last executing test programs: 2.258908592s ago: executing program 1 (id=245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) recvmmsg(r3, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 1.256688975s ago: executing program 1 (id=269): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 1.197982675s ago: executing program 1 (id=271): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r0, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) io_uring_enter(0xffffffffffffffff, 0x3517, 0x173d, 0x42, 0x0, 0x0) 1.101952586s ago: executing program 1 (id=273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x40}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffffe}]}}}]}]}], {0x14}}, 0xc0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) recvfrom(r3, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) 803.03041ms ago: executing program 2 (id=281): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 706.004561ms ago: executing program 2 (id=282): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x4c) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r1}}, 0x30) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000900)={0x16, 0x98, 0xfa00, {0x0, 0x4, r1, 0x10, 0x0, @in={0x2, 0x4e23, @loopback}}}, 0xa0) 565.714323ms ago: executing program 0 (id=283): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r1, 0x209, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x0) 526.058353ms ago: executing program 0 (id=285): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) r1 = openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfe}]}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) bpf$PROG_LOAD(0x5, 0x0, 0x0) 483.136424ms ago: executing program 2 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 482.075614ms ago: executing program 2 (id=288): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 472.512884ms ago: executing program 0 (id=289): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @multicast2}], 0x10) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000200)=0xf8, 0x4) 438.429274ms ago: executing program 2 (id=290): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$qrtrtun(r0, &(0x7f0000000300)='\x00\x00\x00\x00\x00\x00\x00', 0x7) r2 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r2}}, 0x3c) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) 437.955064ms ago: executing program 3 (id=291): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x4a, 0x0, 0x0) 437.537554ms ago: executing program 4 (id=292): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb00000800030003"], 0x68}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2, @ANYBLOB="7240146c00000000340012800c0001006d6163766c61"], 0x54}}, 0x0) 391.738605ms ago: executing program 0 (id=293): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000540), 0x84) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0xa3, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x8880}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) 391.415875ms ago: executing program 3 (id=294): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff0200"], 0xfce) 390.861375ms ago: executing program 4 (id=295): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000005140)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) 376.199415ms ago: executing program 2 (id=296): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000000314230c2abd7000ff05df250900020073797a310000000008004100727865001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x48845}, 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x200000000003, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0x9}}, 0x4c) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r2}}, 0x30) 369.273015ms ago: executing program 0 (id=297): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000540)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) 251.535337ms ago: executing program 0 (id=298): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x1222, &(0x7f0000001580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r2, &(0x7f0000000180)=[{&(0x7f0000000200)="05", 0x5b2000000000000}], 0x1, 0x7, 0x0, 0x15) 251.093707ms ago: executing program 3 (id=299): r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x9013, 0x100, 0x4, 0x165}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000140)={&(0x7f0000001000)={[{0x0, 0x5, 0x3, 0x700}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x60, 0x1, {0x1}}) io_uring_enter(r0, 0x3517, 0x173d, 0x42, 0x0, 0x0) 250.780997ms ago: executing program 4 (id=300): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x48) socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000000)=0x1) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfe}]}) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="0281", 0x2}], 0x1}}], 0x1, 0x24005805) bpf$PROG_LOAD(0x5, 0x0, 0x0) 226.458737ms ago: executing program 1 (id=301): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x18, 0x55, 0x2e5, 0x70bd2c, 0x0, {0x7, r2}}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) 176.316168ms ago: executing program 4 (id=302): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000008900000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 170.471348ms ago: executing program 1 (id=303): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc010203010902"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 169.774268ms ago: executing program 3 (id=304): socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x80a, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0xc, 0x7}}}}}}, 0x0) 121.741688ms ago: executing program 4 (id=305): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, @in={0x2, 0x0, @multicast2}], 0x2c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) 65.972099ms ago: executing program 3 (id=306): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb00000800030003"], 0x68}}, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r2, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e00"], 0x54}}, 0x0) 59.171819ms ago: executing program 4 (id=307): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8, &(0x7f0000000240)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@user_xattr}]}, 0x1, 0x429, &(0x7f0000000740)="$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") r0 = open(&(0x7f0000000040)='./file2\x00', 0x141042, 0x70) r1 = openat(0xffffffffffffff9c, 0x0, 0x8000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) fallocate(r0, 0x3, 0x4, 0x2328) 0s ago: executing program 3 (id=308): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000540)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0x36) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.8' (ED25519) to the list of known hosts. [ 22.525314][ T29] audit: type=1400 audit(1748553637.633:62): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.526054][ T3300] cgroup: Unknown subsys name 'net' [ 22.548232][ T29] audit: type=1400 audit(1748553637.633:63): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.576477][ T29] audit: type=1400 audit(1748553637.663:64): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.732467][ T3300] cgroup: Unknown subsys name 'cpuset' [ 22.738470][ T3300] cgroup: Unknown subsys name 'rlimit' [ 22.827815][ T29] audit: type=1400 audit(1748553637.933:65): avc: denied { setattr } for pid=3300 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.851389][ T29] audit: type=1400 audit(1748553637.933:66): avc: denied { create } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.871892][ T29] audit: type=1400 audit(1748553637.933:67): avc: denied { write } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.877201][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.892329][ T29] audit: type=1400 audit(1748553637.933:68): avc: denied { read } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.921305][ T29] audit: type=1400 audit(1748553637.943:69): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.935944][ T3300] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.946338][ T29] audit: type=1400 audit(1748553637.953:70): avc: denied { mount } for pid=3300 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.946375][ T29] audit: type=1400 audit(1748553638.013:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.093326][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 24.118558][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 24.203602][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 24.234412][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.241739][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.248929][ T3313] bridge_slave_0: entered allmulticast mode [ 24.256055][ T3313] bridge_slave_0: entered promiscuous mode [ 24.264992][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 24.280061][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.287280][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.294556][ T3321] bridge_slave_0: entered allmulticast mode [ 24.301203][ T3321] bridge_slave_0: entered promiscuous mode [ 24.307718][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.314940][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.322545][ T3313] bridge_slave_1: entered allmulticast mode [ 24.329448][ T3313] bridge_slave_1: entered promiscuous mode [ 24.340340][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 24.349248][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.356449][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.363847][ T3321] bridge_slave_1: entered allmulticast mode [ 24.370082][ T3321] bridge_slave_1: entered promiscuous mode [ 24.423166][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.433550][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.444861][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.452217][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.459541][ T3319] bridge_slave_0: entered allmulticast mode [ 24.465940][ T3319] bridge_slave_0: entered promiscuous mode [ 24.472770][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.479972][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.487625][ T3319] bridge_slave_1: entered allmulticast mode [ 24.494080][ T3319] bridge_slave_1: entered promiscuous mode [ 24.503161][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.513402][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.558218][ T3321] team0: Port device team_slave_0 added [ 24.564774][ T3313] team0: Port device team_slave_0 added [ 24.571174][ T3321] team0: Port device team_slave_1 added [ 24.582052][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.600180][ T3313] team0: Port device team_slave_1 added [ 24.615375][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.624477][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.631593][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.639569][ T3314] bridge_slave_0: entered allmulticast mode [ 24.645872][ T3314] bridge_slave_0: entered promiscuous mode [ 24.661897][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.668877][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.694936][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.705645][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.712731][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.719937][ T3318] bridge_slave_0: entered allmulticast mode [ 24.726362][ T3318] bridge_slave_0: entered promiscuous mode [ 24.737915][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.745056][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.752205][ T3314] bridge_slave_1: entered allmulticast mode [ 24.758924][ T3314] bridge_slave_1: entered promiscuous mode [ 24.765436][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.772476][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.798571][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.810297][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.817459][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.843600][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.854598][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.862047][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.869728][ T3318] bridge_slave_1: entered allmulticast mode [ 24.876126][ T3318] bridge_slave_1: entered promiscuous mode [ 24.895908][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.903008][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.929322][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.947126][ T3319] team0: Port device team_slave_0 added [ 24.960114][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.971215][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.981492][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.995872][ T3319] team0: Port device team_slave_1 added [ 25.007193][ T3314] team0: Port device team_slave_0 added [ 25.014216][ T3314] team0: Port device team_slave_1 added [ 25.025664][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.060714][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.067727][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.093731][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.108522][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.115575][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.141596][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.152953][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.159901][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.186039][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.198716][ T3313] hsr_slave_0: entered promiscuous mode [ 25.204674][ T3313] hsr_slave_1: entered promiscuous mode [ 25.221475][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.228487][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.254757][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.277199][ T3321] hsr_slave_0: entered promiscuous mode [ 25.283249][ T3321] hsr_slave_1: entered promiscuous mode [ 25.289010][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.296635][ T3321] Cannot create hsr debugfs directory [ 25.308687][ T3318] team0: Port device team_slave_0 added [ 25.315785][ T3318] team0: Port device team_slave_1 added [ 25.355253][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.362278][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.388396][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.409444][ T3319] hsr_slave_0: entered promiscuous mode [ 25.415614][ T3319] hsr_slave_1: entered promiscuous mode [ 25.421379][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.429082][ T3319] Cannot create hsr debugfs directory [ 25.437297][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.444297][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.470379][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.490472][ T3314] hsr_slave_0: entered promiscuous mode [ 25.496554][ T3314] hsr_slave_1: entered promiscuous mode [ 25.502654][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.510213][ T3314] Cannot create hsr debugfs directory [ 25.579873][ T3318] hsr_slave_0: entered promiscuous mode [ 25.585928][ T3318] hsr_slave_1: entered promiscuous mode [ 25.591937][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 25.599593][ T3318] Cannot create hsr debugfs directory [ 25.713197][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 25.723860][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 25.732345][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 25.750554][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 25.768265][ T3321] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 25.784358][ T3321] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 25.798653][ T3321] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 25.808199][ T3321] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 25.817645][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.829647][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.838950][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.855545][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.873937][ T3319] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.883600][ T3319] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.898753][ T3319] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.913335][ T3319] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.946576][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.956941][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.965852][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.974485][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.000578][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.030612][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.055583][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.064384][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.071699][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.082791][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.099513][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.106603][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.118403][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.127790][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.138025][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.156715][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.163885][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.172522][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.179599][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.192381][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.201096][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.208278][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.222605][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.229668][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.242869][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.249959][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.259554][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.277594][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.284948][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.308930][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.330540][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.337631][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.350782][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.364525][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.371599][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.445567][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.456037][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.503201][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.542841][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.570098][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.587412][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.605219][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.694424][ T3321] veth0_vlan: entered promiscuous mode [ 26.721509][ T3313] veth0_vlan: entered promiscuous mode [ 26.756055][ T3314] veth0_vlan: entered promiscuous mode [ 26.766129][ T3321] veth1_vlan: entered promiscuous mode [ 26.788745][ T3318] veth0_vlan: entered promiscuous mode [ 26.795861][ T3313] veth1_vlan: entered promiscuous mode [ 26.806748][ T3314] veth1_vlan: entered promiscuous mode [ 26.815455][ T3321] veth0_macvtap: entered promiscuous mode [ 26.826348][ T3318] veth1_vlan: entered promiscuous mode [ 26.839836][ T3314] veth0_macvtap: entered promiscuous mode [ 26.852878][ T3321] veth1_macvtap: entered promiscuous mode [ 26.866060][ T3313] veth0_macvtap: entered promiscuous mode [ 26.880353][ T3314] veth1_macvtap: entered promiscuous mode [ 26.890328][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.904007][ T3313] veth1_macvtap: entered promiscuous mode [ 26.920950][ T3319] veth0_vlan: entered promiscuous mode [ 26.930231][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.941477][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.953763][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.965660][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.973368][ T3319] veth1_vlan: entered promiscuous mode [ 26.980542][ T3321] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.989529][ T3321] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.998333][ T3321] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.007084][ T3321] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.019655][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.028648][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.037486][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.046418][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.061656][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.082226][ T3313] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.091281][ T3313] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.100394][ T3313] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.109475][ T3313] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.127521][ T3318] veth0_macvtap: entered promiscuous mode [ 27.142650][ T3318] veth1_macvtap: entered promiscuous mode [ 27.155575][ T3319] veth0_macvtap: entered promiscuous mode [ 27.167501][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.185294][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.193292][ T3319] veth1_macvtap: entered promiscuous mode [ 27.205985][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.238652][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.245498][ T3455] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.258478][ T3318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.267445][ T3318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.276418][ T3318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.285768][ T3318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.305738][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.337994][ T3462] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2'. [ 27.338293][ T3319] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.355672][ T3319] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.364550][ T3319] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.373617][ T3319] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.501798][ T3474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.512660][ T3474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.669608][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 27.669627][ T29] audit: type=1400 audit(1748553642.773:121): avc: denied { setopt } for pid=3479 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 27.704454][ T29] audit: type=1400 audit(1748553642.793:122): avc: denied { create } for pid=3481 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.724523][ T29] audit: type=1400 audit(1748553642.793:123): avc: denied { bind } for pid=3481 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.744355][ T29] audit: type=1400 audit(1748553642.793:124): avc: denied { connect } for pid=3481 comm="syz.0.11" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.764587][ T29] audit: type=1400 audit(1748553642.793:125): avc: denied { setopt } for pid=3481 comm="syz.0.11" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.766358][ T3483] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7'. [ 27.786755][ T29] audit: type=1400 audit(1748553642.813:126): avc: denied { write } for pid=3481 comm="syz.0.11" laddr=::1 lport=7 faddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.918038][ T3487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11'. [ 27.965465][ T29] audit: type=1400 audit(1748553642.913:127): avc: denied { write } for pid=3481 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 27.985485][ T29] audit: type=1400 audit(1748553642.913:128): avc: denied { nlmsg_write } for pid=3481 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 28.005920][ T29] audit: type=1400 audit(1748553642.973:129): avc: denied { write } for pid=3481 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.026243][ T29] audit: type=1400 audit(1748553642.973:130): avc: denied { read } for pid=3481 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.155007][ T3493] infiniband syz1: set active [ 28.159789][ T3493] infiniband syz1: added syz_tun [ 28.227229][ T3493] RDS/IB: syz1: added [ 28.231384][ T3493] smc: adding ib device syz1 with port count 1 [ 28.237865][ T3493] smc: ib device syz1 port 1 has pnetid [ 28.551691][ T3505] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 28.731948][ T3510] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 28.738815][ T3510] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 28.746322][ T3518] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(16) [ 28.753063][ T3518] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 28.760602][ T3518] vhci_hcd vhci_hcd.0: Device attached [ 28.760618][ T3510] vhci_hcd vhci_hcd.0: Device attached [ 28.795901][ T3521] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(19) [ 28.802606][ T3521] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 28.810324][ T3521] vhci_hcd vhci_hcd.0: Device attached [ 28.837810][ T3525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.847744][ T3525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.866036][ T3510] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 28.878209][ T3493] syz.3.12 (3493) used greatest stack depth: 10624 bytes left [ 28.888423][ T3510] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(21) [ 28.895399][ T3510] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 28.903296][ T3510] vhci_hcd vhci_hcd.0: Device attached [ 28.931083][ T3510] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(23) [ 28.937752][ T3510] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 28.945712][ T3510] vhci_hcd vhci_hcd.0: Device attached [ 28.972792][ T3510] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 29.002460][ T3510] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 29.011294][ T3510] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 29.011919][ T3491] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 29.043693][ T3510] vhci_hcd vhci_hcd.0: port 0 already used [ 29.095013][ T3519] vhci_hcd: connection closed [ 29.095345][ T31] vhci_hcd: stop threads [ 29.095390][ T3522] vhci_hcd: connection closed [ 29.100077][ T31] vhci_hcd: release socket [ 29.105565][ T3528] vhci_hcd: connection closed [ 29.109087][ T31] vhci_hcd: disconnect device [ 29.113623][ T3511] vhci_hcd: connection reset by peer [ 29.130182][ T3526] vhci_hcd: connection closed [ 29.132098][ T31] vhci_hcd: stop threads [ 29.141116][ T31] vhci_hcd: release socket [ 29.145590][ T31] vhci_hcd: disconnect device [ 29.165011][ T31] vhci_hcd: stop threads [ 29.169327][ T31] vhci_hcd: release socket [ 29.173815][ T31] vhci_hcd: disconnect device [ 29.179684][ T31] vhci_hcd: stop threads [ 29.184027][ T31] vhci_hcd: release socket [ 29.188469][ T31] vhci_hcd: disconnect device [ 29.272572][ T3545] loop0: detected capacity change from 0 to 512 [ 29.301417][ T3545] ======================================================= [ 29.301417][ T3545] WARNING: The mand mount option has been deprecated and [ 29.301417][ T3545] and is ignored by this kernel. Remove the mand [ 29.301417][ T3545] option from the mount to silence this warning. [ 29.301417][ T3545] ======================================================= [ 29.339738][ T31] vhci_hcd: stop threads [ 29.344092][ T31] vhci_hcd: release socket [ 29.348591][ T31] vhci_hcd: disconnect device [ 29.357658][ T3545] EXT4-fs: Ignoring removed bh option [ 29.372085][ T3545] EXT4-fs: Ignoring removed bh option [ 29.378164][ T3545] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 29.387139][ T3545] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 29.404641][ T3547] loop1: detected capacity change from 0 to 512 [ 29.461455][ T3545] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 29.471254][ T3547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 29.484761][ T3545] EXT4-fs (loop0): orphan cleanup on readonly fs [ 29.491770][ T3545] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 29.507094][ T3545] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 29.515098][ T3545] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.23: Invalid block bitmap block 0 in block_group 0 [ 29.523648][ T3547] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.24: bg 0: block 425: padding at end of block bitmap is not set [ 29.544622][ T3545] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 29.551551][ T3547] EXT4-fs (loop1): Remounting filesystem read-only [ 29.564290][ T3545] EXT4-fs (loop0): 1 orphan inode deleted [ 29.570443][ T3545] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 29.609370][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.618827][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.665133][ T3553] syz.4.27 uses obsolete (PF_INET,SOCK_PACKET) [ 30.228946][ T3584] netlink: 48 bytes leftover after parsing attributes in process `syz.1.37'. [ 30.823051][ T3600] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.830384][ T3600] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.339846][ T3625] loop2: detected capacity change from 0 to 512 [ 31.350057][ T3625] EXT4-fs: Ignoring removed orlov option [ 31.377505][ T3625] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.55: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 3, max 1(4), depth 0(0) [ 31.539578][ T3625] EXT4-fs (loop2): Remounting filesystem read-only [ 31.546304][ T3625] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 31.561126][ T3625] EXT4-fs (loop2): mount failed [ 31.661418][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.668666][ T3630] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.725771][ T3630] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.736280][ T3630] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.777459][ T3630] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.786620][ T3630] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.795705][ T3630] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.805074][ T3630] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.986381][ T3635] loop2: detected capacity change from 0 to 8192 [ 32.014400][ T3635] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 32.039698][ T3641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.077008][ T3641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.202330][ T3648] netlink: 'syz.1.63': attribute type 10 has an invalid length. [ 32.262346][ T3648] syz_tun: entered promiscuous mode [ 32.271806][ T3648] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 32.770912][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 32.770939][ T29] audit: type=1400 audit(1748553647.873:197): avc: denied { read } for pid=3649 comm="syz.4.64" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 32.875359][ T3658] loop0: detected capacity change from 0 to 512 [ 32.885568][ T3658] EXT4-fs: Ignoring removed oldalloc option [ 32.891617][ T3658] EXT4-fs: inline encryption not supported [ 32.962451][ T3658] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.998387][ T3658] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.66: bg 0: block 64: padding at end of block bitmap is not set [ 33.030763][ T3658] Quota error (device loop0): write_blk: dquota write failed [ 33.050203][ T3667] loop1: detected capacity change from 0 to 512 [ 33.082995][ T3658] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 33.106478][ T3667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.112417][ T3658] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.66: Failed to acquire dquot type 0 [ 33.203922][ T3667] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.69: bg 0: block 425: padding at end of block bitmap is not set [ 33.222921][ T29] audit: type=1400 audit(1748553648.333:198): avc: denied { connect } for pid=3669 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.228646][ T3670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 33.252035][ T3658] EXT4-fs (loop0): 1 truncate cleaned up [ 33.258558][ T3658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.271203][ T3667] EXT4-fs (loop1): Remounting filesystem read-only [ 33.299078][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.301134][ T29] audit: type=1400 audit(1748553648.333:199): avc: denied { write } for pid=3669 comm="syz.3.70" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.336026][ T3658] syz.0.66 (3658) used greatest stack depth: 9288 bytes left [ 33.344595][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.400879][ T3672] rdma_rxe: rxe_newlink: failed to add syz_tun [ 33.512742][ T3674] syz1: rxe_newlink: already configured on syz_tun [ 33.622267][ T12] bond0: (slave bond_slave_0): interface is now down [ 33.629119][ T12] bond0: (slave bond_slave_1): interface is now down [ 33.663448][ T12] bond0: now running without any active interface! [ 33.736288][ T29] audit: type=1400 audit(1748553648.843:200): avc: denied { ioctl } for pid=3680 comm="syz.3.76" path="socket:[4633]" dev="sockfs" ino=4633 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.793785][ T29] audit: type=1400 audit(1748553648.843:201): avc: denied { write } for pid=3680 comm="syz.3.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.813234][ T29] audit: type=1400 audit(1748553648.843:202): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.911353][ T29] audit: type=1400 audit(1748553649.013:203): avc: denied { open } for pid=3686 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.930482][ T29] audit: type=1400 audit(1748553649.013:204): avc: denied { kernel } for pid=3686 comm="syz.2.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 33.950758][ T3686] uprobe: syz.2.77:3686 failed to unregister, leaking uprobe [ 34.065630][ T3701] netlink: 4 bytes leftover after parsing attributes in process `syz.1.86'. [ 34.110883][ T3701] bond0: (slave syz_tun): Releasing backup interface [ 34.121968][ T3491] usb 9-1: enqueue for inactive port 0 [ 34.127584][ T3491] usb 9-1: enqueue for inactive port 0 [ 34.221869][ T3491] vhci_hcd: vhci_device speed not set [ 34.253699][ T3705] loop4: detected capacity change from 0 to 2048 [ 34.404400][ T3705] EXT4-fs: Ignoring removed mblk_io_submit option [ 34.411058][ T3705] EXT4-fs: Ignoring removed i_version option [ 34.539659][ T3715] netlink: 'syz.1.90': attribute type 8 has an invalid length. [ 34.756009][ T3705] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.810789][ T3727] uprobe: syz.0.95:3727 failed to unregister, leaking uprobe [ 34.879045][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.973126][ T139] bond0: (slave bond_slave_0): interface is now down [ 34.979978][ T139] bond0: (slave bond_slave_1): interface is now down [ 35.010642][ T139] bond0: now running without any active interface! [ 35.095611][ T3750] netlink: 'syz.3.105': attribute type 8 has an invalid length. [ 35.215717][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 35.263718][ T3761] loop0: detected capacity change from 0 to 2048 [ 35.291610][ T3761] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.298245][ T3761] EXT4-fs: Ignoring removed i_version option [ 35.355930][ T3761] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.596704][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.943958][ T3781] loop2: detected capacity change from 0 to 512 [ 36.020683][ T3781] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.057241][ T3781] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.116: bg 0: block 425: padding at end of block bitmap is not set [ 36.134845][ T3781] EXT4-fs (loop2): Remounting filesystem read-only [ 36.180844][ T3790] syzkaller0: entered promiscuous mode [ 36.186448][ T3790] syzkaller0: entered allmulticast mode [ 36.195164][ T3792] rdma_rxe: rxe_newlink: failed to add syz_tun [ 36.234428][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.452194][ T3800] netlink: 'syz.4.125': attribute type 8 has an invalid length. [ 36.715403][ T3826] loop0: detected capacity change from 0 to 2048 [ 36.752363][ T3826] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.758918][ T3826] EXT4-fs: Ignoring removed i_version option [ 36.814441][ T3826] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.046203][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.149873][ T3848] netlink: 52 bytes leftover after parsing attributes in process `syz.1.145'. [ 37.235743][ T3856] loop0: detected capacity change from 0 to 512 [ 37.261315][ T3858] netlink: 'syz.3.150': attribute type 10 has an invalid length. [ 37.304714][ T3856] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.333873][ T3858] syz_tun: entered promiscuous mode [ 37.374443][ T3858] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 37.383514][ T12] bond0: (slave syz_tun): interface is now down [ 37.385452][ T3856] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.149: bg 0: block 425: padding at end of block bitmap is not set [ 37.389901][ T12] bond0: now running without any active interface! [ 37.421793][ T3393] usb usb10-port1: attempt power cycle [ 37.430769][ T3856] EXT4-fs (loop0): Remounting filesystem read-only [ 37.496224][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.585232][ T3868] loop3: detected capacity change from 0 to 2048 [ 37.593014][ T3866] rdma_rxe: rxe_newlink: failed to add syz_tun [ 37.631964][ T3868] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.638515][ T3868] EXT4-fs: Ignoring removed i_version option [ 37.712787][ T3868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.827161][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.832912][ T3883] netlink: 52 bytes leftover after parsing attributes in process `syz.0.158'. [ 37.929704][ T3896] netlink: 'syz.1.163': attribute type 10 has an invalid length. [ 38.054771][ T3901] loop0: detected capacity change from 0 to 512 [ 38.089982][ T3901] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.216969][ T3901] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.164: bg 0: block 425: padding at end of block bitmap is not set [ 38.222872][ T3720] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 425: padding at end of block bitmap is not set [ 38.259487][ T3720] EXT4-fs (loop0): Remounting filesystem read-only [ 38.295881][ T3916] netlink: 52 bytes leftover after parsing attributes in process `syz.3.172'. [ 38.298605][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.409793][ T3925] loop0: detected capacity change from 0 to 2048 [ 38.427851][ T3925] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.434517][ T3925] EXT4-fs: Ignoring removed i_version option [ 38.481978][ T3925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.510688][ T3939] loop2: detected capacity change from 0 to 512 [ 38.514069][ T3941] syzkaller1: entered promiscuous mode [ 38.522528][ T3941] syzkaller1: entered allmulticast mode [ 38.536461][ T3939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.554655][ T3939] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.180: bg 0: block 425: padding at end of block bitmap is not set [ 38.628219][ T3939] EXT4-fs (loop2): Remounting filesystem read-only [ 38.674135][ T3950] netlink: 52 bytes leftover after parsing attributes in process `syz.4.185'. [ 38.692887][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.765757][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.329357][ T3982] loop3: detected capacity change from 0 to 8192 [ 39.336921][ T3982] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.492255][ T3393] usb usb10-port1: unable to enumerate USB device [ 39.736049][ T4022] loop2: detected capacity change from 0 to 2048 [ 39.753513][ T4022] EXT4-fs: Ignoring removed mblk_io_submit option [ 39.760038][ T4022] EXT4-fs: Ignoring removed i_version option [ 39.820286][ T4036] netlink: 36 bytes leftover after parsing attributes in process `syz.1.217'. [ 39.855032][ T4022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.872708][ T4039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.947558][ T4039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.990200][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.143278][ T4046] netlink: 'syz.2.219': attribute type 10 has an invalid length. [ 40.164949][ T4046] syz_tun: entered promiscuous mode [ 40.173023][ T4046] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 40.216260][ T4051] syzkaller1: entered promiscuous mode [ 40.221899][ T4051] syzkaller1: entered allmulticast mode [ 40.410136][ T4073] Zero length message leads to an empty skb [ 40.427407][ T4071] loop3: detected capacity change from 0 to 8192 [ 40.437922][ T4071] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 40.829398][ T4097] loop4: detected capacity change from 0 to 512 [ 40.852164][ T4097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.866538][ T4097] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.241: bg 0: block 425: padding at end of block bitmap is not set [ 40.882768][ T4097] EXT4-fs (loop4): Remounting filesystem read-only [ 40.904070][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.975091][ T4105] syzkaller0: entered promiscuous mode [ 40.980637][ T4105] syzkaller0: entered allmulticast mode [ 41.171232][ T4111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.203689][ T4111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.437401][ T4132] loop4: detected capacity change from 0 to 512 [ 41.448052][ T4132] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.462974][ T4132] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.255: bg 0: block 425: padding at end of block bitmap is not set [ 41.477657][ T4132] EXT4-fs (loop4): Remounting filesystem read-only [ 41.506266][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.515627][ T4134] loop3: detected capacity change from 0 to 2048 [ 41.530696][ T4134] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.537250][ T4134] EXT4-fs: Ignoring removed i_version option [ 41.577673][ T4134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.596793][ T4142] netlink: 'syz.4.258': attribute type 10 has an invalid length. [ 41.626306][ T3321] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.689500][ T4148] loop3: detected capacity change from 0 to 8192 [ 41.701508][ T4148] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 41.718304][ T4150] netlink: 36 bytes leftover after parsing attributes in process `syz.4.262'. [ 41.917245][ T4169] loop2: detected capacity change from 0 to 512 [ 42.039521][ T4169] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.110697][ T4176] loop0: detected capacity change from 0 to 2048 [ 42.124424][ T4169] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.268: bg 0: block 425: padding at end of block bitmap is not set [ 42.153239][ T4169] EXT4-fs (loop2): Remounting filesystem read-only [ 42.173046][ T4185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.174277][ T4176] EXT4-fs: Ignoring removed mblk_io_submit option [ 42.183785][ T4185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.187908][ T4176] EXT4-fs: Ignoring removed i_version option [ 42.233588][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.253704][ T4176] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.322016][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.417164][ T4202] syzkaller0: entered promiscuous mode [ 42.422748][ T4202] syzkaller0: entered allmulticast mode [ 42.765022][ T4222] netlink: 36 bytes leftover after parsing attributes in process `syz.4.292'. [ 42.826960][ T4234] rdma_rxe: rxe_newlink: failed to add syz_tun [ 42.849104][ T4230] syzkaller0: entered promiscuous mode [ 42.854692][ T4230] syzkaller0: entered allmulticast mode [ 43.003034][ T4244] loop0: detected capacity change from 0 to 8192 [ 43.013769][ T4244] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 43.043387][ T4253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.073887][ T4253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.103228][ T4260] netlink: 36 bytes leftover after parsing attributes in process `syz.3.306'. [ 43.157326][ T4264] loop4: detected capacity change from 0 to 512 [ 43.179945][ T4264] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.266208][ T4244] ================================================================== [ 43.274407][ T4244] BUG: KCSAN: data-race in fat12_ent_put / fat_mirror_bhs [ 43.281513][ T4244] [ 43.283847][ T4244] write to 0xffff88811b152d58 of 1 bytes by task 4261 on cpu 1: [ 43.291499][ T4244] fat12_ent_put+0x74/0x170 [ 43.296009][ T4244] fat_alloc_clusters+0x4d1/0xa80 [ 43.301149][ T4244] fat_get_block+0x258/0x5e0 [ 43.305782][ T4244] __block_write_begin_int+0x3fd/0xf90 [ 43.311300][ T4244] cont_write_begin+0x5fc/0x970 [ 43.316181][ T4244] fat_write_begin+0x4f/0xe0 [ 43.320803][ T4244] generic_perform_write+0x181/0x490 [ 43.324400][ T4264] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.307: bg 0: block 425: padding at end of block bitmap is not set [ 43.326100][ T4244] __generic_file_write_iter+0x9e/0x120 [ 43.326131][ T4244] generic_file_write_iter+0x8d/0x2f0 [ 43.341151][ T4264] EXT4-fs (loop4): Remounting filesystem read-only [ 43.345971][ T4244] do_iter_readv_writev+0x3ee/0x4b0 [ 43.346000][ T4244] vfs_writev+0x2df/0x8b0 [ 43.367527][ T4244] __se_sys_pwritev2+0xfc/0x1c0 [ 43.372572][ T4244] __x64_sys_pwritev2+0x67/0x80 [ 43.377437][ T4244] x64_sys_call+0x1cea/0x2fb0 [ 43.382124][ T4244] do_syscall_64+0xd2/0x200 [ 43.386737][ T4244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.392641][ T4244] [ 43.394995][ T4244] read to 0xffff88811b152c00 of 512 bytes by task 4244 on cpu 0: [ 43.402828][ T4244] fat_mirror_bhs+0x1df/0x320 [ 43.407521][ T4244] fat_ent_write+0xd0/0xe0 [ 43.411955][ T4244] fat_chain_add+0x15b/0x3f0 [ 43.416582][ T4244] fat_get_block+0x46c/0x5e0 [ 43.421196][ T4244] __block_write_begin_int+0x3fd/0xf90 [ 43.426684][ T4244] cont_write_begin+0x5fc/0x970 [ 43.431568][ T4244] fat_write_begin+0x4f/0xe0 [ 43.436366][ T4244] generic_perform_write+0x181/0x490 [ 43.441671][ T4244] __generic_file_write_iter+0x9e/0x120 [ 43.447231][ T4244] generic_file_write_iter+0x8d/0x2f0 [ 43.452616][ T4244] vfs_write+0x4a0/0x8e0 [ 43.456879][ T4244] ksys_write+0xda/0x1a0 [ 43.461150][ T4244] __x64_sys_write+0x40/0x50 [ 43.465795][ T4244] x64_sys_call+0x2cdd/0x2fb0 [ 43.470483][ T4244] do_syscall_64+0xd2/0x200 [ 43.475005][ T4244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 43.481083][ T4244] [ 43.483424][ T4244] Reported by Kernel Concurrency Sanitizer on: [ 43.489581][ T4244] CPU: 0 UID: 0 PID: 4244 Comm: syz.0.298 Not tainted 6.15.0-syzkaller-08297-ge0797d3b91de #0 PREEMPT(voluntary) [ 43.501570][ T4244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.511721][ T4244] ================================================================== [ 43.556628][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.