last executing test programs: 1.264481494s ago: executing program 0 (id=265): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000480)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@data_err_ignore}]}, 0x3, 0x4c4, &(0x7f0000000780)="$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") 964.371305ms ago: executing program 3 (id=278): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/timers\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) 957.769095ms ago: executing program 0 (id=279): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x18) setuid(0x0) 893.436706ms ago: executing program 0 (id=282): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x10}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x6, 0x3ff}]}, 0x10) syz_emit_ethernet(0x10da, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a8470081004f0008004f0910c4006800000002"], 0x0) 825.945406ms ago: executing program 3 (id=283): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x40) prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) 823.119526ms ago: executing program 0 (id=284): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d90000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) open(&(0x7f00000001c0)='./file0\x00', 0x2a4c0, 0x918d8ecf0d5d0600) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfd', @ANYRESHEX]) 816.310956ms ago: executing program 3 (id=285): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1a) 789.211536ms ago: executing program 3 (id=286): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=@bridge_delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x1, 0x20}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000840}, 0x40) 748.609356ms ago: executing program 3 (id=287): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xb8}, 0x0, 0xf5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000000)=0x9, 0x4) 689.276887ms ago: executing program 0 (id=291): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f0000000400)={'#! ', './file0', [], 0xa, "1f411d2552ad52cb07410969e814977e4f2c4a80522094786c8673fb61cf8b86bda4de504f5a3c7c04055f1f70e4064d46b2bb9e5100d446bb6a"}, 0x2) write$binfmt_misc(r0, &(0x7f0000000040)="b35b7d", 0x3) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 636.643417ms ago: executing program 3 (id=297): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES16], 0x1, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) mount(0x0, &(0x7f00000003c0)='.\x00', 0x0, 0x2012024, 0x0) 591.011027ms ago: executing program 0 (id=299): r0 = socket$netlink(0x10, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) write(r0, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) 504.690617ms ago: executing program 1 (id=302): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) eventfd2(0x0, 0x0) 318.978149ms ago: executing program 4 (id=307): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xfad9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x241}}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 301.487588ms ago: executing program 1 (id=308): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000940)=""/28, 0x1c) getdents(r0, 0x0, 0x5e) 279.021849ms ago: executing program 4 (id=310): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) 226.721369ms ago: executing program 2 (id=311): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x6a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000308"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}}, 0x0) 214.111789ms ago: executing program 4 (id=312): r0 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2a6, &(0x7f0000000440)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@keyring) 208.377689ms ago: executing program 1 (id=313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x7fff, 0xaea}, 0x110104, 0x32, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) brk(0xfffffffffffffffe) 196.126389ms ago: executing program 2 (id=314): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x2, 0x3}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x43d6b990c9433eb5, {0x41, 0xfffffffe, 0xfffffffe}}, 0x10) 134.131289ms ago: executing program 4 (id=315): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r1 = syz_open_pts(r0, 0x141601) write(r1, 0x0, 0x0) 133.347909ms ago: executing program 2 (id=316): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@pktinfo={{0x24, 0x29, 0xb, {@mcast1}}}], 0x28}, 0x0) 102.42736ms ago: executing program 4 (id=317): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="756e695f786c6174653d312c73686f72746e616d653d77696e39352c756e695f786c6174653d312c646f733178666c6f7070792c757466383d312c757466383d302c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c009efc999cb8e4f0cdce9c9a4fdad84c2e3960c1300048a048c368365ef94e332b02d40bed954c83f0a26e0ee1db78b31a4167b44e556d0a2f087280c307b00ce1f180023d16f055d895a2e0b10451824c36da45d2870bd20fdeb3269a503e6455df2e12db00000000000000000000000000000000d55e"], 0x0, 0x237, &(0x7f00000009c0)="$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") r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 91.13864ms ago: executing program 2 (id=318): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000200)={r2, 0xfff, 0x80000000, 0x5}, 0x10) 76.619ms ago: executing program 1 (id=319): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0xc0}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x4}}]}]}, @IFLA_IFALIAS={0x14, 0x14, 'tunl0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x24048081}, 0x40000880) 51.87119ms ago: executing program 2 (id=320): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 47.15061ms ago: executing program 1 (id=321): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000480)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000000c0)) 9.44049ms ago: executing program 4 (id=322): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)=""/154, 0x9a}, {&(0x7f0000000b00)=""/176, 0xb0}, {&(0x7f0000003300)=""/4082, 0xff2}, {&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f00000004c0)=""/223, 0xdf}], 0x5}, 0xfffffffe}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) 7.8143ms ago: executing program 2 (id=323): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@RTM_GETMDB={0x18, 0x56, 0xd23, 0x4}, 0x18}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) 0s ago: executing program 1 (id=324): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180100001c0000000000000000100000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="80010000100013070000000000000000fe88000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000032000000ffffffff00000000000000000000000000000000000000020000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000480001006469676573745f6e756c6c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006c47d7"], 0x180}}, 0x0) kernel console output (not intermixed with test programs): [ 21.603404][ T29] audit: type=1400 audit(1731796775.498:81): avc: denied { read } for pid=2998 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.191' (ED25519) to the list of known hosts. [ 27.368188][ T29] audit: type=1400 audit(1731796781.258:82): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.369420][ T3304] cgroup: Unknown subsys name 'net' [ 27.390925][ T29] audit: type=1400 audit(1731796781.258:83): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.418300][ T29] audit: type=1400 audit(1731796781.288:84): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.555461][ T3304] cgroup: Unknown subsys name 'cpuset' [ 27.561690][ T3304] cgroup: Unknown subsys name 'rlimit' [ 27.670501][ T29] audit: type=1400 audit(1731796781.558:85): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.695940][ T29] audit: type=1400 audit(1731796781.558:86): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.716512][ T29] audit: type=1400 audit(1731796781.558:87): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.736908][ T29] audit: type=1400 audit(1731796781.558:88): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.745861][ T3307] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.757161][ T29] audit: type=1400 audit(1731796781.568:89): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.790578][ T29] audit: type=1400 audit(1731796781.568:90): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 27.813856][ T29] audit: type=1400 audit(1731796781.658:91): avc: denied { relabelto } for pid=3307 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.856128][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.448124][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 29.547884][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.554990][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.562180][ T3315] bridge_slave_0: entered allmulticast mode [ 29.568559][ T3315] bridge_slave_0: entered promiscuous mode [ 29.595837][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.603100][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.610498][ T3315] bridge_slave_1: entered allmulticast mode [ 29.616979][ T3315] bridge_slave_1: entered promiscuous mode [ 29.640150][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 29.660192][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.674403][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 29.685186][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 29.694777][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.718740][ T3322] chnl_net:caif_netlink_parms(): no params data found [ 29.756157][ T3315] team0: Port device team_slave_0 added [ 29.785240][ T3315] team0: Port device team_slave_1 added [ 29.818963][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.826085][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.833217][ T3321] bridge_slave_0: entered allmulticast mode [ 29.839887][ T3321] bridge_slave_0: entered promiscuous mode [ 29.855575][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.862578][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.888731][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.909087][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.916203][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.923415][ T3321] bridge_slave_1: entered allmulticast mode [ 29.929928][ T3321] bridge_slave_1: entered promiscuous mode [ 29.940487][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.947567][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.954780][ T3314] bridge_slave_0: entered allmulticast mode [ 29.961211][ T3314] bridge_slave_0: entered promiscuous mode [ 29.968058][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.975426][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.001539][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.014820][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.021872][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.029070][ T3318] bridge_slave_0: entered allmulticast mode [ 30.035517][ T3318] bridge_slave_0: entered promiscuous mode [ 30.050396][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.057537][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.064728][ T3314] bridge_slave_1: entered allmulticast mode [ 30.071437][ T3314] bridge_slave_1: entered promiscuous mode [ 30.083496][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.090784][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.097922][ T3318] bridge_slave_1: entered allmulticast mode [ 30.104414][ T3318] bridge_slave_1: entered promiscuous mode [ 30.115515][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.122585][ T3322] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.129710][ T3322] bridge_slave_0: entered allmulticast mode [ 30.136063][ T3322] bridge_slave_0: entered promiscuous mode [ 30.148323][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.171497][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.178630][ T3322] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.185853][ T3322] bridge_slave_1: entered allmulticast mode [ 30.192210][ T3322] bridge_slave_1: entered promiscuous mode [ 30.199312][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.213824][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.242975][ T3315] hsr_slave_0: entered promiscuous mode [ 30.249031][ T3315] hsr_slave_1: entered promiscuous mode [ 30.255761][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.270661][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.281142][ T3322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.295187][ T3321] team0: Port device team_slave_0 added [ 30.307039][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.317088][ T3322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.331767][ T3321] team0: Port device team_slave_1 added [ 30.346293][ T3314] team0: Port device team_slave_0 added [ 30.365634][ T3322] team0: Port device team_slave_0 added [ 30.376425][ T3314] team0: Port device team_slave_1 added [ 30.382288][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.389284][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.415245][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.430701][ T3318] team0: Port device team_slave_0 added [ 30.437307][ T3322] team0: Port device team_slave_1 added [ 30.447647][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.454714][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.480674][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.496415][ T3318] team0: Port device team_slave_1 added [ 30.515358][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.522407][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.548373][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.577763][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.584798][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.610842][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.628520][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.635593][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.661553][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.682415][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.689606][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.715583][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.726579][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.733580][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.759656][ T3322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.771069][ T3322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.778096][ T3322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.804000][ T3322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.824376][ T3321] hsr_slave_0: entered promiscuous mode [ 30.830363][ T3321] hsr_slave_1: entered promiscuous mode [ 30.836218][ T3321] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.843743][ T3321] Cannot create hsr debugfs directory [ 30.881414][ T3314] hsr_slave_0: entered promiscuous mode [ 30.887603][ T3314] hsr_slave_1: entered promiscuous mode [ 30.893465][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.901044][ T3314] Cannot create hsr debugfs directory [ 30.936999][ T3322] hsr_slave_0: entered promiscuous mode [ 30.942902][ T3322] hsr_slave_1: entered promiscuous mode [ 30.948905][ T3322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.956650][ T3322] Cannot create hsr debugfs directory [ 30.964294][ T3318] hsr_slave_0: entered promiscuous mode [ 30.971220][ T3318] hsr_slave_1: entered promiscuous mode [ 30.977212][ T3318] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.984847][ T3318] Cannot create hsr debugfs directory [ 31.055536][ T3315] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.073222][ T3315] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.091265][ T3315] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.113622][ T3315] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.183878][ T3321] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.195093][ T3321] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.208652][ T3321] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.226058][ T3321] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.247413][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.271745][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.280714][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.289760][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.310130][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.319277][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.335685][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.343392][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.353888][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.381908][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.393682][ T3322] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.402629][ T3322] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.411733][ T3322] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.424374][ T3322] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.438554][ T173] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.445658][ T173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.459620][ T173] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.466672][ T173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.513632][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.530637][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.542672][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.568950][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.582869][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.590084][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.600104][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.607255][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.626368][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.633458][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.642639][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.649701][ T3327] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.659850][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.691644][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.700427][ T3322] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.717573][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.725881][ T173] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.733060][ T173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.750367][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.757554][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.774397][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.790935][ T3322] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.806247][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.813308][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.835533][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.842583][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.893203][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.943878][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.986465][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.002915][ T3315] veth0_vlan: entered promiscuous mode [ 32.031715][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.056323][ T3322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.066358][ T3315] veth1_vlan: entered promiscuous mode [ 32.134091][ T3314] veth0_vlan: entered promiscuous mode [ 32.142518][ T3314] veth1_vlan: entered promiscuous mode [ 32.170172][ T3315] veth0_macvtap: entered promiscuous mode [ 32.201868][ T3318] veth0_vlan: entered promiscuous mode [ 32.212641][ T3314] veth0_macvtap: entered promiscuous mode [ 32.225784][ T3314] veth1_macvtap: entered promiscuous mode [ 32.237668][ T3318] veth1_vlan: entered promiscuous mode [ 32.246102][ T3322] veth0_vlan: entered promiscuous mode [ 32.254316][ T3315] veth1_macvtap: entered promiscuous mode [ 32.265897][ T3322] veth1_vlan: entered promiscuous mode [ 32.279978][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.290072][ T3318] veth0_macvtap: entered promiscuous mode [ 32.298741][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.306622][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.317244][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.327992][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.338765][ T3314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.349253][ T3314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.360106][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.367961][ T3318] veth1_macvtap: entered promiscuous mode [ 32.375955][ T3314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.385051][ T3314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.393743][ T3314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.402458][ T3314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.415291][ T3315] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.424081][ T3315] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.432815][ T3315] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.441597][ T3315] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.471598][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.482345][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.492193][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.502663][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.513300][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.522493][ T3321] veth0_vlan: entered promiscuous mode [ 32.534047][ T3322] veth0_macvtap: entered promiscuous mode [ 32.549487][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 32.549500][ T29] audit: type=1400 audit(1731796786.438:110): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.DIkwJZ/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.556105][ T3322] veth1_macvtap: entered promiscuous mode [ 32.589088][ T29] audit: type=1400 audit(1731796786.478:111): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.590780][ T3321] veth1_vlan: entered promiscuous mode [ 32.611220][ T29] audit: type=1400 audit(1731796786.478:112): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.DIkwJZ/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.631641][ T3321] veth0_macvtap: entered promiscuous mode [ 32.641881][ T29] audit: type=1400 audit(1731796786.478:113): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.650693][ T3321] veth1_macvtap: entered promiscuous mode [ 32.669381][ T29] audit: type=1400 audit(1731796786.478:114): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.DIkwJZ/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.683094][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.701755][ T29] audit: type=1400 audit(1731796786.478:115): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.DIkwJZ/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3624 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.712247][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.712260][ T3318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.712273][ T3318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.718012][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.739680][ T29] audit: type=1400 audit(1731796786.478:116): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.743325][ T29] audit: type=1400 audit(1731796786.638:117): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/binderfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.759192][ T3318] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.828598][ T3318] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.837442][ T3318] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.846294][ T3318] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.857921][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.864336][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.883302][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.893175][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.903617][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.913509][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.923930][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.936130][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.945570][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.956137][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.965989][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.976447][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.986313][ T3321] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.996886][ T3321] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.007917][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.022923][ T29] audit: type=1400 audit(1731796786.908:118): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.058638][ T29] audit: type=1400 audit(1731796786.938:119): avc: denied { open } for pid=3315 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 33.071922][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.093309][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.103224][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.113729][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.123538][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.134046][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.143937][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 33.154482][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.171436][ T3456] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.171541][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.186955][ T3456] Cannot find set identified by id 0 to match [ 33.200746][ T3321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.209857][ T3321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.218678][ T3321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.227474][ T3321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.251141][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.261611][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.271609][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.282136][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.292127][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.302687][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.312584][ T3322] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.323041][ T3322] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.346294][ T3322] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.420387][ T3322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.429246][ T3322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.438053][ T3322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.446863][ T3322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.516937][ T3477] SELinux: policydb version -2013672995 does not match my version range 15-33 [ 33.544970][ T3477] SELinux: failed to load policy [ 33.589020][ T3486] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=3486 comm=syz.2.14 [ 33.605268][ T3487] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 33.605268][ T3487] The task syz.0.12 (3487) triggered the difference, watch for misbehavior. [ 33.631200][ T3491] netlink: 256 bytes leftover after parsing attributes in process `syz.4.16'. [ 33.722342][ T3506] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.743643][ T3507] geneve0: entered allmulticast mode [ 33.808361][ T3522] program syz.2.29 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 33.870255][ T3530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'. [ 33.905782][ T3535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.35'. [ 33.928822][ T3537] loop1: detected capacity change from 0 to 1024 [ 33.967295][ T3537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.000460][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.023654][ T3548] loop1: detected capacity change from 0 to 128 [ 34.049680][ T3546] loop2: detected capacity change from 0 to 8192 [ 34.108128][ C0] hrtimer: interrupt took 28007 ns [ 34.144464][ T3556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3556 comm=syz.2.45 [ 34.291781][ T3463] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x4 [ 34.299685][ T3463] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x2 [ 34.310039][ T3463] hid-generic 0000:3000000:0000.0001: unknown main item tag 0x3 [ 34.318164][ T3463] hid-generic 0000:3000000:0000.0001: hidraw0: HID v0.00 Device [sy] on syz0 [ 34.355704][ T3574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.53'. [ 34.433871][ T3584] loop2: detected capacity change from 0 to 512 [ 34.440229][ T3586] team0: Device ipvlan2 failed to register rx_handler [ 34.454815][ T3584] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.467897][ T3584] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.489001][ T3584] EXT4-fs (loop2): 1 truncate cleaned up [ 34.495324][ T3584] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.513243][ T3584] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.57: corrupted in-inode xattr: overlapping e_value [ 34.554661][ T3584] EXT4-fs (loop2): Remounting filesystem read-only [ 34.561239][ T3584] EXT4-fs warning (device loop2): ext4_xattr_set_entry:1772: inode #15: comm syz.2.57: unable to update i_inline_off [ 34.573692][ T3584] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.614061][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.778322][ T3619] Process accounting resumed [ 34.833550][ T3016] udevd[3016]: worker [3614] terminated by signal 33 (Unknown signal 33) [ 34.851125][ T3016] udevd[3016]: worker [3614] failed while handling '/devices/virtual/block/loop1' [ 34.862251][ T3016] udevd[3016]: worker [3615] terminated by signal 33 (Unknown signal 33) [ 34.872485][ T3016] udevd[3016]: worker [3615] failed while handling '/devices/virtual/block/loop0' [ 35.084139][ T3646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.85'. [ 35.097902][ T3506] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.390902][ T3658] syz.0.91 (3658) used greatest stack depth: 10592 bytes left [ 35.430567][ T3663] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.482149][ T3668] syz.0.95[3668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.482249][ T3668] syz.0.95[3668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.510127][ T3668] syz.0.95[3668] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 35.795916][ T3701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.110'. [ 35.859782][ T3506] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.928829][ T3506] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.004307][ T3506] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.016080][ T3506] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.038563][ T3506] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.057405][ T3506] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.122894][ T3742] loop2: detected capacity change from 0 to 512 [ 36.131521][ T3749] tap0: tun_chr_ioctl cmd 2147767511 [ 36.131551][ T3742] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 36.457714][ T3773] loop1: detected capacity change from 0 to 764 [ 36.474133][ T3773] rock: directory entry would overflow storage [ 36.480641][ T3773] rock: sig=0x4654, size=5, remaining=4 [ 36.490615][ T3775] random: crng reseeded on system resumption [ 36.663850][ T3795] loop2: detected capacity change from 0 to 1764 [ 36.672706][ T3795] ======================================================= [ 36.672706][ T3795] WARNING: The mand mount option has been deprecated and [ 36.672706][ T3795] and is ignored by this kernel. Remove the mand [ 36.672706][ T3795] option from the mount to silence this warning. [ 36.672706][ T3795] ======================================================= [ 36.740261][ T3802] loop4: detected capacity change from 0 to 512 [ 36.755136][ T3802] EXT4-fs: Ignoring removed orlov option [ 36.761432][ T3802] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 36.776661][ T3802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.789625][ T3802] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.804702][ T3802] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.156: bg 0: block 255: padding at end of block bitmap is not set [ 36.819397][ T3802] EXT4-fs (loop4): Remounting filesystem read-only [ 36.861776][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.927235][ T3816] loop2: detected capacity change from 0 to 512 [ 36.935785][ T3816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.948357][ T3816] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.971973][ T3322] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.011723][ T3822] loop4: detected capacity change from 0 to 2048 [ 37.049006][ T3822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.091367][ T3834] syz.3.168[3834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.091544][ T3834] syz.3.168[3834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.103034][ T3834] syz.3.168[3834] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.154160][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.227831][ T3841] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 37.341066][ T3853] loop3: detected capacity change from 0 to 1024 [ 37.354830][ T3853] EXT4-fs: Ignoring removed orlov option [ 37.360643][ T3853] EXT4-fs: Ignoring removed nomblk_io_submit option [ 37.377084][ T3853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.393564][ T35] kernel read not supported for file /usbmon9 (pid: 35 comm: kworker/1:1) [ 37.429629][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.446821][ T3869] vhci_hcd: invalid port number 255 [ 37.452109][ T3869] vhci_hcd: default hub control req: 801a v087e i00ff l0 [ 37.506730][ T3872] 9pnet: Could not find request transport: f [ 37.530286][ T3883] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 37.611725][ T3889] netlink: 268 bytes leftover after parsing attributes in process `syz.4.193'. [ 37.620880][ T3889] unsupported nla_type 65024 [ 37.648828][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 37.648844][ T29] audit: type=1326 audit(1731796791.538:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa749fee719 code=0x7ffc0000 [ 37.679051][ T29] audit: type=1326 audit(1731796791.538:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa749fee719 code=0x7ffc0000 [ 37.702417][ T29] audit: type=1326 audit(1731796791.538:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa749fee719 code=0x7ffc0000 [ 37.725862][ T29] audit: type=1326 audit(1731796791.538:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa749fee719 code=0x7ffc0000 [ 37.749216][ T29] audit: type=1326 audit(1731796791.538:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa749fee719 code=0x7ffc0000 [ 37.772535][ T29] audit: type=1326 audit(1731796791.538:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa749fee719 code=0x7ffc0000 [ 37.796198][ T29] audit: type=1326 audit(1731796791.618:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa749fee719 code=0x7ffc0000 [ 37.819617][ T29] audit: type=1326 audit(1731796791.618:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa749fee719 code=0x7ffc0000 [ 37.842894][ T29] audit: type=1326 audit(1731796791.618:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.1.198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fa749fee719 code=0x7ffc0000 [ 37.866135][ T29] audit: type=1326 audit(1731796791.618:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3901 comm="syz.4.199" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c1c32e719 code=0x0 [ 37.994014][ T3920] syz.2.207[3920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 37.994100][ T3920] syz.2.207[3920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.007277][ T3918] loop3: detected capacity change from 0 to 2048 [ 38.007586][ T3920] syz.2.207[3920] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 38.031776][ T3918] EXT4-fs: Ignoring removed orlov option [ 38.058492][ T3918] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.061403][ T3920] netlink: 'syz.2.207': attribute type 10 has an invalid length. [ 38.081242][ T3920] team0: Device hsr_slave_0 failed to register rx_handler [ 38.140102][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.162631][ T3933] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 38.177975][ T3933] vlan2: entered allmulticast mode [ 38.183215][ T3933] macvtap0: entered allmulticast mode [ 38.188774][ T3933] veth0_macvtap: entered allmulticast mode [ 38.257497][ T3944] loop2: detected capacity change from 0 to 164 [ 38.258542][ T3948] loop0: detected capacity change from 0 to 128 [ 38.280157][ T3944] ISOFS: unable to read i-node block [ 38.286125][ T3944] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 38.425232][ T3966] process 'syz.0.229' launched './file1' with NULL argv: empty string added [ 38.638584][ T4002] capability: warning: `syz.1.246' uses deprecated v2 capabilities in a way that may be insecure [ 38.670518][ T4007] @: renamed from vlan0 (while UP) [ 38.705503][ T4011] netlink: 40 bytes leftover after parsing attributes in process `syz.2.249'. [ 38.739693][ T4018] loop3: detected capacity change from 0 to 512 [ 38.788478][ T4018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.814835][ T4018] ext4 filesystem being mounted at /36/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.837551][ T4018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.253'. [ 38.871321][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.931637][ T4037] tun0: tun_chr_ioctl cmd 1074025681 [ 39.024294][ T4047] loop0: detected capacity change from 0 to 512 [ 39.044084][ T4047] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.265: invalid indirect mapped block 256 (level 2) [ 39.073279][ T4047] EXT4-fs (loop0): Remounting filesystem read-only [ 39.085295][ T4047] EXT4-fs (loop0): 2 truncates cleaned up [ 39.091554][ T4047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.109223][ T4047] SELinux: (dev loop0, type ext4) getxattr errno 5 [ 39.140686][ T4047] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.161195][ T4063] loop3: detected capacity change from 0 to 512 [ 39.176290][ T4063] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 39.213457][ T4063] EXT4-fs (loop3): 1 orphan inode deleted [ 39.219343][ T4063] EXT4-fs (loop3): 1 truncate cleaned up [ 39.235148][ T4063] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.280918][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.315941][ T4082] Process accounting resumed [ 39.320650][ T4082] kernel write not supported for file /asound/timers (pid: 4082 comm: syz.3.278) [ 39.332827][ T4084] loop2: detected capacity change from 0 to 256 [ 39.346828][ T4084] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 39.356990][ T4084] FAT-fs (loop2): Filesystem has been set read-only [ 39.372150][ T4084] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 39.388336][ T4084] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 39.468284][ T4093] 9pnet_fd: Insufficient options for proto=fd [ 39.512353][ T4102] tipc: Started in network mode [ 39.517298][ T4102] tipc: Node identity -, cluster identity 4711 [ 39.523483][ T4102] tipc: Enabling of bearer rejected, failed to enable media [ 39.579645][ T4111] loop2: detected capacity change from 0 to 164 [ 39.605962][ T4116] loop1: detected capacity change from 0 to 2048 [ 39.624796][ T4113] binfmt_misc: register: failed to install interpreter file ./file0/../file0 [ 39.654929][ T4116] loop1: p3 < > p4 < > [ 39.659120][ T4116] loop1: partition table partially beyond EOD, truncated [ 39.672363][ T4116] loop1: p3 start 4284289 is beyond EOD, truncated [ 39.708698][ T3016] loop1: p3 < > p4 < > [ 39.712893][ T3016] loop1: partition table partially beyond EOD, truncated [ 39.722251][ T3016] loop1: p3 start 4284289 is beyond EOD, truncated [ 39.746667][ T4117] loop3: detected capacity change from 0 to 8192 [ 39.773769][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 39.952041][ T4143] loop1: detected capacity change from 0 to 2048 [ 39.976064][ T4143] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.018877][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.037065][ T4154] loop4: detected capacity change from 0 to 256 [ 40.135979][ T4164] loop4: detected capacity change from 0 to 128 [ 40.153934][ T4167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 40.208068][ T4171] ALSA: seq fatal error: cannot create timer (-22) [ 40.230242][ T3321] ================================================================== [ 40.238356][ T3321] BUG: KCSAN: data-race in xas_clear_mark / xas_find_marked [ 40.245658][ T3321] [ 40.247982][ T3321] read-write to 0xffff8881056defd8 of 8 bytes by task 11 on cpu 0: [ 40.255870][ T3321] xas_clear_mark+0x90/0x180 [ 40.260488][ T3321] __folio_start_writeback+0x2e2/0x440 [ 40.265959][ T3321] __block_write_full_folio+0x506/0x8c0 [ 40.271797][ T3321] block_write_full_folio+0x293/0x2b0 [ 40.277227][ T3321] write_cache_pages+0x62/0x100 [ 40.282206][ T3321] blkdev_writepages+0x59/0x90 [ 40.286999][ T3321] do_writepages+0x1d8/0x480 [ 40.291603][ T3321] __writeback_single_inode+0x89/0x850 [ 40.297079][ T3321] writeback_sb_inodes+0x461/0xa30 [ 40.302198][ T3321] __writeback_inodes_wb+0x9a/0x1a0 [ 40.307405][ T3321] wb_writeback+0x274/0x640 [ 40.311913][ T3321] wb_workfn+0x67f/0x940 [ 40.316180][ T3321] process_scheduled_works+0x483/0x9a0 [ 40.321666][ T3321] worker_thread+0x51d/0x6f0 [ 40.326319][ T3321] kthread+0x1d1/0x210 [ 40.330399][ T3321] ret_from_fork+0x4b/0x60 [ 40.334832][ T3321] ret_from_fork_asm+0x1a/0x30 [ 40.339611][ T3321] [ 40.341944][ T3321] read to 0xffff8881056defd8 of 8 bytes by task 3321 on cpu 1: [ 40.349482][ T3321] xas_find_marked+0x216/0x660 [ 40.354263][ T3321] find_get_entry+0x54/0x390 [ 40.358867][ T3321] filemap_get_folios_tag+0x9e/0x210 [ 40.364195][ T3321] writeback_iter+0x4b0/0x830 [ 40.368938][ T3321] write_cache_pages+0x4b/0x100 [ 40.373821][ T3321] blkdev_writepages+0x59/0x90 [ 40.378606][ T3321] do_writepages+0x1d8/0x480 [ 40.383206][ T3321] filemap_fdatawrite_wbc+0xdb/0x100 [ 40.388507][ T3321] filemap_flush+0x61/0x90 [ 40.392937][ T3321] sync_blockdev_nowait+0x29/0x40 [ 40.397977][ T3321] sync_filesystem+0xe3/0x190 [ 40.402666][ T3321] generic_shutdown_super+0x46/0x220 [ 40.407964][ T3321] kill_block_super+0x2a/0x70 [ 40.412657][ T3321] deactivate_locked_super+0x7d/0x1c0 [ 40.418041][ T3321] deactivate_super+0x9f/0xb0 [ 40.422730][ T3321] cleanup_mnt+0x268/0x2e0 [ 40.427150][ T3321] __cleanup_mnt+0x19/0x20 [ 40.431563][ T3321] task_work_run+0x13a/0x1a0 [ 40.436162][ T3321] syscall_exit_to_user_mode+0xbe/0x130 [ 40.441711][ T3321] do_syscall_64+0xd6/0x1c0 [ 40.446217][ T3321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.452133][ T3321] [ 40.454453][ T3321] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 40.461553][ T3321] [ 40.463867][ T3321] Reported by Kernel Concurrency Sanitizer on: [ 40.470070][ T3321] CPU: 1 UID: 0 PID: 3321 Comm: syz-executor Not tainted 6.12.0-rc7-syzkaller-00192-gb5a24181e461 #0 [ 40.481029][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 40.491109][ T3321] ================================================================== [ 40.516417][ T4176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.323'.