last executing test programs: 2.740513587s ago: executing program 2 (id=3): r0 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @loopback}, 0x10) listen(r1, 0x3) 2.646317594s ago: executing program 2 (id=6): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000020"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x1}, 0x18) r3 = openat$cgroup_ro(r0, &(0x7f0000000380)='memory.stat\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendfile(r4, r3, 0x0, 0x17) 2.400868282s ago: executing program 2 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) shutdown(r2, 0x1) 2.228739255s ago: executing program 2 (id=8): socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="000000000087fb00b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x24}]) 1.905806309s ago: executing program 2 (id=10): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) semget$private(0x0, 0x2, 0x450) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 1.62711507s ago: executing program 0 (id=14): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='kfree\x00', r1}, 0x18) fsmount(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0, 0x0, 0x3fffffffffffffd}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d300000000000000800014000000005"], 0xd4}}, 0x0) 1.551383825s ago: executing program 0 (id=17): r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) creat(&(0x7f0000000080)='./bus\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000700)='sched_switch\x00', r2, 0x0, 0x1}, 0x18) write$selinux_user(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='system_u:object_r:auth_cache_t root'], 0x27) 1.48146438s ago: executing program 3 (id=20): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.444405563s ago: executing program 0 (id=23): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c000280060019"], 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="fd00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 1.269109826s ago: executing program 3 (id=25): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x891e, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000284850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.138000576s ago: executing program 4 (id=28): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x478, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r2, 0x7ffffb, 0x0) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0xfd14) fallocate(r1, 0x100000003, 0x800002, 0x28120001) fallocate(r0, 0x3, 0x529f, 0x8000c62) 891.087074ms ago: executing program 4 (id=32): bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x541b, 0x20004000) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8923, &(0x7f0000000680)='lo:\x96o8\x14d\xa1\xe3\xd7\\b}\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x89\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xebw#\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xbaUn\x04\'%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02P\xc3!N\xa1\x86\r\xd7\x04\xf1\xc0!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x94\x1dx\xd6\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x1c, r4, 0x1, 0xff, 0x6, @random="cb09283bafcd"}, 0x14) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x5, r4, 0x1, 0x4, 0x6, @local}, 0x14) 383.562662ms ago: executing program 1 (id=40): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000c000000040000004f0c000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23, r2}, 0x38) 318.717246ms ago: executing program 0 (id=41): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r3], 0x38}}, 0x0) 318.103326ms ago: executing program 2 (id=42): pipe(&(0x7f0000000180)) r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000000)=@id, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x2b, 0x80801, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x1, 0x0, 0x3, 0x0, 0x150, 0xfffffffffffffffc, 0x10000000, 0x8001}, 0x0, &(0x7f0000000300)={0x3fe, 0x0, 0x5, 0x20000000000, 0xfffffffffffffffe, 0xe, 0x7fffffff, 0x4}, 0x0, 0x0) 284.816889ms ago: executing program 1 (id=43): syz_mount_image$iso9660(&(0x7f0000000bc0), &(0x7f0000000c00)='./file0\x00', 0x4000, &(0x7f0000000240)=ANY=[@ANYBLOB="ea4426d238ecc21ced6a00"], 0x1, 0xb9e, &(0x7f0000000c80)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0xb9ff}) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xa) 274.27528ms ago: executing program 4 (id=44): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e0000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) socket$unix(0x1, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) 235.080703ms ago: executing program 0 (id=45): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = eventfd2(0x0, 0x0) readv(r3, &(0x7f0000000500)=[{&(0x7f0000000000)=""/92, 0x5c}], 0x1) 212.184054ms ago: executing program 3 (id=46): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x2d, 0x0) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000003d80)=0x2, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 186.751016ms ago: executing program 3 (id=47): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x880000000}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, "0162ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xf}) syz_open_pts(r1, 0x0) 131.9796ms ago: executing program 3 (id=48): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000000180)={r2, 0x0, 0xc}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r1}) 110.383412ms ago: executing program 4 (id=49): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000200)='./bus\x00', 0x1000000, &(0x7f00000005c0)=ANY=[], 0x1, 0x126f, &(0x7f0000001600)="$eJzs3U1rY1UcB+B/2vQtY5uq4+gMiAfdKEKcduHKTZEZEAtKtQMqCHdsqqFpU5pQiIhTV64EP4aoS3eC+AW6ceNaEES6cTkL8UqbjDNp0o522lSG59ncwznnd8+5veXCDedw9175cn1ttVlZzVoxUihEcXMsirdTpBiJ0ejYiRdu/PzL02+98+7rC4uL15ZSur7w9tzLKaWZZ35475Nvn/2xdeHGdzPfT8Tu7Pt7f8z/untp9/LeX99ErZlqzbTRaKUs3Ww0WtnNejWt1JprlZTerFezZjVNdse4275ab2xutlO2sTJd2tyqNpsp22intWo7tQqptdVO2YdZbSNVKpU0XQoexPLXt/M8j8jzsRiPPM/zqSjFhXgkpmMmyjEbj8Zj8XhcjCfiUjwZT8Xlg17nPW8AAAAAAAAAAAAAAAAAAAB4uNxn/3+hf///xHlPGQAAAAAAAAAAAAAAAAAAAB46h/f/FyN8/x8AAAAAAAAAAAAAAAAAAACG7D7f/z+0//9F+/8BAAAAAAAAAAAAAAAAAADgLEx2DkspTUasf769vL3cOXbqF1ajFvWoxtUox59xsPu/o1O+/tritavpwGy8tH6rm7+1vTzam58bK8dsYWB+rpNPvfmJKN2bn49yXBw8/vzA/GQ8/9x+/rNOvhLl+OmDaEQ9ViIK3as/yH86l9KrbyxO9eav7Pc70ugZ3xYAAAA4TZX0j/73951up4Htnabu+3nq9iwc8/vAoffzYlwpntdVc0ez/fFaVq9Xt05YGD/6POO9NVPdniceqxARWU98pvTb0v4pTzr5UyuMDnXQseP7PMA9jeL/4I95CoXfv7qnZjKGO/pI9x89q+8/P/9dKnby/EwnNj6oaeK41NHPjMIZP5MYnrs3/bxnAgAAAAAAAAAAwH8xcPXfVET0rQf8qK/mzvLw3nj/mY8e/YshXCEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//+E38bU") creat(&(0x7f0000000000)='./bus\x00', 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 0s ago: executing program 3 (id=50): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000380)={r1, r2+60000000}) socket$packet(0x11, 0x2, 0x300) kernel console output (not intermixed with test programs): [ 21.680355][ T29] audit: type=1400 audit(1739403285.508:81): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.126' (ED25519) to the list of known hosts. [ 28.468622][ T29] audit: type=1400 audit(1739403292.298:82): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.469653][ T3286] cgroup: Unknown subsys name 'net' [ 28.491460][ T29] audit: type=1400 audit(1739403292.298:83): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.518850][ T29] audit: type=1400 audit(1739403292.328:84): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.692837][ T3286] cgroup: Unknown subsys name 'cpuset' [ 28.699011][ T3286] cgroup: Unknown subsys name 'rlimit' [ 28.839922][ T29] audit: type=1400 audit(1739403292.668:85): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.864873][ T29] audit: type=1400 audit(1739403292.668:86): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.885428][ T29] audit: type=1400 audit(1739403292.668:87): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.905952][ T29] audit: type=1400 audit(1739403292.668:88): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.926328][ T29] audit: type=1400 audit(1739403292.668:89): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.951133][ T29] audit: type=1400 audit(1739403292.668:90): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.957370][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 28.983280][ T29] audit: type=1400 audit(1739403292.818:91): avc: denied { relabelto } for pid=3288 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.016092][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.067244][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 30.109006][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 30.159189][ T3295] chnl_net:caif_netlink_parms(): no params data found [ 30.206997][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.214208][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.221586][ T3296] bridge_slave_0: entered allmulticast mode [ 30.228587][ T3296] bridge_slave_0: entered promiscuous mode [ 30.263211][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.270330][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.277602][ T3296] bridge_slave_1: entered allmulticast mode [ 30.283908][ T3296] bridge_slave_1: entered promiscuous mode [ 30.290138][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 30.301052][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 30.309816][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.317340][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.324600][ T3297] bridge_slave_0: entered allmulticast mode [ 30.330940][ T3297] bridge_slave_0: entered promiscuous mode [ 30.352331][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.360141][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.367347][ T3297] bridge_slave_1: entered allmulticast mode [ 30.374408][ T3297] bridge_slave_1: entered promiscuous mode [ 30.409665][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.418838][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.426101][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.433531][ T3295] bridge_slave_0: entered allmulticast mode [ 30.440116][ T3295] bridge_slave_0: entered promiscuous mode [ 30.459341][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.469827][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.479536][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.487078][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.494473][ T3295] bridge_slave_1: entered allmulticast mode [ 30.500946][ T3295] bridge_slave_1: entered promiscuous mode [ 30.512865][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.566144][ T3296] team0: Port device team_slave_0 added [ 30.573200][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.590143][ T3297] team0: Port device team_slave_0 added [ 30.596762][ T3297] team0: Port device team_slave_1 added [ 30.603243][ T3296] team0: Port device team_slave_1 added [ 30.614905][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.648364][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.655945][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.682108][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.701980][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.709127][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.716399][ T3301] bridge_slave_0: entered allmulticast mode [ 30.722791][ T3301] bridge_slave_0: entered promiscuous mode [ 30.729329][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.736390][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.762338][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.773571][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.780553][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.806630][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.817689][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.824923][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.850871][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.866489][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.873650][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.880890][ T3302] bridge_slave_0: entered allmulticast mode [ 30.887502][ T3302] bridge_slave_0: entered promiscuous mode [ 30.894082][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.901309][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.908540][ T3301] bridge_slave_1: entered allmulticast mode [ 30.914932][ T3301] bridge_slave_1: entered promiscuous mode [ 30.928157][ T3295] team0: Port device team_slave_0 added [ 30.934580][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.941746][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.949489][ T3302] bridge_slave_1: entered allmulticast mode [ 30.956074][ T3302] bridge_slave_1: entered promiscuous mode [ 30.979287][ T3295] team0: Port device team_slave_1 added [ 31.001075][ T3296] hsr_slave_0: entered promiscuous mode [ 31.007279][ T3296] hsr_slave_1: entered promiscuous mode [ 31.019024][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.029242][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.039392][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.061027][ T3297] hsr_slave_0: entered promiscuous mode [ 31.067129][ T3297] hsr_slave_1: entered promiscuous mode [ 31.073230][ T3297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.080798][ T3297] Cannot create hsr debugfs directory [ 31.096106][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.121029][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.128152][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.154628][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.170832][ T3302] team0: Port device team_slave_0 added [ 31.187225][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.194387][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.220453][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.236664][ T3302] team0: Port device team_slave_1 added [ 31.257008][ T3301] team0: Port device team_slave_0 added [ 31.263508][ T3301] team0: Port device team_slave_1 added [ 31.282894][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.289868][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.316074][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.350225][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.357226][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.383300][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.395005][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.403128][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.429507][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.449054][ T3295] hsr_slave_0: entered promiscuous mode [ 31.455071][ T3295] hsr_slave_1: entered promiscuous mode [ 31.460986][ T3295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.468629][ T3295] Cannot create hsr debugfs directory [ 31.477110][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.484175][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 31.510160][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.589932][ T3302] hsr_slave_0: entered promiscuous mode [ 31.596037][ T3302] hsr_slave_1: entered promiscuous mode [ 31.601815][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.609474][ T3302] Cannot create hsr debugfs directory [ 31.633278][ T3301] hsr_slave_0: entered promiscuous mode [ 31.639391][ T3301] hsr_slave_1: entered promiscuous mode [ 31.645428][ T3301] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 31.653032][ T3301] Cannot create hsr debugfs directory [ 31.713966][ T3297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.723101][ T3297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.740562][ T3297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.758363][ T3297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.798618][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.812538][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.824551][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.833472][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.857280][ T3295] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.872991][ T3295] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.889454][ T3295] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.898462][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.907780][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.918308][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.927485][ T3295] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.940035][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.976976][ T3301] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.986866][ T3301] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.996069][ T3301] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.012564][ T3301] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.058184][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.079419][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.093067][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.113143][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.120287][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.129267][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.136437][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.167425][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.182578][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.194291][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.204079][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.214742][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.221844][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.239303][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.246574][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.257570][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.264708][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.273685][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.280733][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.318809][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.334815][ T3295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.358039][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.365362][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.374574][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.381757][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.415542][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.426047][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.449872][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.465876][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.481959][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.502712][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.525291][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.544271][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.551385][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.563511][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.570664][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.598774][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.609344][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.637304][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.679014][ T3297] veth0_vlan: entered promiscuous mode [ 32.718639][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.727629][ T3297] veth1_vlan: entered promiscuous mode [ 32.767349][ T3297] veth0_macvtap: entered promiscuous mode [ 32.790072][ T3297] veth1_macvtap: entered promiscuous mode [ 32.805772][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.817928][ T3302] veth0_vlan: entered promiscuous mode [ 32.827633][ T3302] veth1_vlan: entered promiscuous mode [ 32.846102][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.860322][ T3295] veth0_vlan: entered promiscuous mode [ 32.883474][ T3296] veth0_vlan: entered promiscuous mode [ 32.890279][ T3302] veth0_macvtap: entered promiscuous mode [ 32.903610][ T3297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.912439][ T3297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.921256][ T3297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.930333][ T3297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.944896][ T3301] veth0_vlan: entered promiscuous mode [ 32.950728][ T3295] veth1_vlan: entered promiscuous mode [ 32.957557][ T3302] veth1_macvtap: entered promiscuous mode [ 32.966050][ T3296] veth1_vlan: entered promiscuous mode [ 32.974374][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.984936][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.995822][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.010977][ T3301] veth1_vlan: entered promiscuous mode [ 33.028892][ T3296] veth0_macvtap: entered promiscuous mode [ 33.038490][ T3302] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.049079][ T3302] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.060613][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.064210][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.073294][ T3295] veth0_macvtap: entered promiscuous mode [ 33.099112][ T3301] veth0_macvtap: entered promiscuous mode [ 33.106243][ T3296] veth1_macvtap: entered promiscuous mode [ 33.113105][ T3295] veth1_macvtap: entered promiscuous mode [ 33.121215][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.130245][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.139099][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.148142][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.164090][ T3301] veth1_macvtap: entered promiscuous mode [ 33.175804][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.186502][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.196492][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.207055][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.218931][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.233405][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.244067][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.254020][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.264547][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.274505][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.285061][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.296666][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.304599][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.315169][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.325061][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.335516][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.346406][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.359967][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.370616][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.380888][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.391475][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.401877][ T3295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.412867][ T3295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.424039][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.431750][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.442414][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.452432][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.463366][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.473268][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.483797][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.493927][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.505470][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.515987][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 33.516003][ T29] audit: type=1400 audit(1739403297.348:135): avc: denied { write } for pid=3442 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.517049][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.530682][ T29] audit: type=1400 audit(1739403297.358:136): avc: denied { connect } for pid=3442 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.568260][ T29] audit: type=1400 audit(1739403297.358:137): avc: denied { name_connect } for pid=3442 comm="syz.2.7" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 33.588772][ T29] audit: type=1400 audit(1739403297.378:138): avc: denied { shutdown } for pid=3442 comm="syz.2.7" laddr=fe80::f lport=55781 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 33.595623][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.619836][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.629580][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.638799][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.658398][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.670442][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.680194][ T29] audit: type=1400 audit(1739403297.508:139): avc: denied { read write } for pid=3444 comm="syz.2.8" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.680562][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.703719][ T29] audit: type=1400 audit(1739403297.508:140): avc: denied { open } for pid=3444 comm="syz.2.8" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.714205][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.714221][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.757549][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.767566][ T3301] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.778042][ T3301] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.789641][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.798436][ T3301] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.807342][ T3301] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.816833][ T3301] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.826806][ T3301] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.839109][ T3295] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.848715][ T3295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.857645][ T3295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.866617][ T3295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.983924][ T29] audit: type=1400 audit(1739403297.818:141): avc: denied { create } for pid=3455 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.010029][ T3456] mmap: syz.3.9 (3456) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 34.023071][ T29] audit: type=1400 audit(1739403297.848:142): avc: denied { setopt } for pid=3455 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.042675][ T29] audit: type=1400 audit(1739403297.848:143): avc: denied { write } for pid=3455 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.066045][ T29] audit: type=1400 audit(1739403297.898:144): avc: denied { read } for pid=3455 comm="syz.4.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 34.081403][ T3459] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1'. [ 34.194915][ T3469] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 34.342846][ T3480] SELinux: syz.0.17 (3480) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 34.434786][ T3489] ======================================================= [ 34.434786][ T3489] WARNING: The mand mount option has been deprecated and [ 34.434786][ T3489] and is ignored by this kernel. Remove the mand [ 34.434786][ T3489] option from the mount to silence this warning. [ 34.434786][ T3489] ======================================================= [ 34.497449][ T3493] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 34.506424][ T3493] netlink: 'syz.0.23': attribute type 25 has an invalid length. [ 34.541177][ T3493] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.543983][ T3375] kernel write not supported for file /12/attr/exec (pid: 3375 comm: kworker/0:5) [ 34.550084][ T3493] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.568114][ T3493] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.576901][ T3493] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 34.759356][ T3506] loop4: detected capacity change from 0 to 512 [ 34.791751][ T3506] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 34.834800][ T3506] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 34.855254][ T3506] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.28: corrupted in-inode xattr: e_value size too large [ 34.890324][ T3506] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.28: couldn't read orphan inode 15 (err -117) [ 34.908328][ T3506] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.968410][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.058423][ T3517] Y4`Ҙ: renamed from lo (while UP) [ 35.228868][ T3525] loop4: detected capacity change from 0 to 1024 [ 35.298114][ T3493] syz.0.23 (3493) used greatest stack depth: 10568 bytes left [ 35.315591][ T3525] EXT4-fs: Ignoring removed orlov option [ 35.333287][ T3525] EXT4-fs: Ignoring removed oldalloc option [ 35.339273][ T3525] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.363081][ T3529] loop0: detected capacity change from 0 to 512 [ 35.386738][ T3525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.415480][ T3529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.492216][ T3529] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.543982][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.584344][ T3295] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.601590][ T3541] loop1: detected capacity change from 0 to 1164 [ 35.620800][ T3541] iso9660: Unknown parameter 'D&8j' [ 35.679489][ T3546] wg2: entered promiscuous mode [ 35.684467][ T3546] wg2: entered allmulticast mode [ 35.780177][ T3558] loop4: detected capacity change from 0 to 8192 [ 36.214392][ T3558] ================================================================== [ 36.222627][ T3558] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 36.230674][ T3558] [ 36.233015][ T3558] write to 0xffff88810983ca28 of 4 bytes by task 3560 on cpu 1: [ 36.240675][ T3558] __mark_inode_dirty+0x24e/0x7e0 [ 36.245779][ T3558] mark_buffer_dirty+0x149/0x230 [ 36.250764][ T3558] block_write_end+0x123/0x210 [ 36.255617][ T3558] generic_write_end+0x5c/0x160 [ 36.260591][ T3558] fat_write_end+0x4e/0x160 [ 36.265126][ T3558] generic_perform_write+0x33c/0x4a0 [ 36.270462][ T3558] __generic_file_write_iter+0xa1/0x120 [ 36.276039][ T3558] generic_file_write_iter+0x8f/0x310 [ 36.281444][ T3558] iter_file_splice_write+0x5f1/0x980 [ 36.286849][ T3558] direct_splice_actor+0x160/0x2c0 [ 36.292073][ T3558] splice_direct_to_actor+0x302/0x670 [ 36.297470][ T3558] do_splice_direct+0xd7/0x150 [ 36.302345][ T3558] do_sendfile+0x398/0x660 [ 36.306814][ T3558] __x64_sys_sendfile64+0x110/0x150 [ 36.312063][ T3558] x64_sys_call+0xfbd/0x2dc0 [ 36.316745][ T3558] do_syscall_64+0xc9/0x1c0 [ 36.321292][ T3558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.327232][ T3558] [ 36.329596][ T3558] read to 0xffff88810983ca28 of 4 bytes by task 3558 on cpu 0: [ 36.337265][ T3558] __mark_inode_dirty+0x198/0x7e0 [ 36.342612][ T3558] fat_update_time+0x1e8/0x200 [ 36.348042][ T3558] touch_atime+0x14f/0x350 [ 36.352533][ T3558] filemap_splice_read+0x8a5/0x910 [ 36.357688][ T3558] splice_direct_to_actor+0x269/0x670 [ 36.363110][ T3558] do_splice_direct+0xd7/0x150 [ 36.368439][ T3558] do_sendfile+0x398/0x660 [ 36.373893][ T3558] __x64_sys_sendfile64+0x110/0x150 [ 36.379131][ T3558] x64_sys_call+0xfbd/0x2dc0 [ 36.383844][ T3558] do_syscall_64+0xc9/0x1c0 [ 36.388486][ T3558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 36.394859][ T3558] [ 36.397306][ T3558] value changed: 0x00000008 -> 0x00000038 [ 36.403138][ T3558] [ 36.405493][ T3558] Reported by Kernel Concurrency Sanitizer on: [ 36.411690][ T3558] CPU: 0 UID: 0 PID: 3558 Comm: syz.4.49 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 36.422853][ T3558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 36.434345][ T3558] ================================================================== [ 36.655529][ T3560] syz.4.49 (3560) used greatest stack depth: 10424 bytes left