last executing test programs: 2.698042733s ago: executing program 4 (id=386): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0xb093, 0x800000, 0x5, 0x2, 0x9, 0x46, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe4b}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0) 2.636403666s ago: executing program 2 (id=387): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000340), 0x11000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1c6c, &(0x7f0000000040)={0x0, 0xaebb, 0xd000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2, 0xd}, {0xb, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40885}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 2.599726217s ago: executing program 4 (id=388): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000280)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x1, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 2.540675579s ago: executing program 4 (id=390): r0 = socket$kcm(0x1e, 0x1, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x2]}, 0x8, 0x80000) epoll_create1(0x0) socket(0x10, 0x3, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x4004) 2.531863579s ago: executing program 2 (id=391): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="0100"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000008dcfb737"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.149730371s ago: executing program 2 (id=397): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='./bus\x00', 0x12000151) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x0, 0x0) lseek(r3, 0xd488, 0x1) getdents64(r3, 0x0, 0x22) 2.103869653s ago: executing program 2 (id=398): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x81}]}, &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c00000020000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc, 0xfffffffffffffffe}, 0x100, 0x0, 0x0, 0x8, 0x1, 0x7fffffff, 0xdffe, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3eaa0000000000007110ae00000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.901858689s ago: executing program 2 (id=399): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.827260942s ago: executing program 2 (id=400): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) setsockopt$sock_attach_bpf(r0, 0x1, 0x7, &(0x7f0000000340), 0x4) 1.686093616s ago: executing program 4 (id=401): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 926.521041ms ago: executing program 0 (id=411): r0 = socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) close(0x3) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x10}}, 0x2400e0d5) 800.893185ms ago: executing program 0 (id=414): readlink(0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x2) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0xfffffffffffffc04, 0x1}, 0x8201, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010022"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="11002dbd7000fcdbdf2502"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) 728.677067ms ago: executing program 1 (id=415): perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="26a24fa97889de1c7eb992ebd93fc644bf4cf5983c20bf4e38e5cf03d5a4fedfb7291c50fb4e9b097d1ac5ecf6a8bb1184c3442a0ef216e774e8b26f64d6ffe225addafe95dffa1d24906f1a090a1491d9f9bbe9055351600f708536688551a482652d0072ba7c655444b523c7060391f20dfb7da903d36ac7b0b5bf8dc7207bbf59"], &(0x7f0000000540)='syzkaller\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x41100, 0x2, '\x00', 0x0, @fallback=0x10, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 660.70396ms ago: executing program 1 (id=416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x4, 0xd}, {0xff81}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 594.993132ms ago: executing program 4 (id=418): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/mdstat\x00', 0x1800, 0x0) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/198, 0xc6}], 0x1, 0x7, 0x9) unshare(0x2a000600) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000280)=ANY=[], 0x8, 0x0) msgsnd(r1, &(0x7f0000000440)=ANY=[], 0x401, 0x0) msgrcv(r1, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) msgrcv(r1, &(0x7f0000000d40)={0x0, ""/4096}, 0x1008, 0x0, 0x1000) 553.506983ms ago: executing program 0 (id=420): r0 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x88003) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x10000d, 0x400, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$inet6_int(r1, 0x29, 0x2, 0x0, 0x0) io_setup(0x3ff, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) io_submit(0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0]) ioctl$FIBMAP(r0, 0x2202, 0x0) 544.641773ms ago: executing program 1 (id=421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1) 479.609195ms ago: executing program 4 (id=422): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 474.428885ms ago: executing program 3 (id=423): r0 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x7b, 0x4) shutdown(r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0xd6b, &(0x7f0000000040)={0x0, 0x3bd0, 0xc000, 0x8, 0xc5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 451.135916ms ago: executing program 1 (id=424): add_key$keyring(0x0, &(0x7f0000004980)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r0 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, 0x0, 0x0, r0) socket(0x848000000015, 0x805, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) keyctl$unlink(0x9, 0x0, r0) 424.804247ms ago: executing program 0 (id=425): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000006c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 399.300588ms ago: executing program 3 (id=426): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents64(r2, &(0x7f0000002380)=""/4103, 0x1007) 376.904328ms ago: executing program 1 (id=427): prlimit64(0x0, 0xb, &(0x7f0000000140)={0x1, 0x6}, 0x0) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) timer_create(0x0, 0x0, 0x0) poll(&(0x7f0000b2c000)=[{r2}], 0x2c, 0xffffffffffbffff8) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 351.266729ms ago: executing program 3 (id=428): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) iopl(0x3) pidfd_send_signal(0xffffffffffffffff, 0x400, 0x0, 0x3) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 315.085781ms ago: executing program 0 (id=429): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000005c0)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x109040, 0x0) mknodat(r2, &(0x7f0000000040)='./file0\x00', 0xc000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x25dfdbff, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0x3}, {0xc}}}]}]}, 0x48}}, 0x0) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f0000000080)=0x4) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r1, 0x1, 0x6, @local}, 0x10) 275.133902ms ago: executing program 1 (id=430): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x2, 0x4, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x24000040) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ptrace(0x10, 0x0) ptrace$cont(0x19, 0x0, 0xc, 0x40000000000274b) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x8, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 258.511802ms ago: executing program 3 (id=431): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0) close(r0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) close(0x3) 63.820739ms ago: executing program 0 (id=432): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff9f}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24000805) r1 = io_uring_setup(0x9f9, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 53.895929ms ago: executing program 3 (id=433): eventfd(0x1) socket$l2tp6(0xa, 0x2, 0x73) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 0s ago: executing program 3 (id=434): syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8081, 0x0, 0x0) unshare(0x42040400) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$netlink(r2, &(0x7f0000005d80)={&(0x7f0000000100)=@kern={0x1d, 0x0, 0x28, 0x80000}, 0xc, &(0x7f0000005cc0), 0x0, 0x0, 0x0, 0x4040800}, 0x40830) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) pselect6(0x40, &(0x7f0000000080)={0x2, 0x5, 0xfffffffffffffff8, 0xfffffffffffffffe, 0x0, 0x3, 0x4}, 0x0, &(0x7f00000002c0)={0xd, 0x9, 0x7e, 0x800, 0x1, 0x4, 0xfffffffffffffffa, 0x7}, &(0x7f0000000340)={0x0, 0x989680}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 33.529965][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 33.529982][ T28] audit: type=1400 audit(1780931779.410:126): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.559142][ T28] audit: type=1400 audit(1780931779.440:127): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.561859][ T3286] cgroup: Unknown subsys name 'net' [ 33.587443][ T28] audit: type=1400 audit(1780931779.470:128): avc: denied { unmount } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.703571][ T3286] cgroup: Unknown subsys name 'cpuset' [ 33.709888][ T3286] cgroup: Unknown subsys name 'rlimit' [ 33.820967][ T28] audit: type=1400 audit(1780931779.700:129): avc: denied { setattr } for pid=3286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.844419][ T28] audit: type=1400 audit(1780931779.710:130): avc: denied { create } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.872175][ T28] audit: type=1400 audit(1780931779.710:131): avc: denied { write } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.901181][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.902729][ T28] audit: type=1400 audit(1780931779.710:132): avc: denied { read } for pid=3286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.930270][ T28] audit: type=1400 audit(1780931779.730:133): avc: denied { mounton } for pid=3286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.955276][ T28] audit: type=1400 audit(1780931779.730:134): avc: denied { mount } for pid=3286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.978656][ T28] audit: type=1400 audit(1780931779.750:135): avc: denied { read } for pid=3022 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 34.007147][ T3286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.207922][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.215225][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.222441][ T3299] bridge_slave_0: entered allmulticast mode [ 35.229107][ T3299] bridge_slave_0: entered promiscuous mode [ 35.249138][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.256320][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.263537][ T3299] bridge_slave_1: entered allmulticast mode [ 35.270002][ T3299] bridge_slave_1: entered promiscuous mode [ 35.326396][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.340394][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.394635][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.401807][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.409045][ T3306] bridge_slave_0: entered allmulticast mode [ 35.415531][ T3306] bridge_slave_0: entered promiscuous mode [ 35.425121][ T3299] team0: Port device team_slave_0 added [ 35.440256][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.447436][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.454616][ T3305] bridge_slave_0: entered allmulticast mode [ 35.461067][ T3305] bridge_slave_0: entered promiscuous mode [ 35.467788][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.474959][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.482121][ T3306] bridge_slave_1: entered allmulticast mode [ 35.488744][ T3306] bridge_slave_1: entered promiscuous mode [ 35.498763][ T3299] team0: Port device team_slave_1 added [ 35.509041][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.516352][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.523628][ T3305] bridge_slave_1: entered allmulticast mode [ 35.530016][ T3305] bridge_slave_1: entered promiscuous mode [ 35.578867][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.588111][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.595300][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.602458][ T3298] bridge_slave_0: entered allmulticast mode [ 35.608960][ T3298] bridge_slave_0: entered promiscuous mode [ 35.615654][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.622711][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.648733][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.663465][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.673497][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.687047][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.694150][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.701280][ T3298] bridge_slave_1: entered allmulticast mode [ 35.707960][ T3298] bridge_slave_1: entered promiscuous mode [ 35.714748][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.721719][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.747721][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.763939][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.795993][ T3306] team0: Port device team_slave_0 added [ 35.807589][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.816861][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.823989][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.831265][ T3302] bridge_slave_0: entered allmulticast mode [ 35.837792][ T3302] bridge_slave_0: entered promiscuous mode [ 35.849486][ T3306] team0: Port device team_slave_1 added [ 35.861121][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.875119][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.882198][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.889401][ T3302] bridge_slave_1: entered allmulticast mode [ 35.895930][ T3302] bridge_slave_1: entered promiscuous mode [ 35.903089][ T3305] team0: Port device team_slave_0 added [ 35.927855][ T3305] team0: Port device team_slave_1 added [ 35.943467][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.950566][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.976521][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.988012][ T3298] team0: Port device team_slave_0 added [ 35.994609][ T3298] team0: Port device team_slave_1 added [ 36.011634][ T3299] hsr_slave_0: entered promiscuous mode [ 36.017751][ T3299] hsr_slave_1: entered promiscuous mode [ 36.024148][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.031136][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.057095][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.073440][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.082831][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.089792][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.115808][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.127163][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.134293][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.160275][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.179989][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.209787][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.216806][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.242745][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.275031][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.282038][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.308027][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.319718][ T3302] team0: Port device team_slave_0 added [ 36.332742][ T3306] hsr_slave_0: entered promiscuous mode [ 36.338787][ T3306] hsr_slave_1: entered promiscuous mode [ 36.344720][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 36.350459][ T3306] Cannot create hsr debugfs directory [ 36.359691][ T3302] team0: Port device team_slave_1 added [ 36.377027][ T3305] hsr_slave_0: entered promiscuous mode [ 36.383046][ T3305] hsr_slave_1: entered promiscuous mode [ 36.388858][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 36.394645][ T3305] Cannot create hsr debugfs directory [ 36.423848][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.431017][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.456968][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.479950][ T3298] hsr_slave_0: entered promiscuous mode [ 36.485963][ T3298] hsr_slave_1: entered promiscuous mode [ 36.491779][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 36.497557][ T3298] Cannot create hsr debugfs directory [ 36.503300][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.510291][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.536323][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.635539][ T3302] hsr_slave_0: entered promiscuous mode [ 36.641542][ T3302] hsr_slave_1: entered promiscuous mode [ 36.647416][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 36.653172][ T3302] Cannot create hsr debugfs directory [ 36.754211][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.762948][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.770712][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.779414][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.794081][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.802841][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.817054][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.825537][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.858281][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.867169][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.875077][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.883573][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.895149][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.903971][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.915251][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.924300][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.944329][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.953354][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.961126][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.969664][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.977609][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.986318][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.998178][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.007295][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.042658][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.051310][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.064360][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.073205][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.081437][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.090115][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.098791][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.107555][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.137537][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.146257][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.154134][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.162780][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.170597][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.179282][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.191641][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.200671][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.218869][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.241834][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.257412][ T403] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.264610][ T403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.282497][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.289620][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.299876][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.316301][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.339732][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.347705][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.361669][ T403] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.368768][ T403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.377631][ T403] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.384752][ T403] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.400905][ T403] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.408071][ T403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.423478][ T403] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.430584][ T403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.450802][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.493750][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.508933][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.519772][ T3305] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.531099][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.546752][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.560657][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.567841][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.576583][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.583689][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.594655][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.601805][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.614448][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.621529][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.684039][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.820018][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.830367][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.949623][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.967328][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.007087][ T3305] veth0_vlan: entered promiscuous mode [ 38.019920][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.028561][ T3299] veth0_vlan: entered promiscuous mode [ 38.041385][ T3305] veth1_vlan: entered promiscuous mode [ 38.048067][ T3299] veth1_vlan: entered promiscuous mode [ 38.087371][ T3305] veth0_macvtap: entered promiscuous mode [ 38.100052][ T3299] veth0_macvtap: entered promiscuous mode [ 38.108344][ T3305] veth1_macvtap: entered promiscuous mode [ 38.119070][ T3299] veth1_macvtap: entered promiscuous mode [ 38.134642][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.148416][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.159472][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.171831][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.189029][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.200532][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.216041][ T30] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.225227][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.248191][ T3306] veth0_vlan: entered promiscuous mode [ 38.255423][ T30] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.268466][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.284362][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.300288][ T30] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.330815][ T3298] veth0_vlan: entered promiscuous mode [ 38.337251][ T3306] veth1_vlan: entered promiscuous mode [ 38.349093][ T3298] veth1_vlan: entered promiscuous mode [ 38.380982][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.398205][ T3298] veth0_macvtap: entered promiscuous mode [ 38.409733][ T3298] veth1_macvtap: entered promiscuous mode [ 38.439112][ T3306] veth0_macvtap: entered promiscuous mode [ 38.455847][ T3306] veth1_macvtap: entered promiscuous mode [ 38.462117][ T3505] netlink: 'syz.0.1': attribute type 11 has an invalid length. [ 38.471445][ T3302] veth0_vlan: entered promiscuous mode [ 38.477077][ T3505] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1'. [ 38.486819][ T3507] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 38.490194][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.504816][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.519368][ T3302] veth1_vlan: entered promiscuous mode [ 38.532291][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.542175][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 38.542191][ T28] audit: type=1400 audit(1780931784.420:165): avc: denied { map_create } for pid=3508 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.598443][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.626248][ T70] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.639926][ T28] audit: type=1400 audit(1780931784.420:166): avc: denied { bpf } for pid=3508 comm="syz.0.6" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.661114][ T70] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.678448][ T28] audit: type=1400 audit(1780931784.430:167): avc: denied { map_read map_write } for pid=3508 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.699637][ T28] audit: type=1400 audit(1780931784.430:168): avc: denied { prog_load } for pid=3508 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.719553][ T70] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.728618][ T70] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.739972][ T3302] veth0_macvtap: entered promiscuous mode [ 38.751478][ T28] audit: type=1400 audit(1780931784.440:169): avc: denied { prog_run } for pid=3508 comm="syz.0.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.770990][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.779969][ T28] audit: type=1400 audit(1780931784.460:170): avc: denied { create } for pid=3510 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 38.806611][ T28] audit: type=1400 audit(1780931784.470:171): avc: denied { create } for pid=3510 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.829153][ T28] audit: type=1400 audit(1780931784.470:172): avc: denied { connect } for pid=3510 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.848820][ T28] audit: type=1400 audit(1780931784.480:173): avc: denied { read write } for pid=3299 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.873862][ T3302] veth1_macvtap: entered promiscuous mode [ 38.877795][ T28] audit: type=1400 audit(1780931784.480:174): avc: denied { open } for pid=3299 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.881864][ T70] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.913345][ T70] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.939878][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.949894][ T70] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.972460][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.995169][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.008927][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.042620][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.060609][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.279830][ T3536] netlink: 20 bytes leftover after parsing attributes in process `syz.2.15'. [ 39.315917][ T3530] netlink: 'syz.3.4': attribute type 1 has an invalid length. [ 39.332773][ T3530] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 39.352580][ T3536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 39.401515][ T3545] netlink: 'syz.4.17': attribute type 1 has an invalid length. [ 39.419334][ T3542] netlink: 64 bytes leftover after parsing attributes in process `syz.0.16'. [ 39.494064][ T3542] syzkaller1: entered promiscuous mode [ 39.499784][ T3542] syzkaller1: entered allmulticast mode [ 39.552484][ T3555] netlink: 'syz.3.22': attribute type 1 has an invalid length. [ 39.686777][ T3564] syz_tun: entered allmulticast mode [ 39.711011][ T3563] syz_tun: left allmulticast mode [ 39.772159][ T3572] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.796434][ T3569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.28'. [ 39.929652][ T3579] loop1: detected capacity change from 0 to 128 [ 39.936908][ T3578] loop3: detected capacity change from 0 to 512 [ 39.956226][ T3578] EXT4-fs: Ignoring removed bh option [ 40.063019][ T3578] EXT4-fs (loop3): 1 truncate cleaned up [ 40.084912][ T3578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.100994][ T3587] syz.1.31: attempt to access beyond end of device [ 40.100994][ T3587] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 40.118746][ T3578] EXT4-fs (loop3): shut down requested (1) [ 40.126600][ T3587] syz.1.31: attempt to access beyond end of device [ 40.126600][ T3587] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 40.134731][ T3578] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 40.144388][ T3587] syz.1.31: attempt to access beyond end of device [ 40.144388][ T3587] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 40.149567][ T3578] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 40.171022][ T3578] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=12 [ 40.172461][ T3587] syz.1.31: attempt to access beyond end of device [ 40.172461][ T3587] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 40.196986][ T3587] syz.1.31: attempt to access beyond end of device [ 40.196986][ T3587] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 40.208400][ T3578] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 40.210511][ T3587] syz.1.31: attempt to access beyond end of device [ 40.210511][ T3587] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 40.222914][ T3578] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 40.233781][ T3587] syz.1.31: attempt to access beyond end of device [ 40.233781][ T3587] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 40.242150][ T3578] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 40.264842][ T3587] syz.1.31: attempt to access beyond end of device [ 40.264842][ T3587] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 40.278978][ T3587] syz.1.31: attempt to access beyond end of device [ 40.278978][ T3587] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 40.297928][ T3587] syz.1.31: attempt to access beyond end of device [ 40.297928][ T3587] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 40.337960][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.627399][ T3572] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.175637][ T3592] syz.3.36 (3592) used greatest stack depth: 9856 bytes left [ 41.237497][ T3596] syz.3.36 (3596) used greatest stack depth: 9840 bytes left [ 41.547860][ T3572] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.584666][ T3615] loop1: detected capacity change from 0 to 1024 [ 41.605118][ T3615] ======================================================= [ 41.605118][ T3615] WARNING: The mand mount option has been deprecated and [ 41.605118][ T3615] and is ignored by this kernel. Remove the mand [ 41.605118][ T3615] option from the mount to silence this warning. [ 41.605118][ T3615] ======================================================= [ 41.669671][ T3572] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.684214][ T3615] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.712130][ T3622] loop4: detected capacity change from 0 to 256 [ 41.731981][ T3615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 41.748675][ T3615] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.751759][ T3622] FAT-fs (loop4): codepage cp1255 not found [ 41.778565][ T70] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.804615][ T70] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.827226][ T3615] EXT4-fs error (device loop1): ext4_map_blocks:833: inode #15: comm syz.1.44: lblock 0 mapped to illegal pblock 0 (length 1) [ 41.849296][ T3622] xt_hashlimit: size too large, truncated to 1048576 [ 41.868946][ T36] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.891259][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.956660][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 42.150461][ T3650] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 42.190723][ T3650] team0 (unregistering): Port device team_slave_0 removed [ 42.216392][ T3650] team0 (unregistering): Failed to send options change via netlink (err -105) [ 42.228382][ T3650] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 42.239455][ T3650] team0 (unregistering): Port device team_slave_1 removed [ 42.291881][ T3662] loop0: detected capacity change from 0 to 512 [ 42.308157][ T3652] loop1: detected capacity change from 0 to 512 [ 42.317227][ T3662] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.349248][ T3662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.374418][ T3662] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 3: comm syz.0.62: path (unknown): bad entry in directory: directory entry overrun - offset=12, inode=514, rec_len=2048, size=2048 fake=0 [ 42.397346][ T3662] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 12: comm syz.0.62: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 42.419768][ T3662] EXT4-fs error (device loop0): ext4_readdir:265: inode #2: block 13: comm syz.0.62: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 42.440828][ T3652] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 42.480348][ T3652] EXT4-fs (loop1): 1 truncate cleaned up [ 42.499990][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.513891][ T3652] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.550893][ T3675] loop3: detected capacity change from 0 to 512 [ 42.557834][ T3675] EXT4-fs: Ignoring removed orlov option [ 42.576848][ T3675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.605659][ T3681] loop4: detected capacity change from 0 to 256 [ 42.619564][ T3675] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 42.642844][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.651423][ T3683] netlink: 'syz.0.69': attribute type 10 has an invalid length. [ 42.677299][ T3683] team0: Failed to send options change via netlink (err -105) [ 42.685133][ T3675] EXT4-fs error (device loop3): ext4_xattr_block_get:597: inode #15: comm syz.3.66: corrupted xattr block 33: invalid ea_ino [ 42.692881][ T3683] team0: Port device dummy0 added [ 42.704410][ T3675] EXT4-fs (loop3): Remounting filesystem read-only [ 42.714671][ T3684] netlink: 'syz.0.69': attribute type 10 has an invalid length. [ 42.722988][ T3684] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 42.733814][ T3675] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 42.743326][ T3675] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 42.752372][ T3684] team0: Failed to send options change via netlink (err -105) [ 42.761366][ T3684] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 42.773481][ T3684] team0: Port device dummy0 removed [ 42.790781][ T3684] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 42.801294][ T3675] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 42.851548][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.878067][ T3690] syz_tun: entered allmulticast mode [ 42.905066][ T3690] pimreg: entered allmulticast mode [ 42.916513][ T3694] netlink: 'syz.3.71': attribute type 1 has an invalid length. [ 42.958419][ T3690] pimreg: left allmulticast mode [ 42.989486][ T3699] netlink: 'syz.3.71': attribute type 10 has an invalid length. [ 43.005032][ T3699] netlink: 40 bytes leftover after parsing attributes in process `syz.3.71'. [ 43.014357][ T3699] dummy0: entered promiscuous mode [ 43.043075][ T3690] syz_tun: left allmulticast mode [ 43.152040][ T3709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 43.166423][ T3709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.79'. [ 43.175458][ T49] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.185130][ T49] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.195422][ T3709] Zero length message leads to an empty skb [ 43.201609][ T49] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.217758][ T49] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.443397][ T3727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 43.495541][ T3727] xfrm1: entered promiscuous mode [ 43.502202][ T3731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.89'. [ 43.517374][ T3727] xfrm1: entered allmulticast mode [ 43.524571][ T3727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 43.721467][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 43.721484][ T28] audit: type=1400 audit(1780931789.600:268): avc: denied { setopt } for pid=3753 comm="syz.1.95" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.777769][ T3758] loop3: detected capacity change from 0 to 512 [ 43.786564][ T3744] loop0: detected capacity change from 0 to 512 [ 43.829927][ T28] audit: type=1400 audit(1780931789.710:269): avc: denied { create } for pid=3759 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.840653][ T3758] ext2: Unknown parameter 'fsuuid' [ 43.880497][ T3744] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.892670][ T28] audit: type=1400 audit(1780931789.760:270): avc: denied { setopt } for pid=3759 comm="syz.1.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 43.927128][ T28] audit: type=1400 audit(1780931789.810:271): avc: denied { ioctl } for pid=3757 comm="syz.3.96" path="socket:[6216]" dev="sockfs" ino=6216 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 43.971564][ T3758] syzkaller0: entered promiscuous mode [ 43.977310][ T3758] syzkaller0: entered allmulticast mode [ 44.099585][ T3744] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.168933][ T3744] ext4 filesystem being mounted at /18/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.227567][ T28] audit: type=1400 audit(1780931790.110:272): avc: denied { write } for pid=3743 comm="syz.0.92" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.267367][ T28] audit: type=1400 audit(1780931790.150:273): avc: denied { relabelfrom } for pid=3775 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 44.324480][ T28] audit: type=1400 audit(1780931790.150:274): avc: denied { relabelto } for pid=3775 comm="syz.3.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 44.360182][ T28] audit: type=1400 audit(1780931790.170:275): avc: denied { write open } for pid=3743 comm="syz.0.92" path="/18/file2/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.369772][ T3776] syzkaller0: entered promiscuous mode [ 44.393023][ T28] audit: type=1400 audit(1780931790.230:276): avc: denied { create } for pid=3779 comm="syz.1.104" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 44.425647][ T3776] syzkaller0: entered allmulticast mode [ 44.431406][ T28] audit: type=1400 audit(1780931790.310:277): avc: denied { setopt } for pid=3781 comm="syz.2.105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 44.473128][ T3785] pimreg: entered allmulticast mode [ 44.495002][ T3743] pimreg: left allmulticast mode [ 44.599443][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.755656][ T3807] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.115: inode has both inline data and extents flags [ 44.775830][ T3807] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 44.777863][ T3807] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.115: couldn't read orphan inode 15 (err -117) [ 44.787151][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 44.787181][ C0] EXT4-fs (loop4): initial error at time 1780931790: ext4_orphan_get:1397: inode 15 [ 44.787287][ C0] EXT4-fs (loop4): last error at time 1780931790: ext4_orphan_get:1397: inode 15 [ 44.825199][ T3807] loop4: lost filesystem error report for type 5 error -117 [ 44.829105][ T3807] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.436620][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.451057][ T3830] netlink: 28 bytes leftover after parsing attributes in process `syz.1.125'. [ 45.509199][ T3835] set_capacity_and_notify: 2 callbacks suppressed [ 45.509365][ T3835] loop4: detected capacity change from 0 to 128 [ 45.588790][ T3835] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000f0b) [ 45.599837][ T3835] FAT-fs (loop4): Filesystem has been set read-only [ 45.613382][ T3835] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000f0b) [ 45.616897][ T3840] loop1: detected capacity change from 0 to 256 [ 45.635071][ T3835] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000f0b) [ 45.796466][ T3840] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.841789][ T3840] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.889856][ T3840] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.907552][ T3840] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.924554][ T3840] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.936856][ T3840] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.950596][ T3840] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.964124][ T3840] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 45.988247][ T3840] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 46.005429][ T3840] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 46.290524][ T3875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.299621][ T3875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.321989][ T3875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.339740][ T3875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.627773][ T3895] netlink: 76 bytes leftover after parsing attributes in process `syz.4.150'. [ 46.649725][ T3379] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 46.659916][ T3379] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.695512][ T3870] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.711367][ T3870] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.762697][ T3870] bridge_slave_0: entered allmulticast mode [ 46.788090][ T3870] bridge_slave_0: entered promiscuous mode [ 46.809051][ T3870] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.829569][ T3870] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.855141][ T3870] bridge_slave_1: entered allmulticast mode [ 46.876024][ T3870] bridge_slave_1: entered promiscuous mode [ 46.904052][ T3910] netlink: 'syz.3.156': attribute type 1 has an invalid length. [ 46.948711][ T3910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 46.961230][ T3870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.983019][ T3900] loop1: detected capacity change from 0 to 512 [ 46.989409][ T3870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.005259][ T3900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.017916][ T3910] vlan2: entered allmulticast mode [ 47.026491][ T3910] bond1: entered allmulticast mode [ 47.068803][ T3900] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 47.085877][ T3913] bond1: (slave geneve2): making interface the new active one [ 47.102591][ T3913] geneve2: entered allmulticast mode [ 47.111290][ T3900] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 47.133822][ T3913] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 47.150425][ T3870] team0: Port device team_slave_0 added [ 47.191339][ T3870] team0: Port device team_slave_1 added [ 47.213512][ T3900] EXT4-fs (loop1): failed to initialize system zone (-117) [ 47.222989][ T3900] EXT4-fs (loop1): mount failed [ 47.250961][ T3870] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.258139][ T3870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.284375][ T3870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.295806][ T3870] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.302981][ T3870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.328977][ T3870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.398869][ T3870] hsr_slave_0: entered promiscuous mode [ 47.412107][ T3870] hsr_slave_1: entered promiscuous mode [ 47.427442][ T3870] debugfs: 'hsr0' already exists in 'hsr' [ 47.439976][ T3870] Cannot create hsr debugfs directory [ 47.598802][ T3870] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.664383][ T3870] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.717612][ T3870] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.787454][ T3870] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.867874][ T3870] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.876815][ T3870] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.884746][ T3870] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.897602][ T3870] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.910808][ T3870] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.927999][ T3870] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.938751][ T3870] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.951783][ T3870] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.962167][ T3946] netlink: 44 bytes leftover after parsing attributes in process `syz.1.165'. [ 48.033941][ T3870] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.048267][ T3870] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.058688][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.065794][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.085050][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.092168][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.104918][ T3954] netlink: 830 bytes leftover after parsing attributes in process `syz.1.166'. [ 48.382203][ T3870] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.463132][ T3977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.474029][ T3977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.536076][ T3870] veth0_vlan: entered promiscuous mode [ 48.553555][ T3870] veth1_vlan: entered promiscuous mode [ 48.590307][ T3870] veth0_macvtap: entered promiscuous mode [ 48.606297][ T3870] veth1_macvtap: entered promiscuous mode [ 48.630892][ T3870] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.649474][ T3870] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.679724][ T70] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.694774][ T70] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.715047][ T70] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.724073][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.797746][ T3986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.143'. [ 48.808308][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 48.808325][ T28] audit: type=1400 audit(1780931794.690:335): avc: denied { write } for pid=3985 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 48.927384][ T70] bridge_slave_1: left allmulticast mode [ 48.933133][ T70] bridge_slave_1: left promiscuous mode [ 48.938831][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.948052][ T70] bridge_slave_0: left allmulticast mode [ 48.962751][ T70] bridge_slave_0: left promiscuous mode [ 48.972741][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.015952][ T28] audit: type=1326 audit(1780931794.900:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.0.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039accce59 code=0x7ffc0000 [ 49.082041][ T28] audit: type=1326 audit(1780931794.900:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.0.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039accce59 code=0x7ffc0000 [ 49.145952][ T28] audit: type=1326 audit(1780931794.900:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.0.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f039accce59 code=0x7ffc0000 [ 49.171753][ T28] audit: type=1326 audit(1780931794.900:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.0.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f039accce59 code=0x7ffc0000 [ 49.199148][ T28] audit: type=1326 audit(1780931794.960:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.0.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f039ac8d68e code=0x7ffc0000 [ 49.225117][ T28] audit: type=1326 audit(1780931794.960:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.0.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f039ac8d68e code=0x7ffc0000 [ 49.252997][ T28] audit: type=1326 audit(1780931794.960:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.0.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f039ac8d68e code=0x7ffc0000 [ 49.278544][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.287476][ T28] audit: type=1326 audit(1780931794.970:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.0.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f039ac8d68e code=0x7ffc0000 [ 49.315857][ T3763] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 49.322467][ T28] audit: type=1326 audit(1780931794.970:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3989 comm="syz.0.172" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f039ac8d68e code=0x7ffc0000 [ 49.348463][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.372640][ T70] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 49.391299][ T70] bond0 (unregistering): Released all slaves [ 49.439809][ T3994] ipvlan2: entered promiscuous mode [ 49.474148][ T3994] bridge0: port 3(ipvlan2) entered blocking state [ 49.482021][ T3994] bridge0: port 3(ipvlan2) entered disabled state [ 49.494292][ T3994] ipvlan2: entered allmulticast mode [ 49.500180][ T3994] bridge0: entered allmulticast mode [ 49.527623][ T3994] ipvlan2: left allmulticast mode [ 49.534732][ T3994] bridge0: left allmulticast mode [ 49.748004][ T3996] sch_tbf: burst 21990 is lower than device lo mtu (65550) ! [ 49.760567][ T70] hsr_slave_0: left promiscuous mode [ 49.774295][ T70] hsr_slave_1: left promiscuous mode [ 49.785675][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.809793][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.825090][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.832740][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.849431][ T70] veth1_macvtap: left promiscuous mode [ 49.861233][ T70] veth0_macvtap: left promiscuous mode [ 49.874874][ T70] veth1_vlan: left promiscuous mode [ 49.885578][ T70] veth0_vlan: left promiscuous mode [ 50.012546][ T70] team0 (unregistering): Port device team_slave_1 removed [ 50.028875][ T70] team0 (unregistering): Port device team_slave_0 removed [ 50.637444][ T4134] loop2: detected capacity change from 0 to 128 [ 50.779724][ T4140] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 51.231515][ T4158] loop3: detected capacity change from 0 to 764 [ 51.257679][ T4158] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 51.998696][ T4179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.204'. [ 52.001675][ T4181] netlink: 24 bytes leftover after parsing attributes in process `syz.4.205'. [ 52.039703][ T4177] loop3: detected capacity change from 0 to 8192 [ 52.049033][ T4177] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 52.592344][ T4203] netlink: 20 bytes leftover after parsing attributes in process `syz.2.213'. [ 53.619029][ T4253] netlink: 'syz.2.235': attribute type 1 has an invalid length. [ 53.679731][ T4253] 8021q: adding VLAN 0 to HW filter on device bond2 [ 53.688226][ T4253] bond1: (slave bond2): making interface the new active one [ 53.711078][ T4253] bond1: (slave bond2): Enslaving as an active interface with an up link [ 53.748762][ T4253] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 53.771087][ T4253] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 53.788336][ T4253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.837005][ T4274] loop2: detected capacity change from 0 to 1024 [ 53.851743][ T4274] __quota_error: 37 callbacks suppressed [ 53.851760][ T4274] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 53.886535][ T4274] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 53.910985][ T4274] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.244: Failed to acquire dquot type 0 [ 53.931312][ T4270] loop4: detected capacity change from 0 to 8192 [ 53.940461][ T4280] loop0: detected capacity change from 0 to 512 [ 53.949050][ T4274] loop2: lost filesystem error report for type 5 error -5 [ 53.949610][ T4274] EXT4-fs (loop2): 1 truncate cleaned up [ 53.956761][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 53.956774][ C0] EXT4-fs (loop2): initial error at time 1780931799: ext4_acquire_dquot:7034 [ 53.956791][ C0] EXT4-fs (loop2): last error at time 1780931799: ext4_acquire_dquot:7034 [ 53.987585][ T4274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.001482][ T4280] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 54.015410][ T4274] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 54.025998][ T28] audit: type=1400 audit(1780931799.900:382): avc: denied { write } for pid=4273 comm="syz.2.244" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.048516][ T4270] loop4: p1 p2 p3 p4 [ 54.053997][ T4270] loop4: p1 size 51621 extends beyond EOD, truncated [ 54.062763][ T4270] loop4: p2 size 117440512 extends beyond EOD, truncated [ 54.070024][ T4274] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 54.080349][ T4270] loop4: p3 start 589824 is beyond EOD, truncated [ 54.087180][ T4274] EXT4-fs error (device loop2): ext4_acquire_dquot:7034: comm syz.2.244: Failed to acquire dquot type 0 [ 54.098503][ T4270] loop4: p4 size 33554943 extends beyond EOD, truncated [ 54.121653][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.202480][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 54.214541][ T3291] udevd[3291]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 54.226579][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 54.253168][ T4286] loop0: detected capacity change from 0 to 512 [ 54.294384][ T4286] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 54.333587][ T4286] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.247: iget: bad i_size value: 38620345925642 [ 54.355750][ T4286] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 54.359971][ T4286] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.247: couldn't read orphan inode 15 (err -117) [ 54.372578][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 54.387612][ C1] EXT4-fs (loop0): initial error at time 1780931800: ext4_orphan_get:1397: inode 15 [ 54.397084][ C1] EXT4-fs (loop0): last error at time 1780931800: ext4_orphan_get:1397: inode 15 [ 54.397879][ T4286] loop0: lost filesystem error report for type 5 error -117 [ 54.408945][ T4286] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.431782][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.438966][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.449467][ T3393] IPVS: starting estimator thread 0... [ 54.460321][ T4286] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 54.482435][ T3870] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.493311][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.503219][ T4296] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.526963][ T4304] loop0: detected capacity change from 0 to 256 [ 54.534468][ T4304] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 54.562571][ T4302] IPVS: using max 2400 ests per chain, 120000 per kthread [ 54.569773][ T28] audit: type=1400 audit(1780931800.440:383): avc: denied { execute } for pid=4303 comm="syz.0.254" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6997 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 54.722294][ T4118] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.732333][ T4118] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.743302][ T4118] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.848015][ T4118] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.929427][ T4311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.938088][ T4311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.948764][ T28] audit: type=1400 audit(1780931800.830:384): avc: denied { read } for pid=4310 comm="syz.1.257" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 54.977576][ T28] audit: type=1400 audit(1780931800.830:385): avc: denied { open } for pid=4310 comm="syz.1.257" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 55.319180][ T4317] syzkaller0: entered promiscuous mode [ 55.324821][ T4317] syzkaller0: entered allmulticast mode [ 55.537660][ T4327] loop0: detected capacity change from 0 to 512 [ 55.545995][ T4327] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.555579][ T4327] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 55.567782][ T4327] EXT4-fs (loop0): 1 truncate cleaned up [ 55.573998][ T4327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.592115][ T28] audit: type=1400 audit(1780931801.470:386): avc: denied { write } for pid=4326 comm="syz.0.264" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.613704][ T28] audit: type=1400 audit(1780931801.470:387): avc: denied { append } for pid=4326 comm="syz.0.264" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 55.719541][ T3870] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.619910][ T4341] capability: warning: `syz.1.269' uses 32-bit capabilities (legacy support in use) [ 56.899879][ T4365] loop3: detected capacity change from 0 to 128 [ 56.948619][ T4370] loop2: detected capacity change from 0 to 512 [ 56.953706][ T4365] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 56.968289][ T4370] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.999920][ T4370] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 57.018431][ T4370] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 57.020498][ T4365] FAT-fs (loop3): error, clusters badly computed (2 != 1) [ 57.034511][ T4370] EXT4-fs (loop2): 1 truncate cleaned up [ 57.035226][ T4370] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.043617][ T4365] FAT-fs (loop3): Filesystem has been set read-only [ 57.070642][ T4365] FAT-fs (loop3): error, clusters badly computed (3 != 2) [ 57.080189][ T4365] FAT-fs (loop3): error, clusters badly computed (4 != 3) [ 57.089966][ T4365] FAT-fs (loop3): error, clusters badly computed (5 != 4) [ 57.098770][ T4365] FAT-fs (loop3): error, clusters badly computed (6 != 5) [ 57.106897][ T4365] FAT-fs (loop3): error, clusters badly computed (7 != 6) [ 57.115808][ T4365] FAT-fs (loop3): error, clusters badly computed (8 != 7) [ 57.126084][ T4365] FAT-fs (loop3): error, clusters badly computed (9 != 8) [ 57.135062][ T4365] FAT-fs (loop3): error, clusters badly computed (10 != 9) [ 57.144028][ T4365] FAT-fs (loop3): error, clusters badly computed (11 != 10) [ 57.289142][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.526453][ T3306] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 57.639562][ T4386] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 57.725809][ T4397] ip6gretap1: entered promiscuous mode [ 57.843643][ T4402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 57.957396][ T4413] netlink: 24 bytes leftover after parsing attributes in process `syz.3.294'. [ 58.064409][ T4423] loop1: detected capacity change from 0 to 512 [ 58.092225][ T4427] process 'syz.0.300' launched './file0' with NULL argv: empty string added [ 58.170315][ T4423] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.296: inode has both inline data and extents flags [ 58.288047][ T4437] loop0: detected capacity change from 0 to 1764 [ 58.340259][ T4423] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 58.341023][ T4423] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.296: couldn't read orphan inode 15 (err -117) [ 58.350257][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 58.350281][ C1] EXT4-fs (loop1): initial error at time 1780931804: ext4_orphan_get:1397: inode 15 [ 58.350319][ C1] EXT4-fs (loop1): last error at time 1780931804: ext4_orphan_get:1397: inode 15 [ 58.389612][ T4423] loop1: lost filesystem error report for type 5 error -117 [ 58.393244][ T4423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.036088][ T28] kauditd_printk_skb: 425 callbacks suppressed [ 59.036104][ T28] audit: type=1400 audit(1780931804.920:813): avc: denied { bind } for pid=4448 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.063693][ T28] audit: type=1400 audit(1780931804.920:814): avc: denied { name_bind } for pid=4448 comm="syz.3.310" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 59.088029][ T28] audit: type=1400 audit(1780931804.920:815): avc: denied { node_bind } for pid=4448 comm="syz.3.310" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 59.116191][ T28] audit: type=1400 audit(1780931805.000:816): avc: denied { create } for pid=4448 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.145728][ T28] audit: type=1400 audit(1780931805.000:817): avc: denied { ioctl } for pid=4448 comm="syz.3.310" path="socket:[8224]" dev="sockfs" ino=8224 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 59.642693][ T4433] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 256: padding at end of block bitmap is not set [ 61.295451][ T28] audit: type=1400 audit(1780931807.180:818): avc: denied { create } for pid=4458 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.353384][ T28] audit: type=1400 audit(1780931807.180:819): avc: denied { bind } for pid=4458 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.373268][ T28] audit: type=1400 audit(1780931807.180:820): avc: denied { setopt } for pid=4458 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.392978][ T28] audit: type=1400 audit(1780931807.180:821): avc: denied { write } for pid=4458 comm="syz.2.314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.423375][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.454607][ T4469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 61.481240][ T4469] netlink: 8 bytes leftover after parsing attributes in process `syz.2.318'. [ 61.587406][ T4481] tipc: Failed to remove unknown binding: 66,0,0/0:2963311528/2963311529 [ 61.718268][ T4486] loop2: detected capacity change from 0 to 512 [ 61.762313][ T4486] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.812662][ T28] audit: type=1400 audit(1780931807.690:822): avc: denied { setattr } for pid=4485 comm="syz.2.326" name="file1" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 61.947958][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.249922][ T4497] netlink: 'syz.2.331': attribute type 21 has an invalid length. [ 62.368171][ T4501] netlink: 24 bytes leftover after parsing attributes in process `syz.2.333'. [ 62.497699][ T4501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.333'. [ 62.657273][ T4519] loop3: detected capacity change from 0 to 1024 [ 62.672351][ T4519] EXT4-fs: Ignoring removed bh option [ 62.696931][ T4519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 62.760705][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.051762][ T4551] loop2: detected capacity change from 0 to 128 [ 63.053687][ T4549] netlink: 20 bytes leftover after parsing attributes in process `syz.0.352'. [ 63.075293][ T4551] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 63.091357][ T4551] ext4 filesystem being mounted at /81/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.115993][ T4554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'. [ 63.158504][ T3298] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 63.284059][ T4565] loop0: detected capacity change from 0 to 512 [ 63.308018][ T4565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.324936][ T4565] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.343946][ T4569] loop1: detected capacity change from 0 to 128 [ 63.355790][ T4569] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 63.378238][ T4569] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.394292][ T4118] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.404265][ T4569] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 63.510289][ T4565] syz.0.359 (4565) used greatest stack depth: 9792 bytes left [ 63.523852][ T3870] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.150743][ T4606] loop3: detected capacity change from 0 to 256 [ 64.653110][ T4615] syzkaller0: entered promiscuous mode [ 64.659254][ T4615] syzkaller0: entered allmulticast mode [ 64.752973][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 64.752989][ T28] audit: type=1326 audit(1780931810.630:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.4.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b7a2ce59 code=0x7ffc0000 [ 64.826515][ T4619] loop2: detected capacity change from 0 to 128 [ 64.842863][ T28] audit: type=1326 audit(1780931810.630:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.4.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b7a2ce59 code=0x7ffc0000 [ 64.924808][ T28] audit: type=1326 audit(1780931810.630:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.4.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b7a2ce59 code=0x7ffc0000 [ 65.008885][ T28] audit: type=1326 audit(1780931810.640:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.4.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f44b7a2ce59 code=0x7ffc0000 [ 65.067033][ T4621] capability: warning: `syz.2.381' uses deprecated v2 capabilities in a way that may be insecure [ 65.090454][ T28] audit: type=1326 audit(1780931810.640:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.4.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b7a2ce59 code=0x7ffc0000 [ 65.164329][ T28] audit: type=1326 audit(1780931810.670:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.4.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b7a2ce59 code=0x7ffc0000 [ 65.245000][ T28] audit: type=1326 audit(1780931810.670:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.4.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b7a2ce59 code=0x7ffc0000 [ 65.336939][ T28] audit: type=1326 audit(1780931810.670:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.4.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f44b7a2ce59 code=0x7ffc0000 [ 65.411542][ T28] audit: type=1326 audit(1780931810.670:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.4.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b7a2ce59 code=0x7ffc0000 [ 65.491434][ T28] audit: type=1326 audit(1780931810.670:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4616 comm="syz.4.379" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44b7a2ce59 code=0x7ffc0000 [ 66.392569][ T4664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.398'. [ 66.422704][ T4664] bond0: (slave bond_slave_0): Releasing backup interface [ 66.465485][ T4664] bond_slave_0: entered promiscuous mode [ 66.471494][ T4664] bond_slave_0: entered allmulticast mode [ 67.078065][ T4702] loop0: detected capacity change from 0 to 512 [ 67.105362][ T4702] EXT4-fs: Ignoring removed i_version option [ 67.129889][ T4702] EXT4-fs: Ignoring removed nobh option [ 67.151443][ T4702] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.187660][ T4702] EXT4-fs (loop0): orphan cleanup on readonly fs [ 67.202102][ T4702] EXT4-fs error (device loop0): ext4_iget_extra_inode:5128: inode #15: comm syz.0.407: corrupted in-inode xattr: overlapping e_value [ 67.252615][ T4702] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.259932][ T4702] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.407: couldn't read orphan inode 15 (err -117) [ 67.269148][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 67.269165][ C1] EXT4-fs (loop0): initial error at time 1780931813: ext4_iget_extra_inode:5128: inode 15 [ 67.269194][ C1] EXT4-fs (loop0): last error at time 1780931813: ext4_iget_extra_inode:5128: inode 15 [ 67.307222][ T4702] loop0: lost filesystem error report for type 5 error -117 [ 67.315090][ T4702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 67.547308][ T3870] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.151499][ T4761] io-wq is not configured for unbound workers [ 68.202242][ T4765] batadv_slave_1: entered promiscuous mode [ 68.234419][ T4765] netlink: 24 bytes leftover after parsing attributes in process `syz.0.429'. [ 68.295002][ T4765] tc_dump_action: action bad kind [ 68.310080][ T4770] batadv_slave_1: left promiscuous mode [ 68.529100][ T4751] ================================================================== [ 68.537253][ T4751] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 68.545877][ T4751] [ 68.548221][ T4751] write to 0xffff88810508dd60 of 8 bytes by task 4759 on cpu 0: [ 68.549016][ T4778] ªªªªªª: renamed from vlan0 (while UP) [ 68.555865][ T4751] shmem_file_splice_read+0x40e/0x5a0 [ 68.555901][ T4751] splice_direct_to_actor+0x26e/0x670 [ 68.572208][ T4751] do_splice_direct+0x119/0x1a0 [ 68.577105][ T4751] do_sendfile+0x382/0x650 [ 68.581553][ T4751] __x64_sys_sendfile64+0x105/0x150 [ 68.586774][ T4751] x64_sys_call+0x2dc4/0x3020 [ 68.591476][ T4751] do_syscall_64+0x12c/0x3b0 [ 68.596092][ T4751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.602015][ T4751] [ 68.604352][ T4751] write to 0xffff88810508dd60 of 8 bytes by task 4751 on cpu 1: [ 68.611988][ T4751] shmem_file_splice_read+0x40e/0x5a0 [ 68.617391][ T4751] splice_direct_to_actor+0x26e/0x670 [ 68.622810][ T4751] do_splice_direct+0x119/0x1a0 [ 68.627702][ T4751] do_sendfile+0x382/0x650 [ 68.632142][ T4751] __x64_sys_sendfile64+0x105/0x150 [ 68.637368][ T4751] x64_sys_call+0x2dc4/0x3020 [ 68.642076][ T4751] do_syscall_64+0x12c/0x3b0 [ 68.646689][ T4751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.652629][ T4751] [ 68.654984][ T4751] value changed: 0x0000000000002e00 -> 0x0000000000002e04 [ 68.662104][ T4751] [ 68.664460][ T4751] Reported by Kernel Concurrency Sanitizer on: [ 68.670652][ T4751] CPU: 1 UID: 0 PID: 4751 Comm: syz.4.422 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.679886][ T4751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 68.689964][ T4751] ================================================================== [ 77.157769][ T28] kauditd_printk_skb: 104 callbacks suppressed [ 77.157785][ T28] audit: type=1400 audit(1780931823.040:958): avc: denied { write } for pid=4787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.193858][ T28] audit: type=1400 audit(1780931823.080:959): avc: denied { write } for pid=4798 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.977588][ T28] audit: type=1400 audit(1780931823.860:960): avc: denied { write } for pid=4802 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 78.010239][ T28] audit: type=1400 audit(1780931823.890:961): avc: denied { write } for pid=4813 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1