last executing test programs: 961.745706ms ago: executing program 1 (id=2): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r3, 0x1, 0x400002000000000, 0xffff) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='15', 0x2}], 0x8) syz_io_uring_setup(0x3a67, &(0x7f0000000440)={0x0, 0xb6ea, 0x400, 0x2, 0x1d6, 0x0, r4}, &(0x7f0000000240), &(0x7f00000002c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) r5 = memfd_secret(0x80000) write$binfmt_register(r5, &(0x7f0000000380)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x10000, 0x3a, '-*-@', 0x3a, 'oom_adj\x00', 0x3a, './file0', 0x3a, [0x7db6978d9a0c8a18, 0x43, 0x46, 0x50]}, 0x37) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r7 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200, 0x2f2}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) r10 = syz_open_dev$hiddev(&(0x7f0000000180), 0x100000000, 0xd0100) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=r13, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500070007000000fcc46d587aa72baace5a3f53cbd10b061f72cdfdce86792665aee3997d309215d837cfff9f13c8d30345326d4660227c1c9a6425857d"], 0x3c}}, 0x0) tee(r10, r11, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r6, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x20040000}) io_uring_enter(r7, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000040)=0x7, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 945.365958ms ago: executing program 0 (id=1): munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = syz_io_uring_setup(0x10d, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff, 0x3}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, r1, 0x80, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x1, 0x2, 0x0, 0x1}}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47f5, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000280)={0x0, 0xa7, &(0x7f0000000440)={&(0x7f0000000080)={0x44, r7, 0x511, 0x400000, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x30, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xd769}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bond\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40850}, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000400)={0x98, r7, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xffff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x80000000}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xb}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x4020) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x7d, &(0x7f0000000040)={r8, 0x0, 0x0, 0x4}, &(0x7f00000003c0)=0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000086000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000018500000086000000bf0900000000000055090100f4ff00009500000000000000a509fcff080002000000850000002a000000b70000000005000000000000000000000000000000004000000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0x1016, &(0x7f0000001880)=""/4118, 0x41000, 0xf}, 0x94) 942.181529ms ago: executing program 3 (id=4): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) set_mempolicy(0x3, &(0x7f0000000040)=0x4, 0x4) (async, rerun: 64) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (rerun: 64) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x96b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200048c0}, 0x4054) (async) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x1}, 0x10) (async) bind$tipc(r0, 0x0, 0x0) (async, rerun: 32) close(r0) (async, rerun: 32) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000380)={[{@abort}, {@noblock_validity}, {@dax}, {@jqfmt_vfsold}, {@noinit_itable}, {@jqfmt_vfsv0}, {@noauto_da_alloc}, {@dax}, {@grpjquota, 0x32}, {@mblk_io_submit}]}, 0x1, 0x4de, &(0x7f0000001a40)="$eJzs3c9rG1ceAPDvyFY2P5y1w+4hG9hs2GSxw24kO94kZg/ZXVi2p0Db9J66tmyMZctYchKb0Dr0DyiU0hZ66qmXQv+AQsmfUAqB9l7a0lLapD0U2kZFIzlxHCl2iGwZ6/OBJ715mtH3PQ16mjfzGAXQtU5ExMmIuFetVk9HRH+jPNNIsVpPtfXu3rkxUUtJVKuXv0siknpZbbWhde95qLHZ/oh4/pmIl5JH45aXV2bHi8XCYmM5X5lbyJeXV87MzI1PF6YL86OjI+fHLoydGxtuSzv7IuLi/75687X3/n/xo39c+/zKN0MvJ43yiAftaLd607MPlfVGxOJ2BOuQ3kdaCADAbrV2nP/XiDgd/dGTHs0BAAAAe0n1333xSxJRBQAAAPasTDoHNsnkGvMA+iKTyeXqc3j/GAczxVK58vep0tL8ZH2u7EBkM1MzxcJwY67wQGST2vJImn+wfHbD8mhEHImIN/oPpMu5iVJxstMnPwAAAKBLHNow/v+xvz7+X+fnjlUOAAAAaJ+BTlcAAAAA2HbG/wAAALD3Gf8DAADAnvbspUu1VF37/+vJq8tLs6WrZyYL5dnc3NJEbqK0uJCbLpWm03v2zW32fsVSaeGfMb90PV8plCv58vLKlbnS0nzlykz6d+AAAABABxz5y63PkohY/deBNNXs63SlgB3R+yQrf7l99QB2Xk+nKwB0zBP9/gN7SrbTFQA6Ltnk9ZaTdz5uf10AAIDtMfin5tf/ezY9N7Ca2aEqAtvE+T/oXq7/Q/dy/R+6VzZ6wkAeuttmtwB9+uv/1eoTVQgAAGi7vjQlmVxEeh6gLzKZXC7icDomyCZTM8XCcET8PiI+7c/+rrY8km6ZbDpnGAAAAAAAAAAAAAAAAAAAAAAAAACoq1aTqAIAAAB7WkTm6yS9m3/EYP+pvo3nB/YlP/WnzxFx7Z3Lb10fr1QWR2rl398vr7zdKD/biTMYAAAAwEZr4/S1cTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtNPdOzcm1tJOxv32vxEx0Cx+b+xPn/dHNiIO/pBE77rtkojoaUP81ZsRcbRZ/KRWrRho1KJZ/AMdjn+oDfGhm92q9T//afb9y8SJ9Ln59+982kM9vdb9X+Z+/9fTJH6t7PAWYxy7/UG+ZfybEcd6m/c/a/GTFv3PyS3Gf/GFlZVWr1XfjRhs+vuTPBQrX5lbyJeXV87MzI1PF6YL86OjI+fHLoydGxvOT80UC43HpjFe//OH9x7X/oMt4g9s0v5TW2z/r7ev3/lDPZu9v3nyIP7Qyeb7/2iL+JnG/v9bI197fXAtv1rPr3f8/U+OP679ky3av9n+H9pi+08/9+oXW1wVANgB5eWV2fFisbDY1Zmn+jRqh0W7ohW7M1P7XHdBNZpmXtmGd64dmXe6Xe3IdLRbAgAAtsGjY2AAAAAAAAAAAAAAAAAAAABgp+3E7cSyG2Kupo/tuHs+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED7/BYAAP//I+vSRQ==") 646.216467ms ago: executing program 3 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=ANY=[@ANYBLOB="5000000010003b0cfeffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000040006100000010000000000008065727370616e0000200002830400000f000f990f988f45082889230000"], 0x50}}, 0x40080c0) 589.814804ms ago: executing program 0 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000000020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x2000c484}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0xac, 0x30, 0x1, 0x0, 0x0, {}, [{0x98, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x68, 0x1, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}, @TCA_IFE_SMAC={0xa, 0x4, @multicast}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x3}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) 403.875278ms ago: executing program 3 (id=8): faccessat(0xffffffffffffffff, &(0x7f0000001500)='./file0\x00', 0x82) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x100, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_config_ext={0x3, 0xe09}, 0x4, 0x0, 0x7, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x2) r0 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000180)={'fscrypt:', @auto=[0x0, 0x74, 0x0, 0x0, 0x0, 0x62, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62]}, &(0x7f00000001c0)={0x0, "e2030013d278a1fc4a8d8c8eb43087655e4365991c3e1e6f89550928b7bc882f37d43e4bd36e0000438c04419900"}, 0x48, 0xffffffffffffffff) keyctl$search(0xa, r0, &(0x7f0000000140)='keyring\x00', &(0x7f0000000300)={'syz', 0x2}, r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x8) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) renameat2(r1, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x1) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000240)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c756e695f786c6174653d312c756e695f786c6174653d302c757466383d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6d697865642c696f636861727365743d64656661756c742c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c726f6469722c757466383d302c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c756e695f786c6174653d302c756e695f786c6174653d302c646d61736b3d30303030303030303030303030303030303030303030312c747a3d5554432c6e6f6e756d7461696c3d302c73686f72746e616d653d6d697865642c6572726f72733d72656d6f756e742d726f2c6e6f6e756d7461696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c726f6469722c696f636861727365743d63703733372c73686f72746e616d653d77696e39352c696f636861727365743d6370313235312c73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c6e6f6e756d7461696c02002c00"], 0x1, 0x2e2, &(0x7f0000000c00)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 403.592788ms ago: executing program 4 (id=5): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) (async) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x43}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000000)={[{@block_validity}, {@errors_continue}, {@jqfmt_vfsv1}, {@acl}, {@nobh}, {@usrjquota, 0x2e}], [], 0x2e}, 0x1, 0x484, &(0x7f0000000a00)="$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") 342.104656ms ago: executing program 0 (id=9): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80042, 0x100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x50, 0x1, 0x0, 0x0, 0x0, 0x7ff0, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffc00, 0x3, 0x2, 0xfffffffd, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x8927) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f0000000200)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@acl}, {@nombcache}]}, 0x2, 0x497, &(0x7f00000010c0)="$eJzs281rHOUfAPDvTN76nvz6qy+tVaNFCIpJk1btwYuiIFJR0EM9xs22hG4baSLYF2wU8SRIQc/iUfQvEC8iiHoSPAmePEmhaC5tPUVmdqZNtrtp02yytfv5wGafZ+bZmee7M8/MM8+zCaBrDWd/kohtEfF7RAzWs8sLDNffriycq1xdOFdJYnHx9b+SvNzlhXOVsmj5ua1FZiSNSD9Mip0sN3v6zPHJWq16qsiPzZ0YKJKTx6rHqicnDh06eGD8macnnmpLnFlcl/e8N7N390tvXnilcuTCWz99ndV3W7F+aRyr9NtYixXDWeB/L+Ya1z12mzu7U21fkk56O1gRVqUnIrLD1Ze3/8HoiesHbzBe/KCjlQPWVXZvGmi9en4RuIsl0ekaAJ1R3ui3LPRUsmfgG5+DB9ez+9Fxl56rPwBlcV8pXvU1vZEWZfoanm/baTgijsz/83n2irWNQwAA3JKPK58d7o+Is1e/ejnre1zv7aW99+bvf+R/dxQ9waGI+F9E7IyI/0fEroi4JyKysvdFxP1rrM+N/Z/04ho3uaKs//dsMbe1vP9X9v5iqKfIbc/j70uOTteq+4vvZCT6BrL8+Ar7+O6FXz9ptW5p/y97Zfsv+4JFPS72NgzQTU3OTead0ja49H7Ent5m8SfXZgKSiNgdEXtWt+kdZWL68S/3tip08/hX0IZ5psUvsvDms/jnoyH+UlKfn3x7bPb0mSenTzTOT45tilp1/1h5Vtzo518+eq3V/uvxbypyzePfvPYwW7pUrb8vOf6NRYaSpfO1s+3d/22e/2l/8kY+z9xfLHt3cm7u1HhEf3I4zy9bPnH9s2W+LJ+d/yP7mrf/ncVnsvgfiIjsJH4wIh6KiIeLuj8SEY9GxL4VYvzx+ZvHH+ltnP9tkMU/1fT6d+38bzj+q0/0HP/hm1b7v7XjfzBPjRRL8utfg6Qh36w6vREDjRVc6/cHAAAA/wVp/hv4JB29lk7T0dH6b/h3xZa0NjM798TRmXdOTtV/Kz8UfWk50jVYjIfWpmvV8WS+2GJ9fHSiGCsux0sPFOPGn/ZszvOjlZnaVIdjh263tUX7z/zZ0+naAets+fRSOQE80d+RygAbrHEePV2ePf9quBjA3cr/a0P3ukn7TzeqHsDGc/+H7tWs/Z9vyJsLgLuT+z90L+0fulT6fdPF3254RYBOcP+HrrSW/+tfx8SmO6ManUls9EGJVRWOMpF2/IuSKBJni9bczi13+MIEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQJv8GAAD//2Uu29Y=") 333.116847ms ago: executing program 2 (id=3): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x159}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r3 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) sendmsg$tipc(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x20) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) (async) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x0, 0x26}, 0x28) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010021bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="858804000300000008001b000000000008000d00080000004469db08a9d815762789"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0xffc3, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0xffc3, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x40, 0x10000000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x2, 0x4, 0x9}, {0x6, 0x6, 0x5, 0x5}]}) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x40, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21000}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xffffff01, 0x7, 0x2}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0xfffffffe, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) 0s ago: executing program 4 (id=10): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) setregid(0xee00, 0xee00) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = syz_clone(0x6208400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000007c0)) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)=0x2000000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r3 = syz_open_procfs(r0, &(0x7f0000000180)='map_files\x00') acct(&(0x7f00000001c0)='./file0\x00') getdents64(r3, 0x0, 0x0) name_to_handle_at(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x242041, 0x0) ioctl$PIO_CMAP(r5, 0x4b71, &(0x7f0000000240)={0x1, 0x4, 0x9, 0xc740, 0xfffffffffffffff9, 0x6}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r6, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$inet_sctp(r4, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000840000000000000007000300060000042000000000000000840000000200000003000b00fe7fffffff000000", @ANYRES32=0x0, @ANYBLOB="1800"], 0x50, 0x4014}, 0x2c0408d0) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.250' (ED25519) to the list of known hosts. [ 32.616789][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 32.616806][ T29] audit: type=1400 audit(1768746671.458:70): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.646061][ T29] audit: type=1400 audit(1768746671.488:71): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.648774][ T3305] cgroup: Unknown subsys name 'net' [ 32.673837][ T29] audit: type=1400 audit(1768746671.518:72): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.827695][ T3305] cgroup: Unknown subsys name 'cpuset' [ 32.834076][ T3305] cgroup: Unknown subsys name 'rlimit' [ 32.965798][ T29] audit: type=1400 audit(1768746671.808:73): avc: denied { setattr } for pid=3305 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.994325][ T29] audit: type=1400 audit(1768746671.818:74): avc: denied { create } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.014931][ T29] audit: type=1400 audit(1768746671.818:75): avc: denied { write } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.035519][ T29] audit: type=1400 audit(1768746671.818:76): avc: denied { read } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.056242][ T29] audit: type=1400 audit(1768746671.838:77): avc: denied { read } for pid=3045 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.077341][ T29] audit: type=1400 audit(1768746671.838:78): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.079615][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.102275][ T29] audit: type=1400 audit(1768746671.838:79): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.146505][ T3305] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.347059][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 34.387447][ T3319] chnl_net:caif_netlink_parms(): no params data found [ 34.411041][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 34.459605][ T3326] chnl_net:caif_netlink_parms(): no params data found [ 34.494280][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 34.540100][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.547231][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.554459][ T3318] bridge_slave_0: entered allmulticast mode [ 34.561221][ T3318] bridge_slave_0: entered promiscuous mode [ 34.572649][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.579929][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.587150][ T3318] bridge_slave_1: entered allmulticast mode [ 34.593600][ T3318] bridge_slave_1: entered promiscuous mode [ 34.625066][ T3319] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.632317][ T3319] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.639483][ T3319] bridge_slave_0: entered allmulticast mode [ 34.646040][ T3319] bridge_slave_0: entered promiscuous mode [ 34.652987][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.660157][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.667454][ T3317] bridge_slave_0: entered allmulticast mode [ 34.673956][ T3317] bridge_slave_0: entered promiscuous mode [ 34.690743][ T3319] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.698109][ T3319] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.705321][ T3319] bridge_slave_1: entered allmulticast mode [ 34.712005][ T3319] bridge_slave_1: entered promiscuous mode [ 34.718378][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.725532][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.732859][ T3317] bridge_slave_1: entered allmulticast mode [ 34.739320][ T3317] bridge_slave_1: entered promiscuous mode [ 34.754166][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.780956][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.800982][ T3326] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.808172][ T3326] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.815324][ T3326] bridge_slave_0: entered allmulticast mode [ 34.822052][ T3326] bridge_slave_0: entered promiscuous mode [ 34.839232][ T3319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.849755][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.859035][ T3326] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.866320][ T3326] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.873748][ T3326] bridge_slave_1: entered allmulticast mode [ 34.880306][ T3326] bridge_slave_1: entered promiscuous mode [ 34.897337][ T3319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.907766][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.926812][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.933971][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.941432][ T3327] bridge_slave_0: entered allmulticast mode [ 34.948144][ T3327] bridge_slave_0: entered promiscuous mode [ 34.955648][ T3318] team0: Port device team_slave_0 added [ 34.974905][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.982115][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.989490][ T3327] bridge_slave_1: entered allmulticast mode [ 34.995993][ T3327] bridge_slave_1: entered promiscuous mode [ 35.003459][ T3318] team0: Port device team_slave_1 added [ 35.015341][ T3326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.025422][ T3317] team0: Port device team_slave_0 added [ 35.042071][ T3319] team0: Port device team_slave_0 added [ 35.049101][ T3326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.059024][ T3317] team0: Port device team_slave_1 added [ 35.079348][ T3319] team0: Port device team_slave_1 added [ 35.095654][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.105310][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.112357][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.138512][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.158890][ T3326] team0: Port device team_slave_0 added [ 35.165901][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.175334][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.182419][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.208452][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.223756][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.230846][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.256970][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.268736][ T3326] team0: Port device team_slave_1 added [ 35.282482][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.289726][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.315889][ T3319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.327094][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.334346][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.360455][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.382247][ T3327] team0: Port device team_slave_0 added [ 35.394306][ T3319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.401307][ T3319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.427327][ T3319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.447238][ T3327] team0: Port device team_slave_1 added [ 35.462069][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.469169][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.495190][ T3326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.521447][ T3326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.528599][ T3326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.555090][ T3326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.583043][ T3318] hsr_slave_0: entered promiscuous mode [ 35.589649][ T3318] hsr_slave_1: entered promiscuous mode [ 35.603129][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.610399][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.636610][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.650146][ T3317] hsr_slave_0: entered promiscuous mode [ 35.656271][ T3317] hsr_slave_1: entered promiscuous mode [ 35.662317][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 35.668086][ T3317] Cannot create hsr debugfs directory [ 35.676475][ T3319] hsr_slave_0: entered promiscuous mode [ 35.682671][ T3319] hsr_slave_1: entered promiscuous mode [ 35.688629][ T3319] debugfs: 'hsr0' already exists in 'hsr' [ 35.694442][ T3319] Cannot create hsr debugfs directory [ 35.701020][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.708023][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.734082][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.789055][ T3326] hsr_slave_0: entered promiscuous mode [ 35.795578][ T3326] hsr_slave_1: entered promiscuous mode [ 35.801780][ T3326] debugfs: 'hsr0' already exists in 'hsr' [ 35.807593][ T3326] Cannot create hsr debugfs directory [ 35.857283][ T3327] hsr_slave_0: entered promiscuous mode [ 35.863466][ T3327] hsr_slave_1: entered promiscuous mode [ 35.869554][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 35.875288][ T3327] Cannot create hsr debugfs directory [ 36.048308][ T3318] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.058012][ T3318] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.067257][ T3318] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.078696][ T3318] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.113559][ T3317] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.123070][ T3317] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.136115][ T3317] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.145377][ T3317] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.166357][ T3319] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.179418][ T3319] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.190325][ T3319] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.203558][ T3319] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.232098][ T3326] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.241536][ T3326] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.251472][ T3326] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.265213][ T3326] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.298443][ T3327] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.310488][ T3327] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.322180][ T3327] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.336633][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.344133][ T3327] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.372885][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.399156][ T2246] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.406416][ T2246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.428061][ T2246] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.435184][ T2246] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.449979][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.472245][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.491792][ T3319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.502094][ T2246] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.509290][ T2246] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.527128][ T3326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.535116][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.542375][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.565815][ T3319] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.578264][ T3326] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.593347][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.600534][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.614883][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.622019][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.643388][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.650501][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.663237][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.670329][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.703284][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.714526][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 36.759374][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.781838][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.789145][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.808839][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.815953][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.828078][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.865808][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.892162][ T3326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 36.933214][ T3319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.059221][ T3317] veth0_vlan: entered promiscuous mode [ 37.078983][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.093466][ T3317] veth1_vlan: entered promiscuous mode [ 37.115790][ T3318] veth0_vlan: entered promiscuous mode [ 37.126400][ T3318] veth1_vlan: entered promiscuous mode [ 37.144744][ T3319] veth0_vlan: entered promiscuous mode [ 37.166654][ T3319] veth1_vlan: entered promiscuous mode [ 37.182811][ T3317] veth0_macvtap: entered promiscuous mode [ 37.193773][ T3318] veth0_macvtap: entered promiscuous mode [ 37.208394][ T3317] veth1_macvtap: entered promiscuous mode [ 37.219783][ T3318] veth1_macvtap: entered promiscuous mode [ 37.242463][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.252332][ T3319] veth0_macvtap: entered promiscuous mode [ 37.268348][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.278628][ T3319] veth1_macvtap: entered promiscuous mode [ 37.288408][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.300951][ T3326] veth0_vlan: entered promiscuous mode [ 37.313465][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.330143][ T3327] veth0_vlan: entered promiscuous mode [ 37.345254][ T3326] veth1_vlan: entered promiscuous mode [ 37.352297][ T2246] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.363912][ T2246] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.373818][ T3327] veth1_vlan: entered promiscuous mode [ 37.383615][ T2246] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.395294][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.403567][ T2246] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.419048][ T3319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.428472][ T2246] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.443568][ T2246] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.453169][ T2246] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.465679][ T2246] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.485085][ T2246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.514880][ T2246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.531282][ T3327] veth0_macvtap: entered promiscuous mode [ 37.551887][ T3318] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.570272][ T2246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.580168][ T3327] veth1_macvtap: entered promiscuous mode [ 37.587782][ T3326] veth0_macvtap: entered promiscuous mode [ 37.600025][ T2246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.622113][ T3326] veth1_macvtap: entered promiscuous mode [ 37.633786][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 37.633804][ T29] audit: type=1400 audit(1768746676.478:102): avc: denied { create } for pid=3492 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 37.667111][ T29] audit: type=1400 audit(1768746676.518:103): avc: denied { create } for pid=3492 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 37.675580][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.696032][ T29] audit: type=1400 audit(1768746676.538:104): avc: denied { map_create } for pid=3493 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.716942][ T3495] syz.1.2 (3495): /proc/3492/oom_adj is deprecated, please use /proc/3492/oom_score_adj instead. [ 37.729789][ T3497] Zero length message leads to an empty skb [ 37.735907][ T29] audit: type=1400 audit(1768746676.548:105): avc: denied { map_read map_write } for pid=3493 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 37.738487][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.755799][ T29] audit: type=1400 audit(1768746676.548:106): avc: denied { create } for pid=3494 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.782145][ T29] audit: type=1400 audit(1768746676.558:107): avc: denied { create } for pid=3493 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 37.783046][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.801490][ T29] audit: type=1400 audit(1768746676.558:108): avc: denied { allowed } for pid=3493 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 37.801518][ T29] audit: type=1400 audit(1768746676.558:109): avc: denied { create } for pid=3493 comm="syz.0.1" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.848855][ T29] audit: type=1400 audit(1768746676.558:110): avc: denied { bind } for pid=3494 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 37.867928][ T29] audit: type=1400 audit(1768746676.558:111): avc: denied { map } for pid=3493 comm="syz.0.1" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=3848 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 37.917089][ T3504] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 37.930827][ T2679] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.941206][ T3326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.983117][ T3506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7'. [ 37.997741][ T3508] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6'. [ 38.029371][ T2679] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.072685][ T2679] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.123834][ T2679] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.198292][ T2679] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.245121][ T3514] loop3: detected capacity change from 0 to 256 [ 38.260449][ T2679] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.273888][ T3520] loop4: detected capacity change from 0 to 512 [ 38.321814][ T2679] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.340490][ T3520] EXT4-fs: Ignoring removed nobh option [ 38.401058][ T3522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 38.433664][ T3520] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 38.441916][ T3521] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 38.446710][ T3520] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.5: attempt to clear invalid blocks 1 len 1 [ 38.472154][ T2679] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.482903][ T3520] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 38.498916][ T3520] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5: invalid indirect mapped block 1819239214 (level 0) [ 38.515249][ T3520] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.5: invalid indirect mapped block 1819239214 (level 1) [ 38.529767][ T3520] EXT4-fs (loop4): 1 truncate cleaned up [ 38.535875][ T3520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.560878][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.574911][ T3326] ================================================================== [ 38.578968][ T3527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 38.583100][ T3326] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 38.599680][ T3326] [ 38.602034][ T3326] read-write to 0xffff888237d27550 of 8 bytes by task 3514 on cpu 1: [ 38.610299][ T3326] find_get_block_common+0x498/0x8e0 [ 38.615732][ T3326] bdev_getblk+0x4d/0x3f0 [ 38.620102][ T3326] fat_mirror_bhs+0x149/0x320 [ 38.624916][ T3326] fat_ent_write+0xd0/0xe0 [ 38.629381][ T3326] fat_chain_add+0x16c/0x490 [ 38.634034][ T3326] fat_get_block+0x46c/0x5e0 [ 38.639533][ T3326] __block_write_begin_int+0x400/0xf90 [ 38.645042][ T3326] cont_write_begin+0x5fe/0x970 [ 38.649937][ T3326] fat_write_begin+0x4f/0xe0 [ 38.654568][ T3326] generic_perform_write+0x183/0x490 [ 38.659923][ T3326] __generic_file_write_iter+0x9e/0x120 [ 38.661869][ T3523] loop0: detected capacity change from 0 to 512 [ 38.665640][ T3326] generic_file_write_iter+0x8d/0x310 [ 38.665689][ T3326] vfs_write+0x5a6/0x9f0 [ 38.665710][ T3326] ksys_write+0xdc/0x1a0 [ 38.685918][ T3326] __x64_sys_write+0x40/0x50 [ 38.690560][ T3326] x64_sys_call+0x2847/0x3000 [ 38.695292][ T3326] do_syscall_64+0xc0/0x2a0 [ 38.699843][ T3326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.705785][ T3326] [ 38.708146][ T3326] read to 0xffff888237d27550 of 8 bytes by task 3326 on cpu 0: [ 38.715737][ T3326] has_bh_in_lru+0x35/0x1f0 [ 38.720310][ T3326] smp_call_function_many_cond+0x2a9/0xc30 [ 38.726175][ T3326] on_each_cpu_cond_mask+0x3c/0x80 [ 38.728011][ T3523] EXT4-fs: Ignoring removed nobh option [ 38.731332][ T3326] invalidate_bh_lrus+0x2a/0x30 [ 38.741852][ T3326] blkdev_flush_mapping+0x9a/0x1a0 [ 38.747084][ T3326] bdev_release+0x2bf/0x3d0 [ 38.751713][ T3326] blkdev_release+0x15/0x20 [ 38.756258][ T3326] __fput+0x29b/0x650 [ 38.760294][ T3326] ____fput+0x1c/0x30 [ 38.764321][ T3326] task_work_run+0x130/0x1a0 [ 38.768932][ T3326] exit_to_user_mode_loop+0x1f7/0x6f0 [ 38.774395][ T3326] do_syscall_64+0x1d3/0x2a0 [ 38.778994][ T3326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.784942][ T3326] [ 38.787291][ T3326] value changed: 0xffff888107ac72d8 -> 0xffff888107ac7410 [ 38.794411][ T3326] [ 38.796756][ T3326] Reported by Kernel Concurrency Sanitizer on: [ 38.802955][ T3326] CPU: 0 UID: 0 PID: 3326 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.812876][ T3326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.822964][ T3326] ================================================================== [ 38.842040][ T3523] ------------[ cut here ]------------ [ 38.847702][ T3523] EA inode 11 i_nlink=1026 [ 38.847719][ T3523] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.0.9/3523 [ 38.863001][ T3523] Modules linked in: [ 38.866951][ T3523] CPU: 1 UID: 0 PID: 3523 Comm: syz.0.9 Not tainted syzkaller #0 PREEMPT(voluntary) [ 38.876695][ T3523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 38.886874][ T3523] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 38.893588][ T3523] Code: 11 cf 9b ff 4c 8d 2d 4a aa 3f 05 49 8d 7e 40 e8 c1 85 b7 ff 49 8b 6e 40 4c 89 e7 e8 f5 80 b7 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 6c bc c5 03 66 66 66 2e 0f 1f 84 [ 38.913336][ T3523] RSP: 0018:ffffc900019075a8 EFLAGS: 00010246 [ 38.919586][ T3523] RAX: ffff88811b57ab90 RBX: ffff88811a831348 RCX: ffffffff81bc669b [ 38.927660][ T3523] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff86fc10d0 [ 38.935695][ T3523] RBP: 000000000000000b R08: 000188811a8312fb R09: 0000000000000000 [ 38.944052][ T3523] R10: ffffc900019074d8 R11: 0001c900019074d8 R12: ffff88811a8312f8 [ 38.952092][ T3523] R13: ffffffff86fc10d0 R14: ffff88811a8312b0 R15: 0000000000000001 [ 38.960171][ T3523] FS: 00007f1e240976c0(0000) GS:ffff8882aec79000(0000) knlGS:0000000000000000 [ 38.969193][ T3523] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.975823][ T3523] CR2: 00007ff3df3a5000 CR3: 000000011b5e6000 CR4: 00000000003506f0 [ 38.983870][ T3523] Call Trace: [ 38.987312][ T3523] [ 38.990268][ T3523] ext4_xattr_set_entry+0x77c/0x1010 [ 38.995707][ T3523] ext4_xattr_ibody_set+0x184/0x3c0 [ 39.001102][ T3523] ext4_expand_extra_isize_ea+0xd7b/0x11a0 [ 39.007200][ T3523] __ext4_expand_extra_isize+0x246/0x280 [ 39.013017][ T3523] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 39.018632][ T3523] ext4_evict_inode+0x7c3/0xd40 [ 39.023696][ T3523] ? __pfx_ext4_evict_inode+0x10/0x10 [ 39.029318][ T3523] evict+0x2af/0x510 [ 39.033270][ T3523] ? __dquot_initialize+0x146/0x7c0 [ 39.038648][ T3523] iput+0x4b9/0x650 [ 39.042591][ T3523] ext4_process_orphan+0x1a9/0x1c0 [ 39.047937][ T3523] ext4_orphan_cleanup+0x6a8/0xa00 [ 39.053188][ T3523] ext4_fill_super+0x3476/0x3800 [ 39.058309][ T3523] ? set_blocksize+0x1a3/0x310 [ 39.063175][ T3523] ? setup_bdev_super+0x30e/0x370 [ 39.068543][ T3523] ? __pfx_ext4_fill_super+0x10/0x10 [ 39.073889][ T3523] get_tree_bdev_flags+0x291/0x300 [ 39.079178][ T3523] ? __pfx_ext4_fill_super+0x10/0x10 [ 39.084516][ T3523] get_tree_bdev+0x1f/0x30 [ 39.089064][ T3523] ext4_get_tree+0x1c/0x30 [ 39.093525][ T3523] vfs_get_tree+0x57/0x1d0 [ 39.098025][ T3523] do_new_mount+0x288/0x700 [ 39.102637][ T3523] path_mount+0x4c0/0xb90 [ 39.107137][ T3523] ? user_path_at+0xbf/0x130 [ 39.112176][ T3523] __se_sys_mount+0x28c/0x2e0 [ 39.117053][ T3523] __x64_sys_mount+0x67/0x80 [ 39.121803][ T3523] x64_sys_call+0x2cca/0x3000 [ 39.126545][ T3523] do_syscall_64+0xc0/0x2a0 [ 39.131196][ T3523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.137194][ T3523] RIP: 0033:0x7f1e2563bf4a [ 39.141720][ T3523] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.161518][ T3523] RSP: 002b:00007f1e24096e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.170196][ T3523] RAX: ffffffffffffffda RBX: 00007f1e24096ee0 RCX: 00007f1e2563bf4a [ 39.178287][ T3523] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f1e24096ea0 [ 39.186314][ T3523] RBP: 0000200000000180 R08: 00007f1e24096ee0 R09: 0000000000800718 [ 39.194629][ T3523] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 39.202659][ T3523] R13: 00007f1e24096ea0 R14: 0000000000000497 R15: 0000200000000200 [ 39.210842][ T3523] [ 39.213947][ T3523] ---[ end trace 0000000000000000 ]--- [ 39.219004][ C0] hrtimer: interrupt took 32054 ns [ 39.227462][ T3523] EXT4-fs (loop0): 1 orphan inode deleted [ 39.234134][ T3523] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.247831][ T3514] syz.3.8: attempt to access beyond end of device [ 39.247831][ T3514] loop3: rw=2049, sector=256, nr_sectors = 32 limit=256 [ 39.256709][ T3523] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.262574][ T3514] syz.3.8: attempt to access beyond end of device [ 39.262574][ T3514] loop3: rw=2049, sector=384, nr_sectors = 32 limit=256 [ 39.283898][ T3514] syz.3.8: attempt to access beyond end of device [ 39.283898][ T3514] loop3: rw=2049, sector=448, nr_sectors = 32 limit=256 [ 39.297357][ T3514] syz.3.8: attempt to access beyond end of device [ 39.297357][ T3514] loop3: rw=2049, sector=512, nr_sectors = 32 limit=256 [ 39.310794][ T3514] syz.3.8: attempt to access beyond end of device [ 39.310794][ T3514] loop3: rw=2049, sector=640, nr_sectors = 32 limit=256 [ 39.324301][ T3514] syz.3.8: attempt to access beyond end of device [ 39.324301][ T3514] loop3: rw=2049, sector=704, nr_sectors = 32 limit=256 [ 39.349808][ T3514] syz.3.8: attempt to access beyond end of device [ 39.349808][ T3514] loop3: rw=2049, sector=768, nr_sectors = 32 limit=256 [ 39.376956][ T3514] syz.3.8: attempt to access beyond end of device [ 39.376956][ T3514] loop3: rw=2049, sector=832, nr_sectors = 32 limit=256 [ 39.390736][ T3514] syz.3.8: attempt to access beyond end of device [ 39.390736][ T3514] loop3: rw=2049, sector=896, nr_sectors = 32 limit=256 [ 39.407147][ T3514] syz.3.8: attempt to access beyond end of device [ 39.407147][ T3514] loop3: rw=2049, sector=960, nr_sectors = 32 limit=256 [ 39.447467][ T3523] syz.0.9 (3523) used greatest stack depth: 10552 bytes left [ 39.531728][ T3533] loop4: detected capacity change from 0 to 512 [ 39.551201][ T3533] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.564801][ T3533] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.594116][ T3533] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.609726][ T3533] EXT4-fs (loop4): 1 truncate cleaned up [ 39.618312][ T3533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.659613][ T3326] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.