last executing test programs: 8.66083387s ago: executing program 3 (id=212): prlimit64(0xffffffffffffffff, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0xf3e, @mcast1={0xff, 0x7}, 0x90001}}, {{0xa, 0x4e20, 0x80422, @rand_addr=' \x01\x00', 0x8}}}, 0xe1) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x2ce, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd6ef5c980029829"], 0x0) 8.618567141s ago: executing program 3 (id=214): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000080)=0x7ff, 0x4) sendmmsg$inet(r0, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000006c0)="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", 0x244}], 0x1}}], 0x1, 0x0) 8.569299021s ago: executing program 3 (id=218): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x4, r1}, 0x38) open(0x0, 0x167842, 0x19) 7.861575472s ago: executing program 3 (id=250): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 7.752228173s ago: executing program 3 (id=252): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r0 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) fallocate(r0, 0x0, 0x400000000000000, 0x7) 6.896071116s ago: executing program 3 (id=277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe94, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x802, 0x3, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t<0&&\t') 6.856244477s ago: executing program 32 (id=277): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe94, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x802, 0x3, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t<0&&\t') 1.38615912s ago: executing program 2 (id=419): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) 1.33913539s ago: executing program 2 (id=420): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000004c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000e80)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000000c0)={0x13, 0x10, 0x8, {0x0, r3, 0x1}}, 0x18) 1.33843361s ago: executing program 0 (id=421): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000002c0)='kfree\x00', r0, 0x0, 0x5}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x2400, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0) 1.285208391s ago: executing program 2 (id=423): socket$netlink(0x10, 0x3, 0x8) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@abort}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000280)='./file0\x00', 0x200) 1.077829114s ago: executing program 2 (id=425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000680)="03", 0x1}], 0x1}], 0x1, 0x880) sendmmsg$inet_sctp(r2, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0xdc05}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 1.076453154s ago: executing program 0 (id=436): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000580), 0xfe, 0x507, &(0x7f0000001780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x948, 0x738, 0x738, 0xf0, 0x438, 0x738, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9a8) 837.118477ms ago: executing program 0 (id=427): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x6, 0x0, 0x0, @local, @local, 0x10, 0x7, 0x2, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 671.48336ms ago: executing program 0 (id=432): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) 633.871021ms ago: executing program 0 (id=434): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) 566.301142ms ago: executing program 5 (id=437): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000080), 0x1000000000000236) 540.768972ms ago: executing program 5 (id=438): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 415.750154ms ago: executing program 4 (id=440): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000580), 0xfe, 0x507, &(0x7f0000001780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001340)=@mangle={'mangle\x00', 0x10, 0x6, 0x948, 0x738, 0x738, 0xf0, 0x438, 0x738, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe}}}, {{@ipv6={@dev, @loopback, [], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @mcast1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @dev, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [], 'bridge_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9a8) 414.407514ms ago: executing program 5 (id=450): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid}]}}) 412.939034ms ago: executing program 0 (id=441): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x4, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) 319.774296ms ago: executing program 5 (id=443): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0), 0xfc, 0x574, &(0x7f0000001980)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1200) 214.712517ms ago: executing program 5 (id=445): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 214.535688ms ago: executing program 4 (id=446): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, 0x0, 0x0) 213.982757ms ago: executing program 1 (id=447): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x9) 188.487058ms ago: executing program 1 (id=448): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f0000000080), 0x1000000000000236) 169.368748ms ago: executing program 4 (id=449): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x230, 0x12, 0x60a, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x2000000], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x57c, 'system_u:object_r:file_context_t:s0\x00'}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39e}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) 165.822278ms ago: executing program 1 (id=460): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000008b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = memfd_secret(0x80000) fcntl$setlease(r2, 0x400, 0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000380)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 148.792758ms ago: executing program 2 (id=451): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYRESDEC=0x0]) 138.408918ms ago: executing program 4 (id=452): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 129.442038ms ago: executing program 1 (id=453): r0 = socket(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)=ANY=[@ANYBLOB="14000000530401"], 0x28}, 0x1, 0x0, 0x0, 0x64841}, 0x40000) 126.639089ms ago: executing program 5 (id=454): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000980)='./file1\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x5, 0x2b2, &(0x7f00000006c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 94.679619ms ago: executing program 1 (id=455): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b400000000000003dd0a00000000000073013100000000009500000000000000b38a595efa0578208e8354bb546620e3690771f5bf003326913779cfaf84efb8b3f976c934b37c6aab214e75d6019bf1582d07e5b5351fb88008465255c682"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000"], 0x48) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) 79.295939ms ago: executing program 4 (id=456): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xa1a2}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f0000001680)={0xa, 0x4e24, 0x6, @private2={0xfc, 0x2, '\x00', 0xfc}, 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0xffffff83, @loopback, 0x5}, 0x1c) 42.8217ms ago: executing program 1 (id=457): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) syz_io_uring_setup(0xb58, &(0x7f0000000140)={0x0, 0xfad6, 0x0, 0x8020, 0x326}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010326bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x20040814) 42.63952ms ago: executing program 2 (id=458): r0 = io_uring_setup(0xf08, &(0x7f000000c480)={0x0, 0xc451, 0x400, 0x3, 0x6}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)=""/187, 0xcc}], 0x35) r1 = io_uring_setup(0x6f9e, &(0x7f0000000600)={0x0, 0x1e28, 0x0, 0x3, 0x28b}) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r0], 0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/4\x00') preadv(r2, &(0x7f0000000280)=[{&(0x7f0000000500)=""/196, 0xc4}], 0x1, 0x200000, 0x1) 0s ago: executing program 4 (id=459): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000030601010000000000000000000000000500010007"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): ive=1 [ 17.679444][ T29] audit: type=1400 audit(1744823224.611:80): avc: denied { siginh } for pid=3181 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 21.078793][ T29] audit: type=1400 audit(1744823228.031:81): avc: denied { read } for pid=2986 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 26.194406][ T29] audit: type=1400 audit(1744823233.141:82): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.195446][ T3290] cgroup: Unknown subsys name 'net' [ 26.217227][ T29] audit: type=1400 audit(1744823233.141:83): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.244731][ T29] audit: type=1400 audit(1744823233.181:84): avc: denied { unmount } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.400075][ T3290] cgroup: Unknown subsys name 'cpuset' [ 26.406393][ T3290] cgroup: Unknown subsys name 'rlimit' [ 26.538285][ T29] audit: type=1400 audit(1744823233.481:85): avc: denied { setattr } for pid=3290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.561594][ T29] audit: type=1400 audit(1744823233.491:86): avc: denied { create } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.582137][ T29] audit: type=1400 audit(1744823233.491:87): avc: denied { write } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.602487][ T29] audit: type=1400 audit(1744823233.491:88): avc: denied { read } for pid=3290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.622889][ T29] audit: type=1400 audit(1744823233.491:89): avc: denied { mounton } for pid=3290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.626018][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.647745][ T29] audit: type=1400 audit(1744823233.491:90): avc: denied { mount } for pid=3290 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.679598][ T29] audit: type=1400 audit(1744823233.611:91): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.711819][ T3290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.446708][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 28.492015][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 28.511416][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 28.561181][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.585511][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.592857][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.600366][ T3303] bridge_slave_0: entered allmulticast mode [ 28.606756][ T3303] bridge_slave_0: entered promiscuous mode [ 28.644300][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.651414][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.658505][ T3303] bridge_slave_1: entered allmulticast mode [ 28.665063][ T3303] bridge_slave_1: entered promiscuous mode [ 28.682332][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.689448][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.696791][ T3308] bridge_slave_0: entered allmulticast mode [ 28.703254][ T3308] bridge_slave_0: entered promiscuous mode [ 28.710027][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.717141][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.724321][ T3308] bridge_slave_1: entered allmulticast mode [ 28.730662][ T3308] bridge_slave_1: entered promiscuous mode [ 28.772629][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.789458][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.811036][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.818166][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.825615][ T3301] bridge_slave_0: entered allmulticast mode [ 28.832178][ T3301] bridge_slave_0: entered promiscuous mode [ 28.839245][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.848360][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 28.858001][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.872203][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.879295][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.886408][ T3301] bridge_slave_1: entered allmulticast mode [ 28.892960][ T3301] bridge_slave_1: entered promiscuous mode [ 28.928561][ T3303] team0: Port device team_slave_0 added [ 28.938871][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.946018][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.953210][ T3314] bridge_slave_0: entered allmulticast mode [ 28.959808][ T3314] bridge_slave_0: entered promiscuous mode [ 28.978418][ T3303] team0: Port device team_slave_1 added [ 28.984772][ T3308] team0: Port device team_slave_0 added [ 28.990731][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.997791][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.004954][ T3314] bridge_slave_1: entered allmulticast mode [ 29.011299][ T3314] bridge_slave_1: entered promiscuous mode [ 29.018480][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.039496][ T3308] team0: Port device team_slave_1 added [ 29.046117][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.082496][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.096231][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.103254][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.129173][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.140389][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.147402][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.173357][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.188682][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.195759][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.221682][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.233304][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.242939][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.249996][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.275922][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.294130][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.301332][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.308508][ T3309] bridge_slave_0: entered allmulticast mode [ 29.315020][ T3309] bridge_slave_0: entered promiscuous mode [ 29.322061][ T3301] team0: Port device team_slave_0 added [ 29.327726][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.334833][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.342006][ T3309] bridge_slave_1: entered allmulticast mode [ 29.348373][ T3309] bridge_slave_1: entered promiscuous mode [ 29.368708][ T3301] team0: Port device team_slave_1 added [ 29.389461][ T3314] team0: Port device team_slave_0 added [ 29.402317][ T3308] hsr_slave_0: entered promiscuous mode [ 29.408383][ T3308] hsr_slave_1: entered promiscuous mode [ 29.419670][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.426639][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.452570][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.473356][ T3314] team0: Port device team_slave_1 added [ 29.487009][ T3303] hsr_slave_0: entered promiscuous mode [ 29.493022][ T3303] hsr_slave_1: entered promiscuous mode [ 29.498941][ T3303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.506570][ T3303] Cannot create hsr debugfs directory [ 29.512271][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.519326][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.545260][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.561160][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.593263][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.608322][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.615383][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.641638][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.671764][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.678801][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.704801][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.724538][ T3301] hsr_slave_0: entered promiscuous mode [ 29.730483][ T3301] hsr_slave_1: entered promiscuous mode [ 29.736391][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.744028][ T3301] Cannot create hsr debugfs directory [ 29.755255][ T3309] team0: Port device team_slave_0 added [ 29.762524][ T3309] team0: Port device team_slave_1 added [ 29.781296][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.788268][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.814223][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.841018][ T3314] hsr_slave_0: entered promiscuous mode [ 29.847009][ T3314] hsr_slave_1: entered promiscuous mode [ 29.852927][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.860546][ T3314] Cannot create hsr debugfs directory [ 29.866167][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.873165][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.899128][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.975749][ T3309] hsr_slave_0: entered promiscuous mode [ 29.981859][ T3309] hsr_slave_1: entered promiscuous mode [ 29.987792][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 29.995377][ T3309] Cannot create hsr debugfs directory [ 30.125106][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.133968][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.144536][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.153834][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.181144][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.192847][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.202405][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.214382][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.230831][ T3309] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.241317][ T3309] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.257898][ T3309] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.266731][ T3309] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.297138][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.308085][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.327642][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.334821][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.344126][ T3314] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.353802][ T3314] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.363017][ T3314] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.371588][ T3314] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.401912][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.409091][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.420739][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.435043][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.444565][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.459892][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.516730][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.532503][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.557688][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.566861][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.583831][ T381] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.591020][ T381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.604984][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.612264][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.630676][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.637747][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.646681][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.653777][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.663729][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.684144][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.696895][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.714968][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.722059][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.743668][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.751013][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.770532][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.781190][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.810477][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.817721][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.826673][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.833797][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.913751][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.932617][ T3301] veth0_vlan: entered promiscuous mode [ 30.938522][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.961136][ T3301] veth1_vlan: entered promiscuous mode [ 30.973223][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.001902][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.028423][ T3301] veth0_macvtap: entered promiscuous mode [ 31.047134][ T3301] veth1_macvtap: entered promiscuous mode [ 31.062945][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.083851][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.104935][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.118091][ T3301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.127008][ T3301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.136013][ T3301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.144804][ T3301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.187902][ T3309] veth0_vlan: entered promiscuous mode [ 31.196970][ T3308] veth0_vlan: entered promiscuous mode [ 31.202831][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 31.202844][ T29] audit: type=1400 audit(1744823238.151:117): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.216819][ T3309] veth1_vlan: entered promiscuous mode [ 31.231961][ T29] audit: type=1400 audit(1744823238.151:118): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="gadgetfs" ino=4446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.240420][ T3308] veth1_vlan: entered promiscuous mode [ 31.268887][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.296256][ T29] audit: type=1400 audit(1744823238.241:119): avc: denied { read write } for pid=3301 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.298359][ T3308] veth0_macvtap: entered promiscuous mode [ 31.338021][ T3309] veth0_macvtap: entered promiscuous mode [ 31.345014][ T29] audit: type=1400 audit(1744823238.271:120): avc: denied { open } for pid=3301 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.361751][ T3437] loop0: detected capacity change from 0 to 1024 [ 31.369156][ T29] audit: type=1400 audit(1744823238.271:121): avc: denied { ioctl } for pid=3301 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 31.377155][ T3437] ======================================================= [ 31.377155][ T3437] WARNING: The mand mount option has been deprecated and [ 31.377155][ T3437] and is ignored by this kernel. Remove the mand [ 31.377155][ T3437] option from the mount to silence this warning. [ 31.377155][ T3437] ======================================================= [ 31.436987][ T3309] veth1_macvtap: entered promiscuous mode [ 31.447329][ T3437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.455101][ T3314] veth0_vlan: entered promiscuous mode [ 31.465148][ T3437] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.467062][ T29] audit: type=1400 audit(1744823238.411:122): avc: denied { mount } for pid=3436 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.477039][ T3308] veth1_macvtap: entered promiscuous mode [ 31.511462][ T3314] veth1_vlan: entered promiscuous mode [ 31.523148][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.533721][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.547505][ T29] audit: type=1400 audit(1744823238.491:123): avc: denied { write } for pid=3436 comm="syz.0.1" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.553757][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.569031][ T29] audit: type=1400 audit(1744823238.491:124): avc: denied { add_name } for pid=3436 comm="syz.0.1" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 31.577772][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.596495][ T29] audit: type=1400 audit(1744823238.491:125): avc: denied { create } for pid=3436 comm="syz.0.1" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 31.607066][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.607079][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.607095][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.609658][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.627166][ T29] audit: type=1400 audit(1744823238.491:126): avc: denied { read write } for pid=3436 comm="syz.0.1" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 31.639324][ T3308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.697624][ T3308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.708906][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.729472][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.740131][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.750044][ T3309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 31.760602][ T3309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 31.771361][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.772143][ T3399] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 393: padding at end of block bitmap is not set [ 31.791245][ T3314] veth0_macvtap: entered promiscuous mode [ 31.803355][ T3309] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.812125][ T3309] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.821041][ T3309] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.829822][ T3309] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.831040][ T3399] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 31.849904][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.850956][ T3399] EXT4-fs (loop0): This should not happen!! Data will be lost [ 31.850956][ T3399] [ 31.859681][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.869323][ T3399] EXT4-fs (loop0): Total free blocks count 0 [ 31.877967][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.883948][ T3399] EXT4-fs (loop0): Free/Dirty block details [ 31.892736][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.898641][ T3399] EXT4-fs (loop0): free_blocks=0 [ 31.912485][ T3399] EXT4-fs (loop0): dirty_blocks=16 [ 31.917686][ T3399] EXT4-fs (loop0): Block reservation details [ 31.923768][ T3399] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 31.931916][ T3314] veth1_macvtap: entered promiscuous mode [ 31.939613][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.982345][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 31.992932][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.002924][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.013474][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.023434][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.034211][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.046741][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.080992][ T3303] veth0_vlan: entered promiscuous mode [ 32.088818][ T3303] veth1_vlan: entered promiscuous mode [ 32.108148][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.118654][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.128690][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.139169][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.149059][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.159656][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.172923][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.182163][ T3314] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.191018][ T3314] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.199753][ T3314] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.208491][ T3314] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.262824][ T3303] veth0_macvtap: entered promiscuous mode [ 32.275880][ T3303] veth1_macvtap: entered promiscuous mode [ 32.332160][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.342725][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.352640][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.363170][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.373084][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.383553][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.393406][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.403872][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.418617][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.430961][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.441531][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.451481][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.461984][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.471841][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.482422][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.492310][ T3303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.502853][ T3303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.514032][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.541262][ T3478] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=3478 comm=syz.2.12 [ 32.589783][ T3482] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.15'. [ 32.639429][ T3484] pim6reg1: entered promiscuous mode [ 32.647991][ T3303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.656784][ T3303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.665649][ T3303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.674403][ T3303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.698436][ T3488] IPv6: NLM_F_CREATE should be specified when creating new route [ 32.956111][ T3512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 32.967125][ T3512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.28'. [ 33.004876][ T3524] SELinux: Context system_u:object_r:sudo_exec_t:s0 is not valid (left unmapped). [ 33.046867][ T3528] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 33.262163][ T3549] loop0: detected capacity change from 0 to 2048 [ 33.310050][ T3549] loop0: p1 < > p4 [ 33.314814][ T3549] loop0: p4 size 8388608 extends beyond EOD, truncated [ 34.006874][ T3605] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.038674][ T3607] SELinux: security_context_str_to_sid (ûÿ) failed with errno=-22 [ 34.296456][ T3617] syz.1.74 (3617) used greatest stack depth: 10976 bytes left [ 34.359620][ T3626] wireguard0: entered promiscuous mode [ 34.365156][ T3626] wireguard0: entered allmulticast mode [ 34.469709][ T3642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.84'. [ 34.565500][ T3656] usb usb1: usbfs: process 3656 (syz.0.90) did not claim interface 63 before use [ 34.577363][ T3655] netlink: 268 bytes leftover after parsing attributes in process `syz.1.91'. [ 34.586454][ T3655] unsupported nla_type 65024 [ 34.622534][ T3605] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.678708][ T3663] loop0: detected capacity change from 0 to 8192 [ 34.688850][ T3605] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.762809][ T3605] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.781400][ T3668] netlink: 32 bytes leftover after parsing attributes in process `syz.0.96'. [ 34.845352][ T3605] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.866831][ T3605] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.892620][ T3605] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.914493][ T3605] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.945418][ T3605] syz.3.68 (3605) used greatest stack depth: 10848 bytes left [ 35.012221][ T3692] IPv6: Can't replace route, no match found [ 35.037348][ T3694] syz.1.107 uses obsolete (PF_INET,SOCK_PACKET) [ 35.059128][ T3698] netlink: 12 bytes leftover after parsing attributes in process `syz.0.109'. [ 35.083719][ T3701] loop4: detected capacity change from 0 to 256 [ 35.241745][ T3724] loop3: detected capacity change from 0 to 128 [ 35.321792][ T3734] loop3: detected capacity change from 0 to 512 [ 35.350644][ T3734] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 35.363785][ T3734] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 35.378348][ T3734] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 35.392020][ T3734] EXT4-fs (loop3): 1 truncate cleaned up [ 35.407531][ T3745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.128'. [ 35.416644][ T3734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.465705][ T3734] Invalid ELF header magic: != ELF [ 35.507191][ T3309] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.610471][ T3769] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.765755][ T3785] loop7: detected capacity change from 0 to 16384 [ 36.182150][ T3834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.170'. [ 36.274520][ T3843] SELinux: ebitmap: truncated map [ 36.279667][ T29] kauditd_printk_skb: 313 callbacks suppressed [ 36.279684][ T29] audit: type=1400 audit(1744823243.221:440): avc: denied { load_policy } for pid=3841 comm="syz.2.174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 36.286770][ T3843] SELinux: failed to load policy [ 36.331208][ T29] audit: type=1400 audit(1744823243.281:441): avc: denied { create } for pid=3846 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 36.353716][ T29] audit: type=1400 audit(1744823243.281:442): avc: denied { write } for pid=3846 comm="syz.0.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 36.397127][ T29] audit: type=1326 audit(1744823243.341:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3849 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85f3fe169 code=0x7ffc0000 [ 36.426128][ T29] audit: type=1326 audit(1744823243.371:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3849 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7fd85f3fe169 code=0x7ffc0000 [ 36.449920][ T29] audit: type=1326 audit(1744823243.371:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3849 comm="syz.4.177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd85f3fe169 code=0x7ffc0000 [ 36.508960][ T3860] loop1: detected capacity change from 0 to 2048 [ 36.516492][ T3857] xt_hashlimit: max too large, truncated to 1048576 [ 36.523304][ T3859] Cannot find set identified by id 0 to match [ 36.540699][ T3860] loop1: p1 < > p4 [ 36.551661][ T3860] loop1: p4 size 8388608 extends beyond EOD, truncated [ 36.576025][ T3852] SELinux: failed to load policy [ 36.619504][ T29] audit: type=1400 audit(1744823243.571:446): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 36.668964][ T3873] block device autoloading is deprecated and will be removed. [ 36.680729][ T3873] syz.0.189: attempt to access beyond end of device [ 36.680729][ T3873] md30: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 36.710314][ T29] audit: type=1326 audit(1744823243.651:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4c72e169 code=0x7ffc0000 [ 36.733699][ T29] audit: type=1326 audit(1744823243.651:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4c72e169 code=0x7ffc0000 [ 36.788977][ T29] audit: type=1326 audit(1744823243.661:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3874 comm="syz.1.186" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fea4c72e169 code=0x7ffc0000 [ 36.827083][ T3886] loop6: detected capacity change from 0 to 16384 [ 36.839094][ T3882] bridge0: entered promiscuous mode [ 36.886983][ T47] I/O error, dev loop6, sector 4736 op 0x1:(WRITE) flags 0x8800 phys_seg 16 prio class 0 [ 37.090894][ T3919] xt_connbytes: Forcing CT accounting to be enabled [ 37.117568][ T3919] set match dimension is over the limit! [ 37.131443][ T3926] netlink: 'syz.4.209': attribute type 7 has an invalid length. [ 37.332992][ T3948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.220'. [ 37.433481][ T3959] sd 0:0:1:0: device reset [ 37.452205][ T3963] netlink: 'syz.2.227': attribute type 1 has an invalid length. [ 37.503170][ T3967] dvmrp5: entered allmulticast mode [ 37.533804][ T3967] dvmrp5: left allmulticast mode [ 37.736807][ T3993] loop1: detected capacity change from 0 to 1024 [ 37.787403][ T3999] capability: warning: `syz.4.245' uses deprecated v2 capabilities in a way that may be insecure [ 37.805380][ T3993] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.827038][ T4004] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 37.911974][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.990569][ T4012] loop3: detected capacity change from 0 to 128 [ 38.000249][ T4013] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4013 comm=syz.1.249 [ 38.023670][ T4012] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.039565][ T4012] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.086170][ T3309] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.200052][ T4029] netlink: 164 bytes leftover after parsing attributes in process `syz.4.258'. [ 38.209585][ T4029] unsupported nlmsg_type 40 [ 38.328905][ T4035] loop1: detected capacity change from 0 to 2048 [ 38.359379][ T4035] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.407584][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.431413][ T4051] syz.1.268: attempt to access beyond end of device [ 38.431413][ T4051] loop0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 38.599097][ T4062] tmpfs: Unknown parameter 'mpo' [ 38.804627][ T4070] loop2: detected capacity change from 0 to 512 [ 38.844828][ T4070] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 38.882994][ T4070] EXT4-fs (loop2): mount failed [ 38.911332][ T3309] syz-executor (3309) used greatest stack depth: 10784 bytes left [ 38.926345][ T31] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.990192][ T4077] loop2: detected capacity change from 0 to 256 [ 39.001712][ T31] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.082321][ T31] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.160988][ T31] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.339785][ T31] bridge_slave_1: left allmulticast mode [ 39.345540][ T31] bridge_slave_1: left promiscuous mode [ 39.351336][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.407307][ T31] bridge_slave_0: left allmulticast mode [ 39.413200][ T31] bridge_slave_0: left promiscuous mode [ 39.418914][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.659039][ T4089] syz.1.283 (4089) used greatest stack depth: 10496 bytes left [ 39.852278][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.905680][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.917158][ T31] bond0 (unregistering): Released all slaves [ 39.967586][ T4122] pim6reg: entered allmulticast mode [ 39.978774][ T4120] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 39.987050][ T4120] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 39.988168][ T4122] pim6reg: left allmulticast mode [ 40.020889][ T31] hsr_slave_0: left promiscuous mode [ 40.026670][ T31] hsr_slave_1: left promiscuous mode [ 40.044224][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.051875][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.083333][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.090859][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.103865][ T31] veth1_macvtap: left promiscuous mode [ 40.109539][ T31] veth0_macvtap: left promiscuous mode [ 40.115126][ T31] veth1_vlan: left promiscuous mode [ 40.123232][ T31] veth0_vlan: left promiscuous mode [ 40.227746][ T31] team0 (unregistering): Port device team_slave_1 removed [ 40.244611][ T31] team0 (unregistering): Port device team_slave_0 removed [ 40.302847][ T4140] vlan2: entered allmulticast mode [ 40.371166][ T4143] netlink: 96 bytes leftover after parsing attributes in process `syz.1.293'. [ 40.482654][ T4081] chnl_net:caif_netlink_parms(): no params data found [ 40.605499][ T4081] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.612715][ T4081] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.620067][ T4081] bridge_slave_0: entered allmulticast mode [ 40.626512][ T4081] bridge_slave_0: entered promiscuous mode [ 40.639076][ T4081] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.646213][ T4081] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.654786][ T4081] bridge_slave_1: entered allmulticast mode [ 40.661930][ T4081] bridge_slave_1: entered promiscuous mode [ 40.688123][ T4081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.701169][ T4081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.730052][ T4081] team0: Port device team_slave_0 added [ 40.736777][ T4081] team0: Port device team_slave_1 added [ 40.770234][ T4081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.777289][ T4081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.803276][ T4081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.824695][ T4081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.831870][ T4081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.857833][ T4081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.906501][ T4081] hsr_slave_0: entered promiscuous mode [ 40.915056][ T4081] hsr_slave_1: entered promiscuous mode [ 40.921098][ T4081] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.929576][ T4081] Cannot create hsr debugfs directory [ 41.077784][ T4212] loop0: detected capacity change from 0 to 2048 [ 41.083272][ T4081] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.103797][ T4081] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.113539][ T4081] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.123863][ T4081] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.162027][ T4081] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.169162][ T4081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.176549][ T4081] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.183630][ T4081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.234496][ T4081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.255813][ T4081] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.284618][ T3399] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.318895][ T3399] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.339170][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.346283][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.372327][ T4232] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4232 comm=syz.2.312 [ 41.384848][ T4232] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4232 comm=syz.2.312 [ 41.400277][ T381] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.407374][ T381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.467300][ T29] kauditd_printk_skb: 157 callbacks suppressed [ 41.467318][ T29] audit: type=1326 audit(1744823248.411:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68cdc3e169 code=0x7ffc0000 [ 41.482509][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.313'. [ 41.546594][ T4081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.562711][ T29] audit: type=1326 audit(1744823248.461:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68cdc3e169 code=0x7ffc0000 [ 41.574992][ T4235] IPVS: Error joining to the multicast group [ 41.586262][ T29] audit: type=1326 audit(1744823248.461:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68cdc3e169 code=0x7ffc0000 [ 41.615404][ T29] audit: type=1326 audit(1744823248.461:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68cdc3e169 code=0x7ffc0000 [ 41.638742][ T29] audit: type=1326 audit(1744823248.461:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68cdc3e169 code=0x7ffc0000 [ 41.662029][ T29] audit: type=1326 audit(1744823248.461:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68cdc3e169 code=0x7ffc0000 [ 41.685388][ T29] audit: type=1326 audit(1744823248.461:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68cdc3e169 code=0x7ffc0000 [ 41.708655][ T29] audit: type=1326 audit(1744823248.461:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68cdc3e169 code=0x7ffc0000 [ 41.732150][ T29] audit: type=1326 audit(1744823248.461:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f68cdc3e169 code=0x7ffc0000 [ 41.755546][ T29] audit: type=1326 audit(1744823248.461:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4237 comm="syz.2.314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f68cdc3e169 code=0x7ffc0000 [ 42.007177][ T4081] veth0_vlan: entered promiscuous mode [ 42.026628][ T4287] netlink: 'syz.0.323': attribute type 15 has an invalid length. [ 42.059028][ T4081] veth1_vlan: entered promiscuous mode [ 42.100513][ T4081] veth0_macvtap: entered promiscuous mode [ 42.127212][ T4295] netlink: 96 bytes leftover after parsing attributes in process `syz.0.327'. [ 42.137849][ T4081] veth1_macvtap: entered promiscuous mode [ 42.152303][ T4297] netlink: 100 bytes leftover after parsing attributes in process `syz.2.328'. [ 42.161880][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.172556][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.182400][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.192889][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.202798][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.213270][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.223104][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 42.233644][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.269952][ T4081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.289652][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.300247][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.310102][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.320572][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.330584][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.341117][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.348185][ T4293] loop1: detected capacity change from 0 to 8192 [ 42.350981][ T4081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 42.350998][ T4081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 42.382265][ T4081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.452098][ T4081] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.461069][ T4081] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.469853][ T4081] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.478576][ T4081] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.518784][ T4331] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4331 comm=syz.2.338 [ 42.599089][ T4333] SELinux: failed to load policy [ 42.695833][ T4354] vhci_hcd: default hub control req: 0007 v0003 i0005 l0 [ 42.704382][ T4349] bridge0: port 3(team0) entered blocking state [ 42.710899][ T4349] bridge0: port 3(team0) entered disabled state [ 42.736865][ T4329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.738949][ T4349] team0: entered allmulticast mode [ 42.750545][ T4349] team_slave_0: entered allmulticast mode [ 42.756329][ T4349] team_slave_1: entered allmulticast mode [ 42.765004][ T4329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.785874][ T4349] team0: entered promiscuous mode [ 42.791012][ T4349] team_slave_0: entered promiscuous mode [ 42.796749][ T4349] team_slave_1: entered promiscuous mode [ 42.805788][ T4349] bridge0: port 3(team0) entered blocking state [ 42.812234][ T4349] bridge0: port 3(team0) entered forwarding state [ 42.822224][ T4362] ip6gretap1: entered allmulticast mode [ 42.845574][ T4372] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 42.847685][ T4371] IPVS: stopping master sync thread 4372 ... [ 42.965784][ T4386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 42.974788][ T4386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.355'. [ 43.013746][ T4386] wireguard0: entered promiscuous mode [ 43.014688][ T4392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.019295][ T4386] wireguard0: entered allmulticast mode [ 43.042539][ T4392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.094559][ T4399] pim6reg: entered allmulticast mode [ 43.103721][ T4399] pim6reg: left allmulticast mode [ 43.227059][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 43.241380][ T4414] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.250305][ T4414] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.259024][ T4414] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.267807][ T4414] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.276724][ T4414] vxlan0: entered promiscuous mode [ 43.282068][ T4414] vxlan0: entered allmulticast mode [ 43.453098][ T4432] netlink: 'syz.2.375': attribute type 3 has an invalid length. [ 43.507981][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 43.527998][ T4437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.377'. [ 43.745110][ T4460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 43.754165][ T4460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 43.841555][ T4470] serio: Serial port ptm1 [ 44.076758][ T4498] loop2: detected capacity change from 0 to 512 [ 44.124527][ T4502] sg_write: data in/out 209152/1 bytes for SCSI command 0xf2-- guessing data in; [ 44.124527][ T4502] program syz.0.406 not setting count and/or reply_len properly [ 44.157369][ T4498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.207829][ T4498] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.242245][ T4518] loop0: detected capacity change from 0 to 512 [ 44.249034][ T4518] EXT4-fs: Ignoring removed orlov option [ 44.272424][ T4518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.285545][ T4518] ext4 filesystem being mounted at /91/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.298309][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.326634][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.372095][ T4528] loop5: detected capacity change from 0 to 512 [ 44.409940][ T4528] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.430473][ T4528] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.525103][ T4545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 44.543286][ T4545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 44.585468][ T4551] loop2: detected capacity change from 0 to 512 [ 44.600560][ T4551] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 44.617899][ T4551] EXT4-fs (loop2): 1 truncate cleaned up [ 44.630474][ T4081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.639717][ T4551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.675362][ T4551] EXT4-fs error (device loop2): ext4_generic_delete_entry:2670: inode #2: block 13: comm syz.2.423: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 44.699527][ T4551] EXT4-fs (loop2): Remounting filesystem read-only [ 44.706085][ T4551] EXT4-fs warning (device loop2): ext4_rename_delete:3728: inode #2: comm syz.2.423: Deleting old file: nlink 5, error=-117 [ 44.728065][ T4558] loop5: detected capacity change from 0 to 2048 [ 44.734856][ T4558] EXT4-fs: Ignoring removed bh option [ 44.758576][ T4560] loop0: detected capacity change from 0 to 512 [ 44.766047][ T3314] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.798639][ T4558] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.799010][ T4560] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.838292][ T4560] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.966089][ T4081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.003053][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.419042][ T4598] loop4: detected capacity change from 0 to 512 [ 45.448573][ T4598] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.468345][ T4598] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.530300][ T4611] loop5: detected capacity change from 0 to 1024 [ 45.552634][ T4611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.576029][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.603971][ T4081] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.719975][ T4639] loop5: detected capacity change from 0 to 256 [ 46.147165][ T4639] ================================================================== [ 46.155293][ T4639] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 46.163208][ T4639] [ 46.165553][ T4639] write to 0xffff888105bc1628 of 4 bytes by task 4645 on cpu 0: [ 46.173195][ T4639] __mark_inode_dirty+0x24e/0x7e0 [ 46.178250][ T4639] mark_buffer_dirty+0x149/0x230 [ 46.183242][ T4639] block_write_end+0x123/0x210 [ 46.188035][ T4639] generic_write_end+0x5c/0x160 [ 46.192930][ T4639] fat_write_end+0x4e/0x160 [ 46.197467][ T4639] generic_perform_write+0x31e/0x4b0 [ 46.202776][ T4639] __generic_file_write_iter+0xa1/0x120 [ 46.208340][ T4639] generic_file_write_iter+0x92/0x310 [ 46.213727][ T4639] iter_file_splice_write+0x5f2/0x980 [ 46.219133][ T4639] direct_splice_actor+0x160/0x2c0 [ 46.224275][ T4639] splice_direct_to_actor+0x305/0x680 [ 46.229675][ T4639] do_splice_direct+0xd9/0x150 [ 46.234464][ T4639] do_sendfile+0x40a/0x690 [ 46.238913][ T4639] __x64_sys_sendfile64+0x113/0x160 [ 46.244122][ T4639] x64_sys_call+0xfc3/0x2e10 [ 46.248737][ T4639] do_syscall_64+0xc9/0x1c0 [ 46.253280][ T4639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.259221][ T4639] [ 46.261557][ T4639] read to 0xffff888105bc1628 of 4 bytes by task 4639 on cpu 1: [ 46.269125][ T4639] __mark_inode_dirty+0x58/0x7e0 [ 46.274074][ T4639] fat_update_time+0x1e8/0x200 [ 46.278878][ T4639] touch_atime+0x14f/0x350 [ 46.283301][ T4639] filemap_splice_read+0x8cb/0x930 [ 46.288430][ T4639] splice_direct_to_actor+0x26c/0x680 [ 46.293822][ T4639] do_splice_direct+0xd9/0x150 [ 46.298605][ T4639] do_sendfile+0x40a/0x690 [ 46.303030][ T4639] __x64_sys_sendfile64+0x113/0x160 [ 46.308234][ T4639] x64_sys_call+0xfc3/0x2e10 [ 46.312837][ T4639] do_syscall_64+0xc9/0x1c0 [ 46.317356][ T4639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.323257][ T4639] [ 46.325580][ T4639] value changed: 0x00000008 -> 0x00000038 [ 46.331309][ T4639] [ 46.333680][ T4639] Reported by Kernel Concurrency Sanitizer on: [ 46.339844][ T4639] CPU: 1 UID: 0 PID: 4639 Comm: syz.5.454 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 46.352178][ T4639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.362324][ T4639] ================================================================== [ 46.417193][ T4639] ================================================================== [ 46.425392][ T4639] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 46.433307][ T4639] [ 46.435626][ T4639] write to 0xffff888105bc1714 of 4 bytes by task 4645 on cpu 1: [ 46.443252][ T4639] xas_set_mark+0x13d/0x150 [ 46.447766][ T4639] tag_pages_for_writeback+0xa7/0x2a0 [ 46.453245][ T4639] writeback_iter+0x351/0x830 [ 46.457924][ T4639] write_cache_pages+0x4d/0x100 [ 46.462786][ T4639] mpage_writepages+0x77/0xf0 [ 46.467467][ T4639] fat_writepages+0x24/0x30 [ 46.471984][ T4639] do_writepages+0x1d8/0x480 [ 46.476578][ T4639] file_write_and_wait_range+0x16e/0x2f0 [ 46.482218][ T4639] __generic_file_fsync+0x46/0x140 [ 46.487339][ T4639] fat_file_fsync+0x46/0x100 [ 46.491935][ T4639] vfs_fsync_range+0x116/0x130 [ 46.496706][ T4639] generic_file_write_iter+0x1cc/0x310 [ 46.502164][ T4639] iter_file_splice_write+0x5f2/0x980 [ 46.507543][ T4639] direct_splice_actor+0x160/0x2c0 [ 46.512669][ T4639] splice_direct_to_actor+0x305/0x680 [ 46.518053][ T4639] do_splice_direct+0xd9/0x150 [ 46.522829][ T4639] do_sendfile+0x40a/0x690 [ 46.527254][ T4639] __x64_sys_sendfile64+0x113/0x160 [ 46.532455][ T4639] x64_sys_call+0xfc3/0x2e10 [ 46.537053][ T4639] do_syscall_64+0xc9/0x1c0 [ 46.541569][ T4639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.547463][ T4639] [ 46.549867][ T4639] read to 0xffff888105bc1714 of 4 bytes by task 4639 on cpu 0: [ 46.557404][ T4639] __writeback_single_inode+0x210/0x850 [ 46.562956][ T4639] writeback_single_inode+0x16c/0x3f0 [ 46.568326][ T4639] sync_inode_metadata+0x60/0x90 [ 46.573264][ T4639] __generic_file_fsync+0xed/0x140 [ 46.578381][ T4639] fat_file_fsync+0x46/0x100 [ 46.582991][ T4639] vfs_fsync_range+0x116/0x130 [ 46.587876][ T4639] generic_file_write_iter+0x1cc/0x310 [ 46.593341][ T4639] iter_file_splice_write+0x5f2/0x980 [ 46.598721][ T4639] direct_splice_actor+0x160/0x2c0 [ 46.603855][ T4639] splice_direct_to_actor+0x305/0x680 [ 46.609242][ T4639] do_splice_direct+0xd9/0x150 [ 46.614027][ T4639] do_sendfile+0x40a/0x690 [ 46.618441][ T4639] __x64_sys_sendfile64+0x113/0x160 [ 46.623634][ T4639] x64_sys_call+0xfc3/0x2e10 [ 46.628221][ T4639] do_syscall_64+0xc9/0x1c0 [ 46.632746][ T4639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.638656][ T4639] [ 46.640973][ T4639] value changed: 0x02000021 -> 0x04000021 [ 46.646712][ T4639] [ 46.649029][ T4639] Reported by Kernel Concurrency Sanitizer on: [ 46.655171][ T4639] CPU: 0 UID: 0 PID: 4639 Comm: syz.5.454 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 46.667591][ T4639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 46.677654][ T4639] ================================================================== [ 46.774325][ T4645] syz.5.454 (4645) used greatest stack depth: 10440 bytes left