last executing test programs: 2.10545982s ago: executing program 1 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000004c0)='kfree\x00', r2}, 0x18) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000980)={0x2c, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x2c}}, 0x0) 2.02247288s ago: executing program 1 (id=202): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x1693, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x3, 0x1dc}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_UNREGISTER_BUFFERS(r0, 0x1, 0x0, 0x0) 1.799883681s ago: executing program 1 (id=211): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r1, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 1.767623901s ago: executing program 1 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000100)='./file0/file0\x00', 0xb) 1.749342242s ago: executing program 1 (id=213): socket$packet(0x11, 0x2, 0x300) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}]) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.461649662s ago: executing program 1 (id=227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]}) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) 1.461395823s ago: executing program 32 (id=227): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="190000000400000008000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xa, 0x0, 0x7ffc0002}]}) getresuid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) 1.393881523s ago: executing program 2 (id=232): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x0, 0x0, 0x4]}}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x4}, {}, @time=@tick=0x75}], 0x38) read$snapshot(r1, 0x0, 0xffffffbf) read$snapshot(r1, 0x0, 0x0) 605.081977ms ago: executing program 4 (id=257): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000300)={0x0, 0xffffffffffffff20, &(0x7f00000002c0)={&(0x7f0000001740)={0x2c, r1, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x2c}}, 0x0) 573.449887ms ago: executing program 0 (id=258): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_delete(0x0) 561.496307ms ago: executing program 4 (id=259): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873720000000014"], 0xfc}}, 0x0) 538.878627ms ago: executing program 3 (id=260): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xf20e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x63db, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 507.902948ms ago: executing program 2 (id=261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x5, 0x5, 0x99, 0x1b, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, r2) 462.647268ms ago: executing program 0 (id=262): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) syz_open_pts(0xffffffffffffffff, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 451.662388ms ago: executing program 2 (id=263): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 443.654978ms ago: executing program 4 (id=264): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4c1, &(0x7f0000000680)="$eJzs3d9rW9cdAPDvle3ESZzZ2faQBZaFLcMJWyQ7XhKzh8yDsT0FlmXvnmfLxli2jCUnsQnDYX9AofQX7VOf+lLocymU/AmlEGjfSyktoU3Shz60VZF81SSubMvEshLr84Hje8+9V/5+j4SOdO656AbQsU5FxFhEdEXE2YjoT7dn0hJr66V63IP7tyarJYlK5dqXSSTptvr/StLlkfRhvRHxr39E/Df5adzSyurcRKGQX0rrufL8Yq60snpudn5iJj+TXxgbGb44emn0wujQrrX18t8+e+WFt/5++f0/3vhk/Isz/6um1Zfue7wdzVhr8rj1pvfUnou67ohY2kmwZ1hX2p6edicCAEBTqt/xfx4Rv42Ih6+3OxsAAACgFSp/6Ytvk4gKAAAAsG9latfAJplsei1AX2Qy2ez6Nby/jMOZQrFU/sN0cXlhav1a2YHoyUzPFvJD6bXCA9GTVOvDtfVH9fMb6iMRcSwiXuo/VKtnJ4uFqXaf/AAAAIAOcWTD+P/r/vXxPwAAALDPDLQ7AQAAAKDljP8BAABg/9t0/J90720iAAAAQCv888qVaqnU7389dX1lea54/dxUvjSXnV+ezE4WlxazM8XiTO03++a3+3+FYnHxT7GwfDNXzpfKudLK6vh8cXmhPF67r/d43n2iAQAAYO8d+82dj5OIWPvzoVqpOpDua2KsPtba7IBWyuzs8KRVeQB7r6vdCQBt4wJf6Fzm44FtBvYvb6jv8LQBAADwLBj81VPN/5sPhOeYgTx0LvP/0LnM/0PnMv8PHe7g9of0brbjg13OBQAAaJm+Wkky2XQusC8ymWw24mjttgA9yfRsIT8UET+LiI/6ew5W68PtThoAAAAAAAAAAAAAAAAAAAAAAAAAnjOVShIVAAAAYF+LyHyepDfyH+w/3bfx/MCB5Jv+2jIibrxx7dWbE+Xy0nB1+1c/bi+/lm4/344zGAAAAMBG9XF6fRwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvpwf1bk/Wyl3Hv/TUiBhrF747e2rL33f6IOPwwie7HHpdERNcuxF+7HRHHG8VPqmnFQJrFxviZiDjU5vhHdiE+dLI71f5nrNH7LxOnasvG77/utDyte6c26/8y9f6v1s816v+ONhnjxN13cpvGvx1xortx/1OPnzxl//uff6+ubrav8mbEYMPPn+SJWLny/GKutLJ6bnZ+YiY/k18YGRm+OHpp9MLoUG56tpBP/zaM8eKv3/t+q/Yf3iT+wDbtP91k+7+7e/P+L7aIf+Z3jV//41vErz73v08/B6r7B+vra+vrjzv59ocnt2r/1Cbt3+71P9Nk+89e/f+nTR4KAOyB0srq3EShkF+yYsXK/lu5mr7Rd/zwNndMAADArnv0pb/dmQAAAAAAAAAAAAAAAAAAAEDnavmPkB188pcFetvXVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALf0QAAD//9sy0wA=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x144) pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8080c61) 402.064178ms ago: executing program 3 (id=265): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xe, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 331.637599ms ago: executing program 2 (id=266): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000002180)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000100)=ANY=[]) 331.292319ms ago: executing program 3 (id=267): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) rseq(0x0, 0x0, 0x1, 0x0) 261.752769ms ago: executing program 3 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)={0x28, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 243.845619ms ago: executing program 4 (id=269): ftruncate(0xffffffffffffffff, 0xc17a) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000100000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$char_usb(r1, &(0x7f00000030c0)=""/4110, 0x100e) 179.948809ms ago: executing program 4 (id=270): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000280)) 173.806359ms ago: executing program 0 (id=271): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @remote}, 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0x2082, @empty}, 0x1c) 164.236269ms ago: executing program 3 (id=272): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setresuid(0x0, 0xee01, 0x0) syz_clone(0x12000000, 0x0, 0x16, 0x0, 0x0, 0x0) 135.59422ms ago: executing program 0 (id=273): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8000000000081, 0x0) 111.51918ms ago: executing program 4 (id=274): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks}, {@minixdf}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000240)={0x3920e, r0, 0x4, 0x0, 0x0, 0x2000003}) 96.93377ms ago: executing program 2 (id=275): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfc, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000140)) 94.28811ms ago: executing program 0 (id=276): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 83.42761ms ago: executing program 3 (id=277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8601) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0xa1, 0x0, 0xd, 0x4}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 473.3µs ago: executing program 0 (id=278): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x5) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r0]) 0s ago: executing program 2 (id=279): openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x1000000000000, &(0x7f0000000080)=@base={0xa, 0x9, 0x6b80, 0x3f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x48) kernel console output (not intermixed with test programs): [ 21.430630][ T29] audit: type=1400 audit(1731896365.234:81): avc: denied { read } for pid=2997 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.1.4' (ED25519) to the list of known hosts. [ 26.601402][ T29] audit: type=1400 audit(1731896370.404:82): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.602657][ T3302] cgroup: Unknown subsys name 'net' [ 26.624312][ T29] audit: type=1400 audit(1731896370.404:83): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.651693][ T29] audit: type=1400 audit(1731896370.434:84): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.890024][ T3302] cgroup: Unknown subsys name 'cpuset' [ 26.896387][ T3302] cgroup: Unknown subsys name 'rlimit' [ 27.064340][ T29] audit: type=1400 audit(1731896370.864:85): avc: denied { setattr } for pid=3302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.089874][ T29] audit: type=1400 audit(1731896370.864:86): avc: denied { create } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.110376][ T29] audit: type=1400 audit(1731896370.864:87): avc: denied { write } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.114989][ T3305] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.130764][ T29] audit: type=1400 audit(1731896370.864:88): avc: denied { read } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.159629][ T29] audit: type=1400 audit(1731896370.874:89): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.175202][ T3302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.184507][ T29] audit: type=1400 audit(1731896370.874:90): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.216578][ T29] audit: type=1400 audit(1731896370.944:91): avc: denied { relabelto } for pid=3305 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.960347][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 28.985919][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 29.011013][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 29.048133][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 29.080912][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 29.112679][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.119787][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.127008][ T3319] bridge_slave_0: entered allmulticast mode [ 29.133651][ T3319] bridge_slave_0: entered promiscuous mode [ 29.147018][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.154141][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.161430][ T3312] bridge_slave_0: entered allmulticast mode [ 29.167855][ T3312] bridge_slave_0: entered promiscuous mode [ 29.174592][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.181674][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.188794][ T3312] bridge_slave_1: entered allmulticast mode [ 29.195245][ T3312] bridge_slave_1: entered promiscuous mode [ 29.206487][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.213595][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.220934][ T3319] bridge_slave_1: entered allmulticast mode [ 29.227432][ T3319] bridge_slave_1: entered promiscuous mode [ 29.254641][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.261818][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.269025][ T3313] bridge_slave_0: entered allmulticast mode [ 29.275526][ T3313] bridge_slave_0: entered promiscuous mode [ 29.284482][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.291636][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.298729][ T3313] bridge_slave_1: entered allmulticast mode [ 29.305187][ T3313] bridge_slave_1: entered promiscuous mode [ 29.317296][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.343455][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.366954][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.390754][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.397908][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.405268][ T3316] bridge_slave_0: entered allmulticast mode [ 29.411554][ T3316] bridge_slave_0: entered promiscuous mode [ 29.418579][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.427807][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.434968][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.442123][ T3316] bridge_slave_1: entered allmulticast mode [ 29.448552][ T3316] bridge_slave_1: entered promiscuous mode [ 29.455027][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.462153][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.469315][ T3317] bridge_slave_0: entered allmulticast mode [ 29.475717][ T3317] bridge_slave_0: entered promiscuous mode [ 29.483107][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.492287][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.499522][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.506701][ T3317] bridge_slave_1: entered allmulticast mode [ 29.513184][ T3317] bridge_slave_1: entered promiscuous mode [ 29.524480][ T3312] team0: Port device team_slave_0 added [ 29.544598][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.563605][ T3312] team0: Port device team_slave_1 added [ 29.574584][ T3319] team0: Port device team_slave_0 added [ 29.581021][ T3319] team0: Port device team_slave_1 added [ 29.597094][ T3313] team0: Port device team_slave_0 added [ 29.603880][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.613942][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.633184][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.646832][ T3313] team0: Port device team_slave_1 added [ 29.661974][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.668983][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.695034][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.707141][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.714131][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.740096][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.751899][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.766366][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.773423][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.799396][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.825820][ T3316] team0: Port device team_slave_0 added [ 29.831983][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.838997][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.865004][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.876097][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.883135][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.909286][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.920929][ T3317] team0: Port device team_slave_0 added [ 29.927986][ T3317] team0: Port device team_slave_1 added [ 29.934485][ T3316] team0: Port device team_slave_1 added [ 29.948817][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.956260][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.982312][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.016353][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.023405][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.049376][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.072459][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.079479][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.105448][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.118275][ T3312] hsr_slave_0: entered promiscuous mode [ 30.124339][ T3312] hsr_slave_1: entered promiscuous mode [ 30.130726][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.137767][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.164089][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.191806][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.198799][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.224747][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.246200][ T3319] hsr_slave_0: entered promiscuous mode [ 30.252328][ T3319] hsr_slave_1: entered promiscuous mode [ 30.258274][ T3319] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.265910][ T3319] Cannot create hsr debugfs directory [ 30.274134][ T3313] hsr_slave_0: entered promiscuous mode [ 30.280299][ T3313] hsr_slave_1: entered promiscuous mode [ 30.286149][ T3313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.293742][ T3313] Cannot create hsr debugfs directory [ 30.327072][ T3317] hsr_slave_0: entered promiscuous mode [ 30.333116][ T3317] hsr_slave_1: entered promiscuous mode [ 30.339038][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.346642][ T3317] Cannot create hsr debugfs directory [ 30.376106][ T3316] hsr_slave_0: entered promiscuous mode [ 30.382295][ T3316] hsr_slave_1: entered promiscuous mode [ 30.388233][ T3316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.396002][ T3316] Cannot create hsr debugfs directory [ 30.572941][ T3312] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.581569][ T3312] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.590321][ T3312] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.601135][ T3312] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.626660][ T3319] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.636095][ T3319] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.647605][ T3319] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.658474][ T3319] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.676270][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.694559][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.703849][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.720454][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.752870][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.762773][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.771797][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.780865][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.798151][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.816040][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.830300][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.862327][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.869421][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.877778][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.886762][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.895770][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.907286][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.914363][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.922957][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.935677][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.947551][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.954643][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.985389][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.992481][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.023963][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.052302][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.065566][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.092552][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.099651][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.108422][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.115602][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.133795][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.158508][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.188803][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.214945][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.222065][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.233666][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.254559][ T3316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.265168][ T3316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.278467][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.285613][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.307437][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.319734][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.337864][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.360631][ T3319] veth0_vlan: entered promiscuous mode [ 31.368432][ T3319] veth1_vlan: entered promiscuous mode [ 31.395761][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.402877][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.422926][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.430048][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.470434][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.484539][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.515876][ T3319] veth0_macvtap: entered promiscuous mode [ 31.531786][ T3317] veth0_vlan: entered promiscuous mode [ 31.547406][ T3312] veth0_vlan: entered promiscuous mode [ 31.555225][ T3319] veth1_macvtap: entered promiscuous mode [ 31.563265][ T3317] veth1_vlan: entered promiscuous mode [ 31.577976][ T3312] veth1_vlan: entered promiscuous mode [ 31.585787][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.598137][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.610492][ T3319] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.619279][ T3319] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.628054][ T3319] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.636923][ T3319] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.656511][ T3317] veth0_macvtap: entered promiscuous mode [ 31.665763][ T3317] veth1_macvtap: entered promiscuous mode [ 31.686749][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.701425][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.711935][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.725081][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.737542][ T3312] veth0_macvtap: entered promiscuous mode [ 31.745023][ T3312] veth1_macvtap: entered promiscuous mode [ 31.759741][ T3317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.770218][ T3317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.770710][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 31.770726][ T29] audit: type=1400 audit(1731896375.574:110): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.N2hX94/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.789574][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.816352][ T29] audit: type=1400 audit(1731896375.614:111): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.839892][ T29] audit: type=1400 audit(1731896375.614:112): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.N2hX94/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.852939][ T3316] veth0_vlan: entered promiscuous mode [ 31.865344][ T29] audit: type=1400 audit(1731896375.614:113): avc: denied { mount } for pid=3319 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.882767][ T3316] veth1_vlan: entered promiscuous mode [ 31.892599][ T29] audit: type=1400 audit(1731896375.614:114): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.N2hX94/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.908239][ T3316] veth0_macvtap: entered promiscuous mode [ 31.924908][ T29] audit: type=1400 audit(1731896375.614:115): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/root/syzkaller.N2hX94/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3488 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.949358][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.957887][ T29] audit: type=1400 audit(1731896375.614:116): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.968315][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.997879][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.008480][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.018389][ T29] audit: type=1400 audit(1731896375.734:117): avc: denied { mounton } for pid=3319 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.040948][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.049962][ T3319] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.056710][ T3317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.073433][ T3317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.082192][ T3317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.090962][ T3317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.106855][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.117369][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.124069][ T29] audit: type=1400 audit(1731896375.904:118): avc: denied { read write } for pid=3319 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.127395][ T3312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.151493][ T29] audit: type=1400 audit(1731896375.904:119): avc: denied { open } for pid=3319 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.161793][ T3312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.201906][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.210108][ T3316] veth1_macvtap: entered promiscuous mode [ 32.228616][ T3312] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.237527][ T3312] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.246345][ T3312] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.255205][ T3312] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.282847][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.293461][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.303512][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.314109][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.324025][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.334528][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.346372][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.365986][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.376583][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.386654][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.397136][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.406987][ T3316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.417442][ T3316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.428432][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.454184][ T3316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.462990][ T3316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.471783][ T3316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.480575][ T3316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.558802][ T3313] veth0_vlan: entered promiscuous mode [ 32.596487][ T3313] veth1_vlan: entered promiscuous mode [ 32.640538][ T3479] loop0: detected capacity change from 0 to 512 [ 32.649962][ T3479] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.660456][ T3313] veth0_macvtap: entered promiscuous mode [ 32.663165][ T3479] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 32.670752][ T3313] veth1_macvtap: entered promiscuous mode [ 32.711836][ T3479] EXT4-fs (loop0): 1 truncate cleaned up [ 32.723182][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.733754][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.743608][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.745339][ T3479] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.754124][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.776364][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.786829][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.796922][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.797004][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.800105][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.802529][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.802549][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.802558][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.802572][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.802583][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.802596][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.802604][ T3313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.802642][ T3313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.803446][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.806443][ T3313] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.806534][ T3313] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.806568][ T3313] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.806600][ T3313] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.129910][ T3515] process 'syz.1.24' launched './file1' with NULL argv: empty string added [ 33.394959][ T3541] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.418753][ T3541] Cannot find set identified by id 0 to match [ 33.481411][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.719820][ T3571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.50'. [ 33.769405][ T3565] loop2: detected capacity change from 0 to 4096 [ 33.802335][ T3577] loop1: detected capacity change from 0 to 1024 [ 33.823073][ T3565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.852791][ T3565] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #15: comm syz.2.47: corrupted inode contents [ 33.866827][ T3577] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.896060][ T3565] EXT4-fs error (device loop2): ext4_dirty_inode:5984: inode #15: comm syz.2.47: mark_inode_dirty error [ 33.933016][ T3588] loop3: detected capacity change from 0 to 256 [ 33.955552][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.956723][ T3588] FAT-fs (loop3): bogus sectors per cluster 223 [ 33.970915][ T3588] FAT-fs (loop3): Can't find a valid FAT filesystem [ 33.986796][ T3565] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #15: comm syz.2.47: corrupted inode contents [ 34.000593][ T3590] syzkaller1: entered promiscuous mode [ 34.006107][ T3590] syzkaller1: entered allmulticast mode [ 34.018363][ T3565] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.47: mark_inode_dirty error [ 34.052252][ T3565] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #15: comm syz.2.47: corrupted inode contents [ 34.086594][ T3565] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #15: comm syz.2.47: mark_inode_dirty error [ 34.111228][ T3565] EXT4-fs error (device loop2): ext4_do_update_inode:5121: inode #15: comm syz.2.47: corrupted inode contents [ 34.153694][ T3598] loop3: detected capacity change from 0 to 1024 [ 34.158236][ T3565] EXT4-fs error (device loop2): ext4_truncate:4208: inode #15: comm syz.2.47: mark_inode_dirty error [ 34.173939][ T3598] EXT4-fs: Ignoring removed orlov option [ 34.179782][ T3598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.189688][ T3565] EXT4-fs error (device loop2) in ext4_setattr:5523: Corrupt filesystem [ 34.210475][ T3598] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.255684][ T3604] netlink: 'syz.1.64': attribute type 298 has an invalid length. [ 34.281395][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.293040][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.490071][ T3625] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 34.496687][ T3625] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 34.504380][ T3625] vhci_hcd vhci_hcd.0: Device attached [ 34.516752][ T3626] vhci_hcd: connection closed [ 34.518961][ T56] vhci_hcd: stop threads [ 34.527945][ T56] vhci_hcd: release socket [ 34.532407][ T56] vhci_hcd: disconnect device [ 34.613360][ T3559] kexec: Could not allocate control_code_buffer [ 34.687570][ T3638] syz.4.78[3638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.687643][ T3638] syz.4.78[3638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.703390][ T3638] syz.4.78[3638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.804145][ T3650] loop2: detected capacity change from 0 to 2048 [ 34.823184][ T3653] syz.1.86[3653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.823287][ T3653] syz.1.86[3653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.841561][ T3653] syz.1.86[3653] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 34.855160][ T3650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.897373][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.190145][ T3690] netlink: 'syz.1.101': attribute type 10 has an invalid length. [ 35.222397][ T3690] team0: Device veth0_macvtap failed to register rx_handler [ 35.276598][ T3699] xt_HMARK: spi-set and port-set can't be combined [ 35.417283][ T3718] netlink: 'syz.2.115': attribute type 1 has an invalid length. [ 35.430378][ T3714] syz.4.112 uses obsolete (PF_INET,SOCK_PACKET) [ 35.619619][ T3739] loop1: detected capacity change from 0 to 256 [ 35.635587][ T3745] loop2: detected capacity change from 0 to 512 [ 35.688135][ T3749] loop4: detected capacity change from 0 to 1024 [ 35.695281][ T3745] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.126: corrupted in-inode xattr: invalid ea_ino [ 35.735657][ T3749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.756533][ T3745] EXT4-fs error (device loop2): ext4_orphan_get:1393: comm syz.2.126: couldn't read orphan inode 15 (err -117) [ 35.795150][ T3745] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.836276][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.842768][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.889103][ T3762] Illegal XDP return value 4294967274 on prog (id 92) dev N/A, expect packet loss! [ 35.910229][ T3764] syzkaller1: entered promiscuous mode [ 35.915760][ T3764] syzkaller1: entered allmulticast mode [ 35.949939][ T3770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.960425][ T3770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.056204][ T3780] loop3: detected capacity change from 0 to 128 [ 36.063873][ T3780] ======================================================= [ 36.063873][ T3780] WARNING: The mand mount option has been deprecated and [ 36.063873][ T3780] and is ignored by this kernel. Remove the mand [ 36.063873][ T3780] option from the mount to silence this warning. [ 36.063873][ T3780] ======================================================= [ 36.355344][ T3812] hub 9-0:1.0: USB hub found [ 36.360626][ T3812] hub 9-0:1.0: 8 ports detected [ 36.386622][ T3820] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 36.396729][ T3820] SELinux: failed to load policy [ 36.445302][ T3826] syz.0.166[3826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.445382][ T3826] syz.0.166[3826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.456934][ T3826] syz.0.166[3826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 36.482766][ T3828] loop1: detected capacity change from 0 to 512 [ 36.544665][ T3828] EXT4-fs (loop1): too many log groups per flexible block group [ 36.552878][ T3828] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 36.560991][ T3828] EXT4-fs (loop1): mount failed [ 36.577212][ T1083] kernel read not supported for file /sysvipc/msg (pid: 1083 comm: kworker/0:2) [ 36.627728][ T3015] udevd[3015]: worker [3306] terminated by signal 33 (Unknown signal 33) [ 36.636793][ T3015] udevd[3015]: worker [3306] failed while handling '/devices/virtual/block/loop4' [ 36.653440][ T3851] bond1: entered promiscuous mode [ 36.658537][ T3851] bond1: entered allmulticast mode [ 36.664392][ T3851] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.677319][ T3851] bond1 (unregistering): Released all slaves [ 36.713157][ T3859] syz.0.179 (3859) used greatest stack depth: 10528 bytes left [ 36.715110][ T3857] loop1: detected capacity change from 0 to 512 [ 36.742034][ T3857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.756305][ T3857] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.789876][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 36.789890][ T29] audit: type=1326 audit(1731896380.594:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d1e3e719 code=0x7ffc0000 [ 36.820177][ T29] audit: type=1326 audit(1731896380.604:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d1e3e719 code=0x7ffc0000 [ 36.843502][ T29] audit: type=1326 audit(1731896380.604:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7fa3d1e3e719 code=0x7ffc0000 [ 36.866952][ T29] audit: type=1326 audit(1731896380.604:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d1e3e719 code=0x7ffc0000 [ 36.890314][ T29] audit: type=1326 audit(1731896380.604:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.1.178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d1e3e719 code=0x7ffc0000 [ 36.924028][ T3312] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.954570][ T3871] 9pnet_fd: p9_fd_create_tcp (3871): problem connecting socket to 127.0.0.1 [ 36.961630][ T29] audit: type=1400 audit(1731896380.754:394): avc: denied { bind } for pid=3872 comm="syz.1.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 37.018405][ T29] audit: type=1400 audit(1731896380.814:395): avc: denied { read } for pid=3876 comm="syz.4.188" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 37.106160][ T29] audit: type=1400 audit(1731896380.904:396): avc: denied { audit_write } for pid=3898 comm="syz.0.194" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 37.131101][ T29] audit: type=1107 audit(1731896380.904:397): pid=3898 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 37.164858][ T29] audit: type=1326 audit(1731896380.964:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3905 comm="syz.4.199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc594fe719 code=0x7ffc0000 [ 37.190334][ T3908] loop0: detected capacity change from 0 to 512 [ 37.213615][ T3908] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.226235][ T3908] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 37.261620][ T3917] 9pnet_fd: Insufficient options for proto=fd [ 37.263492][ T3913] loop2: detected capacity change from 0 to 512 [ 37.286637][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.296520][ T3913] EXT4-fs (loop2): orphan cleanup on readonly fs [ 37.304931][ T3913] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.201: bg 0: block 248: padding at end of block bitmap is not set [ 37.325914][ T3913] EXT4-fs error (device loop2): ext4_acquire_dquot:6879: comm syz.2.201: Failed to acquire dquot type 1 [ 37.353922][ T3913] EXT4-fs (loop2): 1 truncate cleaned up [ 37.370402][ T3913] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.386493][ T3913] syz.2.201 (3913) used greatest stack depth: 9352 bytes left [ 37.404176][ T3925] loop3: detected capacity change from 0 to 128 [ 37.421503][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.473404][ T3934] loop2: detected capacity change from 0 to 128 [ 37.508211][ T3932] loop3: detected capacity change from 0 to 8192 [ 37.514734][ T3934] loop2: detected capacity change from 128 to 0 [ 37.534587][ T3317] syz-executor: attempt to access beyond end of device [ 37.534587][ T3317] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 37.547630][ T3317] FAT-fs (loop2): unable to read boot sector to mark fs as dirty [ 37.600886][ T3944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.216'. [ 37.661164][ T3957] loop3: detected capacity change from 0 to 164 [ 37.667696][ T3957] iso9660: Unknown parameter '.' [ 37.728281][ T3965] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 37.760374][ T3967] 9pnet_fd: p9_fd_create_tcp (3967): problem connecting socket to 127.0.0.1 [ 37.776024][ T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.813217][ T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.884625][ T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.948206][ T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.020704][ T3971] chnl_net:caif_netlink_parms(): no params data found [ 38.076108][ T56] bridge_slave_1: left allmulticast mode [ 38.081828][ T56] bridge_slave_1: left promiscuous mode [ 38.087535][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.095493][ T56] bridge_slave_0: left allmulticast mode [ 38.101232][ T56] bridge_slave_0: left promiscuous mode [ 38.106907][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.193303][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 38.204354][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 38.216620][ T56] bond0 (unregistering): Released all slaves [ 38.237853][ T3971] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.245088][ T3971] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.252316][ T3971] bridge_slave_0: entered allmulticast mode [ 38.259041][ T3971] bridge_slave_0: entered promiscuous mode [ 38.265930][ T3971] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.273229][ T3971] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.280446][ T3971] bridge_slave_1: entered allmulticast mode [ 38.287034][ T3971] bridge_slave_1: entered promiscuous mode [ 38.305787][ T4005] netlink: 'syz.3.238': attribute type 7 has an invalid length. [ 38.314026][ T4005] netlink: 'syz.3.238': attribute type 5 has an invalid length. [ 38.322107][ T4005] netlink: 17 bytes leftover after parsing attributes in process `syz.3.238'. [ 38.374396][ T56] hsr_slave_0: left promiscuous mode [ 38.380888][ T56] hsr_slave_1: left promiscuous mode [ 38.387088][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.394675][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.406978][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.414530][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.426796][ T56] veth1_macvtap: left promiscuous mode [ 38.432444][ T56] veth1_vlan: left promiscuous mode [ 38.437910][ T56] veth0_vlan: left promiscuous mode [ 38.447505][ T4030] loop3: detected capacity change from 0 to 1024 [ 38.466908][ T4030] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.494388][ T3319] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.551063][ T56] team0 (unregistering): Port device team_slave_1 removed [ 38.562039][ T56] team0 (unregistering): Port device team_slave_0 removed [ 38.607043][ T3971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.618282][ T3971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.663880][ T4045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.257'. [ 38.673499][ T3971] team0: Port device team_slave_0 added [ 38.680339][ T3971] team0: Port device team_slave_1 added [ 38.700032][ T3971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.707040][ T3971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.733322][ T3971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.744655][ T3971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.751710][ T3971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.777912][ T3971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.825799][ T4060] loop4: detected capacity change from 0 to 512 [ 38.838436][ T4060] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 38.852058][ T3971] hsr_slave_0: entered promiscuous mode [ 38.859700][ T3971] hsr_slave_1: entered promiscuous mode [ 38.873608][ T4060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.886434][ T4060] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.930443][ T4060] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 38.948540][ T4060] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32896 with max blocks 1 with error 28 [ 38.961211][ T4060] EXT4-fs (loop4): This should not happen!! Data will be lost [ 38.961211][ T4060] [ 38.970913][ T4060] EXT4-fs (loop4): Total free blocks count 0 [ 38.976978][ T4060] EXT4-fs (loop4): Free/Dirty block details [ 38.983017][ T4060] EXT4-fs (loop4): free_blocks=39626 [ 38.988357][ T4060] EXT4-fs (loop4): dirty_blocks=1 [ 38.993606][ T4060] EXT4-fs (loop4): Block reservation details [ 38.999632][ T4060] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 39.017383][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.034970][ T4073] program syz.2.266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 39.104749][ T3971] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.117628][ T3971] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.126403][ T3971] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.151512][ T3971] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.169249][ T4087] loop4: detected capacity change from 0 to 512 [ 39.204207][ T4087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.226832][ T4093] usb usb5: usbfs: process 4093 (syz.3.277) did not claim interface 4 before use [ 39.232224][ T3971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.249734][ T4087] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.273465][ T3971] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.291415][ T3971] ================================================================== [ 39.299584][ T3971] BUG: KCSAN: data-race in pcpu_alloc_noprof / pcpu_free_area [ 39.307077][ T3971] [ 39.309410][ T3971] read-write to 0xffffffff88be03ac of 4 bytes by task 4099 on cpu 0: [ 39.317492][ T3971] pcpu_free_area+0x4dc/0x570 [ 39.322201][ T3971] free_percpu+0x1c6/0xb30 [ 39.326658][ T3971] prealloc_destroy+0xea/0x1a0 [ 39.331442][ T3971] htab_map_free+0x4a0/0x620 [ 39.336046][ T3971] bpf_map_free+0x49/0x70 [ 39.340403][ T3971] map_create+0xb10/0xb70 [ 39.344739][ T3971] __sys_bpf+0x667/0x7a0 [ 39.348986][ T3971] __x64_sys_bpf+0x43/0x50 [ 39.353421][ T3971] x64_sys_call+0x2625/0x2d60 [ 39.358222][ T3971] do_syscall_64+0xc9/0x1c0 [ 39.362784][ T3971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.368729][ T3971] [ 39.371064][ T3971] read to 0xffffffff88be03ac of 4 bytes by task 3971 on cpu 1: [ 39.378630][ T3971] pcpu_alloc_noprof+0x9b6/0x10a0 [ 39.383685][ T3971] fib_nh_common_init+0x4a/0x2b0 [ 39.388637][ T3971] fib_nh_init+0x64/0x1b0 [ 39.392981][ T3971] fib_create_info+0xa1f/0x14f0 [ 39.397844][ T3971] fib_table_insert+0x101/0xfa0 [ 39.402712][ T3971] fib_magic+0x1a1/0x1f0 [ 39.406965][ T3971] fib_add_ifaddr+0x281/0x330 [ 39.411652][ T3971] fib_netdev_event+0x34f/0x430 [ 39.416515][ T3971] raw_notifier_call_chain+0x6f/0x1d0 [ 39.421896][ T3971] call_netdevice_notifiers_info+0xae/0x100 [ 39.427809][ T3971] __dev_notify_flags+0xff/0x1a0 [ 39.432766][ T3971] dev_change_flags+0xab/0xd0 [ 39.437456][ T3971] do_setlink+0x844/0x2490 [ 39.441888][ T3971] rtnl_newlink+0x11a3/0x1690 [ 39.446595][ T3971] rtnetlink_rcv_msg+0x6aa/0x710 [ 39.451541][ T3971] netlink_rcv_skb+0x12c/0x230 [ 39.456338][ T3971] rtnetlink_rcv+0x1c/0x30 [ 39.460788][ T3971] netlink_unicast+0x599/0x670 [ 39.465569][ T3971] netlink_sendmsg+0x5cc/0x6e0 [ 39.470342][ T3971] __sock_sendmsg+0x140/0x180 [ 39.475033][ T3971] __sys_sendto+0x1d6/0x260 [ 39.479553][ T3971] __x64_sys_sendto+0x78/0x90 [ 39.484247][ T3971] x64_sys_call+0x2959/0x2d60 [ 39.488957][ T3971] do_syscall_64+0xc9/0x1c0 [ 39.493470][ T3971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.499385][ T3971] [ 39.501706][ T3971] value changed: 0x000000d4 -> 0x000000db [ 39.507420][ T3971] [ 39.509743][ T3971] Reported by Kernel Concurrency Sanitizer on: [ 39.515904][ T3971] CPU: 1 UID: 0 PID: 3971 Comm: syz-executor Not tainted 6.12.0-syzkaller #0 [ 39.524763][ T3971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 39.534822][ T3971] ================================================================== [ 39.550235][ T3971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.560698][ T3971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.591956][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.604088][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.611293][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.620191][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.627287][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.680995][ T3971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.796876][ T3971] veth0_vlan: entered promiscuous mode [ 39.805416][ T3971] veth1_vlan: entered promiscuous mode [ 39.820666][ T3971] veth0_macvtap: entered promiscuous mode [ 39.827955][ T3971] veth1_macvtap: entered promiscuous mode [ 39.838100][ T3971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.848693][ T3971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.858552][ T3971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.869046][ T3971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.878933][ T3971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.889407][ T3971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.899258][ T3971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.909762][ T3971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.920484][ T3971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.931429][ T3971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.941929][ T3971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.951996][ T3971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.962529][ T3971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.972429][ T3971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.982891][ T3971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.992734][ T3971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 40.003244][ T3971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 40.014390][ T3971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.024387][ T3971] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.033141][ T3971] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.041968][ T3971] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.050780][ T3971] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0