last executing test programs: 3.079281737s ago: executing program 1 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_PRIORITY={0x8}]}, 0x24}}, 0x0) mknod$loop(0x0, 0x1000000000006005, 0x1) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x24}}, 0x40) 2.955020797s ago: executing program 1 (id=8): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000b8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r2, 0x0, 0x0}, 0x10) 2.558796247s ago: executing program 1 (id=9): ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448d4, 0x0) openat$ipvs(0xffffff9c, 0x0, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) 1.850124998s ago: executing program 4 (id=16): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r1 = syz_io_uring_setup(0x2789, &(0x7f00000004c0)={0x0, 0x49ff, 0x40, 0x1, 0x54}, &(0x7f0000000200), &(0x7f0000000540)) io_uring_register$IORING_REGISTER_BUFFERS2(r1, 0xf, &(0x7f0000000640)={0x1, 0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000580)=""/39, 0x27}], 0x0}, 0x20) 1.722538738s ago: executing program 4 (id=18): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=r1], 0x48}}, 0x0) 1.053799199s ago: executing program 3 (id=35): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) open(0x0, 0x143c62, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r0, r3}, 0xc) 981.871059ms ago: executing program 3 (id=36): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x0) 860.991699ms ago: executing program 3 (id=39): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='memory.current\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000100)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 739.624439ms ago: executing program 2 (id=45): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f00000003c0)='./file0\x00') renameat(r2, &(0x7f0000000500)='./file0/../file0\x00', r2, 0x0) 732.677199ms ago: executing program 0 (id=46): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b708000000005aab7b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) pipe2(&(0x7f0000000000), 0x0) 695.49499ms ago: executing program 3 (id=47): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000500), &(0x7f0000000600)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 695.146969ms ago: executing program 2 (id=48): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x8000, 0x7, 0x40, 0xe00}, 0x1c) close_range(r2, 0xffffffffffffffff, 0x0) 688.102109ms ago: executing program 0 (id=49): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = getpid() setreuid(0xee00, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r1], 0x1}, 0x58) 637.62964ms ago: executing program 2 (id=50): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x5452, &(0x7f0000000000)={'syztnl1\x00', 0x0}) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/103, 0x67}], 0x1, 0x0, 0x67}, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) sendmmsg$unix(r0, &(0x7f0000002100)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) 621.240469ms ago: executing program 0 (id=51): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x65, 0x0, 0x5, 0x0, 0x0, 0x3, 0x89008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc46, 0x0, @perf_config_ext={0x0, 0x94e}, 0x0, 0x19fbcc0a, 0x0, 0x3, 0x1, 0x2}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) 487.311629ms ago: executing program 2 (id=52): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000700)=""/25, 0x19}], 0x4, &(0x7f0000000300)=""/99, 0x63}, 0x3}, {{0x0, 0x0, &(0x7f0000000400), 0x27, &(0x7f0000000440)=""/220, 0xdc}, 0x3}], 0x2, 0x832b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000003240)="0d0ad7c36d", 0x5, 0x6d91fb6106d8d10c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 399.56324ms ago: executing program 2 (id=53): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='dE\x00', 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001800)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r1, 0x0}]) io_pgetevents(r2, 0x3, 0x3, &(0x7f0000000380)=[{}, {}, {}], &(0x7f0000000500), 0x0) 309.81508ms ago: executing program 2 (id=66): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x10ffff) ioprio_set$uid(0x3, 0x0, 0x0) 195.40975ms ago: executing program 3 (id=57): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7f, 0x8}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xfffff000, 0xe, 0x12, &(0x7f00000000c0)="61df712bc884fed5722780b605a7", 0x0, 0x1bd0}, 0x28) 179.70094ms ago: executing program 4 (id=58): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000700)='./file0\x00', 0x4418, &(0x7f0000000740)=ANY=[@ANYRES8=0x0, @ANYBLOB="6371d61f5012c9e379bc781c5d778a657e0968d35130be2a278cbab20bb60cdc44ba51793ac36a4f5a8559fd04113d056c2f4fe4c1ef25b1c3d6b4e90d"], 0x1, 0x140, &(0x7f00000003c0)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x1200, 0x0, 0x3) 126.15676ms ago: executing program 0 (id=59): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = fsmount(r0, 0x0, 0x6) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r2, &(0x7f00000003c0)='./file0\x00') renameat(r2, &(0x7f0000000500)='./file0/../file0\x00', r2, 0x0) 101.63193ms ago: executing program 1 (id=60): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000240), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000100)}, 0x20) 84.87755ms ago: executing program 4 (id=61): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000080), 0x0}, 0x20) 71.3477ms ago: executing program 1 (id=62): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = getpid() setreuid(0xee00, 0x0) r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone3(&(0x7f00000008c0)={0x14860000, 0x0, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r1], 0x1}, 0x58) 58.34611ms ago: executing program 0 (id=63): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/42, 0x2a}, {&(0x7f0000000200)=""/120, 0x78}, {&(0x7f0000000280)=""/97, 0x61}, {&(0x7f0000000700)=""/25, 0x19}], 0x4, &(0x7f0000000300)=""/99, 0x63}, 0x3}, {{0x0, 0x0, &(0x7f0000000400), 0x27, &(0x7f0000000440)=""/220, 0xdc}, 0x3}], 0x2, 0x832b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x409c884, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) sendto$inet6(r1, &(0x7f0000003240)="0d0ad7c36d", 0x5, 0x6d91fb6106d8d10c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) 36.39587ms ago: executing program 4 (id=64): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0xc008, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES16, @ANYRESOCT], 0x41, 0x2f9, &(0x7f0000000e40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fstatfs(r1, 0x0) 0s ago: executing program 1 (id=65): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x1808002, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0xcd0}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") creat(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): [ 21.635421][ T29] audit: type=1400 audit(1733512594.219:81): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.115' (ED25519) to the list of known hosts. [ 26.857290][ T29] audit: type=1400 audit(1733512599.439:82): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.858429][ T3287] cgroup: Unknown subsys name 'net' [ 26.880008][ T29] audit: type=1400 audit(1733512599.439:83): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.907909][ T29] audit: type=1400 audit(1733512599.469:84): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.045855][ T3287] cgroup: Unknown subsys name 'cpuset' [ 27.052116][ T3287] cgroup: Unknown subsys name 'rlimit' [ 27.182814][ T29] audit: type=1400 audit(1733512599.759:85): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.206281][ T29] audit: type=1400 audit(1733512599.759:86): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.226742][ T29] audit: type=1400 audit(1733512599.759:87): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.247092][ T29] audit: type=1400 audit(1733512599.759:88): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.267415][ T29] audit: type=1400 audit(1733512599.759:89): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.292342][ T29] audit: type=1400 audit(1733512599.759:90): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.300902][ T3290] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.324426][ T29] audit: type=1400 audit(1733512599.899:91): avc: denied { relabelto } for pid=3290 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.358606][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.391566][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 28.437083][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 28.480207][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 28.532096][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 28.545009][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.552125][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.559467][ T3297] bridge_slave_0: entered allmulticast mode [ 28.565848][ T3297] bridge_slave_0: entered promiscuous mode [ 28.588167][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.595421][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.602508][ T3297] bridge_slave_1: entered allmulticast mode [ 28.609029][ T3297] bridge_slave_1: entered promiscuous mode [ 28.678365][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.685452][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.692603][ T3298] bridge_slave_0: entered allmulticast mode [ 28.699188][ T3298] bridge_slave_0: entered promiscuous mode [ 28.706637][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.715743][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.722835][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.729957][ T3298] bridge_slave_1: entered allmulticast mode [ 28.736364][ T3298] bridge_slave_1: entered promiscuous mode [ 28.754633][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.761747][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.768981][ T3296] bridge_slave_0: entered allmulticast mode [ 28.775563][ T3296] bridge_slave_0: entered promiscuous mode [ 28.784618][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.800885][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.809985][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.817175][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.824321][ T3296] bridge_slave_1: entered allmulticast mode [ 28.830705][ T3296] bridge_slave_1: entered promiscuous mode [ 28.851511][ T3307] chnl_net:caif_netlink_parms(): no params data found [ 28.861169][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.884512][ T3297] team0: Port device team_slave_0 added [ 28.897779][ T3298] team0: Port device team_slave_0 added [ 28.908528][ T3297] team0: Port device team_slave_1 added [ 28.915466][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.924583][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.931732][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.939088][ T3301] bridge_slave_0: entered allmulticast mode [ 28.945459][ T3301] bridge_slave_0: entered promiscuous mode [ 28.954342][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.961440][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.968781][ T3301] bridge_slave_1: entered allmulticast mode [ 28.975338][ T3301] bridge_slave_1: entered promiscuous mode [ 28.981922][ T3298] team0: Port device team_slave_1 added [ 28.988697][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.055077][ T3296] team0: Port device team_slave_0 added [ 29.060959][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.067999][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.093950][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.107935][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.118324][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.127848][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.134924][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.161180][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.172565][ T3296] team0: Port device team_slave_1 added [ 29.183648][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.190877][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.216890][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.240258][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.247294][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.273318][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.289361][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.296451][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.322377][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.346193][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.353250][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.379219][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.390627][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.397749][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.405019][ T3307] bridge_slave_0: entered allmulticast mode [ 29.411441][ T3307] bridge_slave_0: entered promiscuous mode [ 29.418203][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.425362][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.432660][ T3307] bridge_slave_1: entered allmulticast mode [ 29.439279][ T3307] bridge_slave_1: entered promiscuous mode [ 29.446007][ T3301] team0: Port device team_slave_0 added [ 29.452899][ T3301] team0: Port device team_slave_1 added [ 29.497174][ T3297] hsr_slave_0: entered promiscuous mode [ 29.503195][ T3297] hsr_slave_1: entered promiscuous mode [ 29.520515][ T3298] hsr_slave_0: entered promiscuous mode [ 29.526539][ T3298] hsr_slave_1: entered promiscuous mode [ 29.532346][ T3298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.539915][ T3298] Cannot create hsr debugfs directory [ 29.550204][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.557251][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.583230][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.595158][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.610631][ T3296] hsr_slave_0: entered promiscuous mode [ 29.616704][ T3296] hsr_slave_1: entered promiscuous mode [ 29.622609][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.630185][ T3296] Cannot create hsr debugfs directory [ 29.641305][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.648348][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.674279][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.686161][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.728373][ T3307] team0: Port device team_slave_0 added [ 29.742046][ T3307] team0: Port device team_slave_1 added [ 29.773210][ T3301] hsr_slave_0: entered promiscuous mode [ 29.779171][ T3301] hsr_slave_1: entered promiscuous mode [ 29.785168][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.792720][ T3301] Cannot create hsr debugfs directory [ 29.809042][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.816134][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.842083][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.853254][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.860278][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.886194][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.954563][ T3307] hsr_slave_0: entered promiscuous mode [ 29.960646][ T3307] hsr_slave_1: entered promiscuous mode [ 29.966648][ T3307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.974197][ T3307] Cannot create hsr debugfs directory [ 30.049799][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.069324][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.079932][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.091108][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.123158][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.131861][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.146354][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.155188][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.179965][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.188403][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.200458][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.222068][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.244608][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.253522][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.262660][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.278091][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.299352][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.309131][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.326347][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.335172][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.360558][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.385389][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.416583][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.423727][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.441912][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.449031][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.471407][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.480742][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.501041][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.523486][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.536026][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.562601][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.570909][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.578049][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.588328][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.595496][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.614338][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.631447][ T173] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.638662][ T173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.652767][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.662484][ T173] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.669547][ T173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.682211][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.689280][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.698798][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.705864][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.718329][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.734244][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.744788][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.751906][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.770133][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.777254][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.794410][ T3297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.804866][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.866770][ T3307] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.877241][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.919278][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.938608][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.966365][ T3298] veth0_vlan: entered promiscuous mode [ 30.973853][ T3298] veth1_vlan: entered promiscuous mode [ 31.027231][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.043142][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.059743][ T3298] veth0_macvtap: entered promiscuous mode [ 31.067141][ T3298] veth1_macvtap: entered promiscuous mode [ 31.084088][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.101928][ T3297] veth0_vlan: entered promiscuous mode [ 31.109036][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.117670][ T3298] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.126514][ T3298] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.135255][ T3298] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.143957][ T3298] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.167102][ T3297] veth1_vlan: entered promiscuous mode [ 31.235205][ T3297] veth0_macvtap: entered promiscuous mode [ 31.246209][ T3297] veth1_macvtap: entered promiscuous mode [ 31.263020][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.275096][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.288122][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.300074][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.310886][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.321499][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.332176][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.350802][ T3297] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.359670][ T3297] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.368466][ T3297] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.377190][ T3297] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.400167][ T3307] veth0_vlan: entered promiscuous mode [ 31.406528][ T3301] veth0_vlan: entered promiscuous mode [ 31.423047][ T3296] veth0_vlan: entered promiscuous mode [ 31.431292][ T3301] veth1_vlan: entered promiscuous mode [ 31.447591][ T3296] veth1_vlan: entered promiscuous mode [ 31.455672][ T3307] veth1_vlan: entered promiscuous mode [ 31.475134][ T3301] veth0_macvtap: entered promiscuous mode [ 31.487432][ T3301] veth1_macvtap: entered promiscuous mode [ 31.502330][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.512908][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.522831][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.533305][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.544686][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.561564][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.572042][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.581970][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.592442][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.603210][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.611869][ T3296] veth0_macvtap: entered promiscuous mode [ 31.628334][ T3296] veth1_macvtap: entered promiscuous mode [ 31.640892][ T3301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.649720][ T3301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.658729][ T3301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.667468][ T3301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.682203][ T3307] veth0_macvtap: entered promiscuous mode [ 31.691746][ T3307] veth1_macvtap: entered promiscuous mode [ 31.702418][ T3445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6'. [ 31.724987][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.735484][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.745452][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.755942][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.765787][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.776301][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.792026][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.800233][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.810850][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.820888][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.831362][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.841242][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.851731][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.861590][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.872048][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.883093][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.891266][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.901820][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.911745][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.922214][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.932043][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.942488][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.952880][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.966095][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.976597][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.986505][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.996960][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.006784][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.017257][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.027148][ T3307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.037604][ T3307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.048594][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.058309][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 32.058381][ T29] audit: type=1400 audit(1733512604.639:132): avc: denied { relabelfrom } for pid=3446 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.084283][ T29] audit: type=1400 audit(1733512604.639:133): avc: denied { relabelto } for pid=3446 comm="syz.2.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 32.091030][ T3456] loop0: detected capacity change from 0 to 164 [ 32.120176][ T3456] ======================================================= [ 32.120176][ T3456] WARNING: The mand mount option has been deprecated and [ 32.120176][ T3456] and is ignored by this kernel. Remove the mand [ 32.120176][ T3456] option from the mount to silence this warning. [ 32.120176][ T3456] ======================================================= [ 32.156452][ T3456] Unable to read rock-ridge attributes [ 32.163346][ T29] audit: type=1400 audit(1733512604.739:134): avc: denied { mount } for pid=3455 comm="syz.0.4" name="/" dev="loop0" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 32.163964][ T3296] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.189680][ T3456] Unable to read rock-ridge attributes [ 32.194096][ T3296] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.194176][ T3296] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.217397][ T3296] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.229690][ T29] audit: type=1400 audit(1733512604.809:135): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 32.229836][ T3307] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.258522][ T3307] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.267445][ T3307] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.276286][ T3307] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.296214][ T3458] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.387076][ T3458] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.498982][ T29] audit: type=1326 audit(1733512605.079:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3470 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37a7ddfed9 code=0x7ffc0000 [ 32.509098][ T3471] loop3: detected capacity change from 0 to 1024 [ 32.559014][ T29] audit: type=1326 audit(1733512605.109:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3470 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37a7ddfed9 code=0x7ffc0000 [ 32.582129][ T29] audit: type=1326 audit(1733512605.109:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3470 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37a7ddfed9 code=0x7ffc0000 [ 32.582718][ T3471] EXT4-fs: Ignoring removed orlov option [ 32.605236][ T29] audit: type=1326 audit(1733512605.109:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3470 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37a7ddfed9 code=0x7ffc0000 [ 32.605287][ T29] audit: type=1326 audit(1733512605.109:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3470 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37a7ddfed9 code=0x7ffc0000 [ 32.657085][ T29] audit: type=1326 audit(1733512605.109:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3470 comm="syz.4.5" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37a7ddfed9 code=0x7ffc0000 [ 32.693753][ T3471] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.726022][ T3476] loop4: detected capacity change from 0 to 512 [ 32.749194][ T3458] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.767605][ T3476] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.795490][ T3476] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 32.846096][ T3483] loop2: detected capacity change from 0 to 128 [ 32.868823][ T3296] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.969786][ T3487] pim6reg: entered allmulticast mode [ 32.996521][ T3487] pim6reg: left allmulticast mode [ 33.020042][ T3489] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18'. [ 33.029047][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 33.036500][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 33.046280][ T3489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 33.053696][ T3489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 33.248591][ C1] hrtimer: interrupt took 37378 ns [ 33.251833][ T3498] loop0: detected capacity change from 0 to 1024 [ 33.280305][ T3498] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.298777][ T3498] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 33.313340][ T3498] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.478184][ T3471] syz.3.3 (3471) used greatest stack depth: 10696 bytes left [ 33.492368][ T3507] smc: net device bond0 applied user defined pnetid SYZ0 [ 33.500704][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.520381][ T3507] smc: net device bond0 erased user defined pnetid SYZ0 [ 33.600464][ T3517] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.609315][ T3517] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.618219][ T3517] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.627056][ T3517] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 33.648908][ T3517] vxlan0: entered promiscuous mode [ 33.654083][ T3517] vxlan0: entered allmulticast mode [ 33.661989][ T3517] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 33.671049][ T3517] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 33.680178][ T3517] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 33.689183][ T3517] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 33.708086][ T3458] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.766751][ T3525] loop3: detected capacity change from 0 to 512 [ 33.777030][ T3525] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.827865][ T3307] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 34.108899][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.116688][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.124094][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.132507][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.139975][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.147432][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.154941][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.162333][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.169758][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.177215][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.184738][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.192215][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.199649][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.207215][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.215414][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.222824][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.230422][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.237935][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.245391][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.252787][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.260283][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.267768][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.275245][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.282877][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.290381][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.297796][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.305211][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.312695][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.320198][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.327652][ T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.336487][ T24] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 34.382359][ T3568] pim6reg: entered allmulticast mode [ 34.394066][ T3568] pim6reg: left allmulticast mode [ 34.416207][ T3570] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.424981][ T3570] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.433740][ T3570] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.442596][ T3570] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.452120][ T3570] vxlan0: entered promiscuous mode [ 34.457368][ T3570] vxlan0: entered allmulticast mode [ 34.464098][ T3570] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 34.473058][ T3570] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 34.481963][ T3570] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 34.490910][ T3570] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 34.510446][ T3458] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.522315][ T3458] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.541232][ T3458] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.554538][ T3458] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.572768][ T3579] loop4: detected capacity change from 0 to 128 [ 34.736122][ T3594] loop1: detected capacity change from 0 to 1024 [ 34.743131][ T3594] EXT4-fs: Ignoring removed orlov option [ 34.751482][ T3595] loop4: detected capacity change from 0 to 128 [ 34.758476][ T3595] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 34.766697][ T3594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.785404][ T3595] FAT-fs (loop4): FAT read failed (blocknr 128) [ 35.270861][ T3597] ================================================================== [ 35.278963][ T3597] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 35.286873][ T3597] [ 35.289194][ T3597] write to 0xffff8881065ab424 of 4 bytes by task 3594 on cpu 1: [ 35.296825][ T3597] xas_set_mark+0x131/0x150 [ 35.301346][ T3597] __folio_start_writeback+0x1e8/0x430 [ 35.306818][ T3597] ext4_bio_write_folio+0x591/0x9d0 [ 35.312029][ T3597] mpage_process_page_bufs+0x486/0x5d0 [ 35.317515][ T3597] mpage_prepare_extent_to_map+0x788/0xb80 [ 35.323341][ T3597] ext4_do_writepages+0xa20/0x2130 [ 35.328490][ T3597] ext4_writepages+0x159/0x2e0 [ 35.333262][ T3597] do_writepages+0x1d8/0x480 [ 35.338040][ T3597] file_write_and_wait_range+0x168/0x2f0 [ 35.343672][ T3597] generic_buffers_fsync_noflush+0x46/0x120 [ 35.349655][ T3597] ext4_sync_file+0x1ff/0x6c0 [ 35.354343][ T3597] vfs_fsync_range+0x116/0x130 [ 35.359119][ T3597] ext4_buffered_write_iter+0x326/0x370 [ 35.364678][ T3597] ext4_file_write_iter+0x383/0xf20 [ 35.369886][ T3597] iter_file_splice_write+0x5f1/0x980 [ 35.375272][ T3597] direct_splice_actor+0x160/0x2c0 [ 35.380404][ T3597] splice_direct_to_actor+0x302/0x670 [ 35.385784][ T3597] do_splice_direct+0xd7/0x150 [ 35.390557][ T3597] do_sendfile+0x398/0x660 [ 35.394974][ T3597] __x64_sys_sendfile64+0x110/0x150 [ 35.400182][ T3597] x64_sys_call+0xfbd/0x2dc0 [ 35.404770][ T3597] do_syscall_64+0xc9/0x1c0 [ 35.409372][ T3597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.415286][ T3597] [ 35.417611][ T3597] read to 0xffff8881065ab424 of 4 bytes by task 3597 on cpu 0: [ 35.425166][ T3597] __writeback_single_inode+0x210/0x850 [ 35.430723][ T3597] writeback_single_inode+0x16c/0x3f0 [ 35.436099][ T3597] sync_inode_metadata+0x5c/0x90 [ 35.441045][ T3597] generic_buffers_fsync_noflush+0xd8/0x120 [ 35.447067][ T3597] ext4_sync_file+0x1ff/0x6c0 [ 35.451778][ T3597] vfs_fsync_range+0x116/0x130 [ 35.456564][ T3597] ext4_buffered_write_iter+0x326/0x370 [ 35.462170][ T3597] ext4_file_write_iter+0x383/0xf20 [ 35.467501][ T3597] iter_file_splice_write+0x5f1/0x980 [ 35.472889][ T3597] direct_splice_actor+0x160/0x2c0 [ 35.478017][ T3597] splice_direct_to_actor+0x302/0x670 [ 35.483407][ T3597] do_splice_direct+0xd7/0x150 [ 35.488186][ T3597] do_sendfile+0x398/0x660 [ 35.492618][ T3597] __x64_sys_sendfile64+0x110/0x150 [ 35.497823][ T3597] x64_sys_call+0xfbd/0x2dc0 [ 35.502425][ T3597] do_syscall_64+0xc9/0x1c0 [ 35.506930][ T3597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.512848][ T3597] [ 35.515171][ T3597] value changed: 0x0a000021 -> 0x04000021 [ 35.520912][ T3597] [ 35.523230][ T3597] Reported by Kernel Concurrency Sanitizer on: [ 35.529458][ T3597] CPU: 0 UID: 0 PID: 3597 Comm: syz.1.65 Not tainted 6.13.0-rc1-syzkaller-00182-gb8f52214c61a #0 [ 35.540057][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 35.550137][ T3597] ================================================================== [ 35.633064][ T3594] syz.1.65 (3594) used greatest stack depth: 9576 bytes left [ 35.645245][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.