3574] WARNING: The mand mount option has been deprecated and [ 33.076298][ T3574] and is ignored by this kernel. Remove the mand [ 33.076298][ T3574] option from the mount to silence this warning. [ 33.076298][ T3574] ======================================================= [ 33.153283][ T3581] capability: warning: `syz.3.62' uses deprecated v2 capabilities in a way that may be insecure [ 33.153319][ T3583] Driver unsupported XDP return value 0 on prog (id 35) dev N/A, expect packet loss! [ 33.177198][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.186979][ T3574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.199752][ T3574] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.243971][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.612532][ T3573] Set syz1 is full, maxelem 65536 reached [ 33.953507][ T3637] vlan2: entered allmulticast mode [ 33.958721][ T3637] macvlan0: entered allmulticast mode [ 33.964113][ T3637] veth1_vlan: entered allmulticast mode [ 33.982634][ T3637] macvlan0: left allmulticast mode [ 33.987954][ T3637] veth1_vlan: left allmulticast mode [ 34.059292][ T3652] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.066891][ T3652] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.087344][ T3652] netlink: 'syz.0.93': attribute type 3 has an invalid length. [ 34.094958][ T3652] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 34.189706][ T3663] loop3: detected capacity change from 0 to 1024 [ 34.217951][ T3663] EXT4-fs: Ignoring removed nobh option [ 34.223779][ T3663] EXT4-fs: Ignoring removed bh option [ 34.270319][ T3663] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.336170][ T3683] netpci0: tun_chr_ioctl cmd 1074812118 [ 34.340253][ T3685] loop4: detected capacity change from 0 to 128 [ 34.356036][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.372078][ T3685] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 34.459821][ T3672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.468926][ T3695] loop4: detected capacity change from 0 to 4096 [ 34.471362][ T3672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.528450][ T3704] loop1: detected capacity change from 0 to 1024 [ 34.549322][ T3695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.576097][ T3704] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.593690][ T3704] EXT4-fs error (device loop1): ext4_readdir:261: inode #2: block 16: comm syz.1.119: path /24/file1: bad entry in directory: inode out of bounds - offset=0, inode=1538, rec_len=12, size=1024 fake=1 [ 34.625118][ T3704] EXT4-fs (loop1): Remounting filesystem read-only [ 34.632665][ T3307] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.697021][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.717182][ T3724] veth1_to_hsr: default FDB implementation only supports local addresses [ 34.801246][ T3734] loop1: detected capacity change from 0 to 2048 [ 34.839731][ T3734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.857779][ T3734] EXT4-fs error (device loop1): ext4_ext_precache:631: inode #2: comm syz.1.130: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 34.893585][ T3734] EXT4-fs (loop1): Remounting filesystem read-only [ 34.923094][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.958225][ T3750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.136'. [ 35.244670][ T3784] random: crng reseeded on system resumption [ 35.272178][ T3788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.155'. [ 35.299133][ T3788] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.306533][ T3788] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.389918][ T3375] hid-generic 11EE:0009:FFFFFFFA.0001: item fetching failed at offset 2/3 [ 35.421772][ T3375] hid-generic 11EE:0009:FFFFFFFA.0001: probe with driver hid-generic failed with error -22 [ 35.535495][ T3790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.546843][ T3790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.763442][ T3298] ================================================================== [ 35.771576][ T3298] BUG: KCSAN: data-race in fsnotify_detach_mark / fsnotify_handle_inode_event [ 35.780470][ T3298] [ 35.782809][ T3298] write to 0xffff8881033cfae4 of 4 bytes by task 3289 on cpu 1: [ 35.790543][ T3298] fsnotify_detach_mark+0xba/0x160 [ 35.795685][ T3298] fsnotify_clear_marks_by_group+0x30c/0x4d0 [ 35.801703][ T3298] fsnotify_destroy_group+0x55/0x190 [ 35.807040][ T3298] inotify_release+0x1f/0x30 [ 35.811655][ T3298] __fput+0x2ac/0x640 [ 35.815664][ T3298] ____fput+0x1c/0x30 [ 35.819670][ T3298] task_work_run+0x13a/0x1a0 [ 35.824277][ T3298] do_exit+0x5d8/0x17f0 [ 35.828449][ T3298] do_group_exit+0x102/0x150 [ 35.833063][ T3298] get_signal+0xeb9/0x1000 [ 35.837492][ T3298] arch_do_signal_or_restart+0x95/0x4b0 [ 35.843077][ T3298] syscall_exit_to_user_mode+0x62/0x120 [ 35.848637][ T3298] do_syscall_64+0xd6/0x1c0 [ 35.853148][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.859055][ T3298] [ 35.861380][ T3298] read to 0xffff8881033cfae4 of 4 bytes by task 3298 on cpu 0: [ 35.868925][ T3298] fsnotify_handle_inode_event+0x126/0x220 [ 35.874753][ T3298] fsnotify+0x1187/0x1260 [ 35.879130][ T3298] __fsnotify_parent+0x2f5/0x340 [ 35.884087][ T3298] __fput+0x1e7/0x640 [ 35.888088][ T3298] __fput_sync+0x96/0xc0 [ 35.892345][ T3298] __x64_sys_close+0x55/0xe0 [ 35.896957][ T3298] x64_sys_call+0x266c/0x2dc0 [ 35.901649][ T3298] do_syscall_64+0xc9/0x1c0 [ 35.906159][ T3298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.912066][ T3298] [ 35.914399][ T3298] value changed: 0x00000003 -> 0x00000000 [ 35.920134][ T3298] [ 35.922457][ T3298] Reported by Kernel Concurrency Sanitizer on: [ 35.928623][ T3298] CPU: 0 UID: 0 PID: 3298 Comm: syz-executor Not tainted 6.14.0-rc1-syzkaller-00026-gd009de7d5428 #0 [ 35.939476][ T3298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 35.949538][ T3298] ==================================================================