last executing test programs: 46.023889047s ago: executing program 2 (id=19): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f00000003c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000a"], 0x0, 0x4a, 0x0, 0x1}, 0x28) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$setperm(0x5, r1, 0x2008) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) 45.997582307s ago: executing program 2 (id=20): unshare(0x400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x3f9) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x40049366, 0x0) 45.92112426s ago: executing program 2 (id=21): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r2, 0x25, 0x0, @val=@iter={0x0}}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x3e, r3}, 0x5) 45.217440423s ago: executing program 2 (id=32): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@resuid}, {@auto_da_alloc}, {@errors_continue}, {@data_err_ignore}, {@delalloc}, {@barrier}]}, 0x1, 0xbd8, &(0x7f00000014c0)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x20000ac8) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) rename(0x0, 0x0) 44.98736741s ago: executing program 2 (id=38): sched_setscheduler(0x0, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) unshare(0x6020400) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket(0x40000000015, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x30000004}) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x7c0e, 0x0, 0x0) 44.731038289s ago: executing program 2 (id=40): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x7d, 0x3, 0x7fff, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffb, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 44.730877589s ago: executing program 32 (id=40): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x9, 0x7d, 0x3, 0x7fff, 0x116, 0xffffffffffffffff, 0xffffffff}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x8, &(0x7f00000000c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbffffb, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x88, 0x0, 0x5, 0x1, 0x0, 0x1, 0x8000064}, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 28.587756097s ago: executing program 1 (id=232): socket(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) msync(&(0x7f00001f9000/0x4000)=nil, 0x4000, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x3ff]}, 0x0, 0x0, 0x8) 28.532178109s ago: executing program 1 (id=234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 28.431518862s ago: executing program 1 (id=236): io_setup(0x2278, &(0x7f0000000180)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8002}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) io_submit(r0, 0x1, &(0x7f0000000140)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000080)='5', 0x1, 0x0, 0x0, 0x2}]) r2 = syz_clone(0x40900100, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x0, r2, 0x0) 28.274827007s ago: executing program 4 (id=237): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) unshare(0x4a000000) syz_usb_disconnect(0xffffffffffffffff) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000240)={'nat\x00', 0x0, 0x0, 0x0, [0x48, 0x8, 0xffff, 0xf, 0x1, 0xffffffffffffffbd], 0x1, 0x0, 0x0, [{}]}, 0x88) 28.211901479s ago: executing program 1 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', 0x0, 0xa53059, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x8f881, 0x0) unshare(0x22020600) unshare(0x22020400) 28.161941551s ago: executing program 1 (id=239): unshare(0x8040600) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000444, &(0x7f0000000040)={[{@lazytime}, {@errors_remount}, {@resuid}, {@nobarrier}, {@usrjquota}, {@nodioread_nolock}]}, 0x1, 0x5a2, &(0x7f0000000180)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KAruzubpummbtJsVrO/H0zyvjOz87zvzD7v7gwzbAB962j9TxrxVERcTCKG1y0biGzh0eZ6qytLxfsrS8UkarVLvySRRMS9laVia/0k+38oIpYj4v8R8U0+4ni6tsl9rUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2Mnx9Y3935tfS2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC1b34+d1Nwn+Ti3Yf7pbgTroaTXDWBbclme11PpfzEcuSzr26mtHxwGd6V5QBfVBiNqQJ9K5D/0qdb3gPr5b2vaze8fd843T0DqcVdXlorvRCv+QPPaROxvnJsc/DV56Mykfr55eDcbyp60fD0iRgcGHn3/J9n7b/tGd6KBdNXX55sH6tHjn66NP9Fm/BlqXTt9Qq3xbzUb/1bbxM81xrpHx7+LHcb4/fWfPto0/vXBeLpt/GQtftKm/2lEvNlh/FuvfXl2s2W1jyOORfv4Lcnjrw+PXL5SLo02/7aN8dWxIy9v3v+Ig5vEb16z3d/4mFnf/31Zm9IO+//Ft58/s/yY+M8/+/jj327/H4iI9zqM/597n7y62bI715O79W8BWz3+SeTjdofxXzh39Ies6KohAAAAAAAAAADsoLRxL1uSFtbKaVooNJ/h/W8cTMuV6tzxy5X5mYnmPW+HI5+27rQabtaTen0sux+3VT+5oX4qlwXMHWjUC8VKeaLHfQcAAAAAAAAAAAAAAAAAAIC/i0Mbnv//Ldd4/n/jz1UDe9XmP/kN7HXyH/rXw/mf9KwdwO7z+Q99qyb/oX/Jf+hf8h/6l/yH/iX/oX/Jf+hf8h8AAAAAAAAAAAAAAAAAAAAAAAAAALri4oUL9al2f2WpWK9PDCzMT1XeOjFRqk4VpueLhWJl9mphslKZLJcKxcr0X20vqVSujsbM/LWRuVJ1bqS6sPjGdGV+pvWboqV813sEAAAAAAAAAAAAAAAAAAAA/zxDjSlJCxH5Zj1NC4WIf0XE4SSSy1fKpdGI+HdEfJ/LD9brY71uNAAAAAAAAAAAAAAAAAAAAOwx1YXFqfFyuTTbvcJAFmpHNhjxZO0Z2MrKEbG8s3ujvsUtvyqf7cDuHqY+KeR25n249ws9HJQAAAAAAAAAAAAAAAAAAKBPPXjot9NX/NHdBgEAAAAAAAAAAAAAAAAAAEBfSn9OIqI+HRt+bmjj0n3Jaq7xPyLevnXpg2vjc3OzY/X5d9fmz32YzT+57oX7d7MPQCdaeZpGRD2PAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAeqC4tT4+VyaXabhcEO1ul1HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2488AAAD//6lQzaI=") socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8937, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) 27.915070368s ago: executing program 1 (id=242): syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00') setreuid(0x0, 0xee00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f00000001c0)={0x0, r2}) sendmmsg$unix(r0, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) 27.914928808s ago: executing program 33 (id=242): syz_open_procfs(0x0, &(0x7f00000001c0)='fd\x00') setreuid(0x0, 0xee00) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x8001) r2 = getpgid(0x0) fcntl$setownex(r1, 0xf, &(0x7f00000001c0)={0x0, r2}) sendmmsg$unix(r0, &(0x7f0000011500)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="11", 0x1}], 0x1, 0x0, 0x0, 0x4004040}}], 0x1, 0x40015) 27.429176374s ago: executing program 4 (id=244): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x2, 0x7}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x9}) close_range(r3, 0xffffffffffffffff, 0x0) 27.397959785s ago: executing program 4 (id=246): newfstatat(0xffffffffffffff9c, &(0x7f0000000580)='./bus\x00', 0x0, 0x400) getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x1000, 0x20da, 0x0, 0xa, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x34d3, 0x16, 0x0, 0x0) 27.295535009s ago: executing program 4 (id=248): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@resuid}, {@auto_da_alloc}, {@errors_continue}, {@data_err_ignore}, {@delalloc}, {@barrier}]}, 0x1, 0xbd8, &(0x7f00000014c0)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x20000ac8) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) rename(0x0, 0x0) 27.082037466s ago: executing program 4 (id=251): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', 0x0, 0xa53059, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x8f881, 0x0) unshare(0x22020600) unshare(0x22020400) 26.798420295s ago: executing program 4 (id=252): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000440)=0x135, 0x4) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b39ff, 0x0) 26.787436945s ago: executing program 34 (id=252): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000440)=0x135, 0x4) recvmmsg(r0, &(0x7f0000002900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x45833af92e4b39ff, 0x0) 1.743786384s ago: executing program 6 (id=620): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r2 = timerfd_create(0x0, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) io_setup(0x3, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, 0x0) 1.535246271s ago: executing program 7 (id=622): r0 = epoll_create1(0x80000) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x8) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r1, &(0x7f0000000100)=""/177, 0x39) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pread64(r1, &(0x7f0000000480)=""/182, 0xb6, 0x0) 1.52103776s ago: executing program 6 (id=623): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x28) close(r0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r2, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r5}}) 1.367128946s ago: executing program 7 (id=624): socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = epoll_create1(0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESDEC=r1]) 994.287448ms ago: executing program 3 (id=626): perf_event_open(&(0x7f00000014c0)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x400, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0x400c78, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x48, &(0x7f0000000100)=r1, 0x120) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000140)=@in6={0xa, 0x4e22, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x401}, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)="b2", 0x1}], 0x1}, 0x844) 919.09174ms ago: executing program 3 (id=627): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11", @ANYRES32=r2, @ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', r2, 0x0, 0x6, 0xf9, 0x7, 0x70, @remote, @loopback={0x0, 0xffff888101827518}, 0x700, 0x40, 0x1, 0xfffffff8}}) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x6, 0x210001}}) 918.84597ms ago: executing program 3 (id=628): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(r0) 913.69102ms ago: executing program 3 (id=630): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendfile(r1, r0, 0x0, 0xf03a0005) 847.709013ms ago: executing program 3 (id=631): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) unshare(0x2c040480) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x41) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/cgroup\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r2, 0x411, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 791.043764ms ago: executing program 3 (id=632): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x0, 0x0, 0x10005, 0x6031}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 790.765234ms ago: executing program 5 (id=633): r0 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500006400000069105c0000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8dd"], 0x0, 0x5}, 0x94) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r1, &(0x7f0000000000), 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt(r2, 0x65, 0x1, &(0x7f0000000080), 0x1d0) bind$can_raw(r2, &(0x7f00000001c0), 0x10) dup3(r0, r1, 0x0) 790.627624ms ago: executing program 5 (id=634): io_uring_setup(0x1ddd, &(0x7f0000000400)={0x0, 0x5cb4, 0x800, 0x5, 0x8}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0000}]}) r1 = io_uring_setup(0x289f, &(0x7f00000000c0)={0x0, 0x904b, 0x3000, 0x0, 0x2d6}) poll(&(0x7f0000009b00)=[{r1}], 0x20, 0x72) close_range(r0, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x11, 0x3, 0x0) 761.672515ms ago: executing program 0 (id=637): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x3, @private0, 0x80000000}}, 0x0, 0x0, 0x3f, 0x0, "bb02a3c364ca41d6357e5445244748042f9e4e00f943a92866ef086c82ac9b2df3ee818afaacff1f16c54dc46d8b6d2ccd008a008000000000000000a032000700000000000000000000000000004d00"}, 0xd8) r0 = socket$kcm(0x23, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r0, 0x800) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) 655.042749ms ago: executing program 0 (id=638): timer_settime(0x0, 0x0, 0x0, 0x0) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000080)={0x5, 0x3ff, 0x6, 0xa513, 0xf, "4ebdaed43bb30000000000d1188400"}) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 654.835619ms ago: executing program 6 (id=639): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x254fe) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000240)=""/242, 0x40000, 0x20, 0x0, 0x0) 654.664139ms ago: executing program 5 (id=640): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000100), 0x2, 0x528, &(0x7f0000000c00)="$eJzs3U9sI1cZAPBvJsnau02bLfQAqNClFBa0WjvxtquqF8qpQqgSogcOHLYhcaIo9jqKndKEFcoeuSNRiROcOHNA4oDUE3ckDnDjUg5IBVagBgkJVx6PU+ePE2uT2Nv495NG8+eN/b23o3lv9HkzL4CJdSMidiPiSkS8HRFz+fEkX+L17tI576NHD5b2Hj1YSqLdfuufSVbeORZ9n+l4Kv/OYkR8742IHyaHgv4porm9s75Yq1U380PlVn2j3Nzeub1WX1ytrlbvVyp3F+7Ov3rnlcq5tfWF+m8+vBoRv//dFz/44+43ftyp1mxe1t+O89Rt+sx+nI7piPjORQQbg6m8PVce58OP9SHOUxoRn4mIF7P7fy6msqt50MHL9M0R1g4AuAjt9ly05/r3AYDLLs1yYElaynMBs5GmpVI3h/dcXEtrjWbr1kpj6/5yN1d2PWbSlbVadT7PFV6PmWRlbbq6kG339mvVyqH9OxHxbET8rHA1WVn7fkQ0asvjfPABgAn21KHx/z+F7vgPAFxyxU82C+OsBwAwOsVxVwAAGDnjPwBMHuM/AEwe4z8ATB7jPwBMHuM/AEyU7775Zmdp7+Xvv15+Z3trvfHO7eVqc71U31oqLTU2N0qrjcZqrVpaatRP+75ao7Gx8HJsvVtuVZutcnN75169sXW/dS97r/e96sxIWgUAnOTZF97/SxIRu69dzZboe9//qWP18xddO+AipeOuADA2U+OuADA2R2f7AiaFfDxMrv+32+3om7s3Ih7ub/W9DHTgfxF6b6gwqXlD4clz8/NnyP8Dn2ry/zC5Hi//71keLgP5f5hc7XZizn8AmDBy/EBySnn/7//z7b6d4X7/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEtpNluStJTPBT4baVoqRTwdEddjJllZq1XnI+KZiPhzYabQ2V+ICPMGAcCnWfr3JJ//6+bcS7OHS68U/lvI1hHxo1+89fN3F1utzYWIK8m/9o+33suPV8ZRfwDgNL1xujeO93z06MFSbxllfT78Vndy0U7cvXzplkzHdLYuZrmGa/9O8v2uzvPK1DnE330YEZ87rv1Jlhu5ns98ejh+J/bTI42fHoifZmXddeff4rPnUBeYNO93+p/Xj7v/0riRrY+//4tZD3V2vf5v70j/l+73f1MD+r8bw8Z4+Q/fPnKwPdctexjxhemIvd6X9/U/vfjJgPgvDRn/r89/6cVBZe1fRtyM49qfHIhVbtU3ys3tndtr9cXV6mr1fqVyd+Hu/Kt3XqmUsxx1uZepPuofr916ZlD8TvuvDYhfPKX9Xx2y/b/639s/+PIJ8b/+leOv/3MnxO+MiV8bMv7itd8WB5V14i8PaP9p1//WkPE/+NvO8pCnAgAj0NzeWV+s1aqbZ98onnhOeh4h1hdrU3HyOT/Jn1LOr10nbBR+/dM3Tj+5cNHVOOtGDCqaelJqeGk2CkOcc/WJqOq4eybgon1y04+7JgAAAAAAAAAAAAAAwCCj+HOicbcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAy+vjAAAA//+DitLu") r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000001680)}}, 0x10) 649.764709ms ago: executing program 6 (id=641): r0 = socket(0x1, 0x2, 0x0) close(0x3) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, 0x0, 0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x90000010}) 583.180701ms ago: executing program 6 (id=642): sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x100000001, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xf}, 0x6249, 0x0, 0x80000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KDENABIO(r0, 0x4b36) syz_clone(0x44063100, 0x0, 0x0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10081, &(0x7f0000000140)={[{@nodioread_nolock}, {@init_itable_val={'init_itable', 0x3d, 0x4}}, {@mblk_io_submit}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000dc0)="$eJzs289vFFUcAPDvzLYgv2xF/MEPtYrGxh8tLagcvGg04WJiogc81lIIslBDayKESDUGj4a/QD2a+Bd40otRTxqvejcmxHARPZgxszsDS7tbd7tbtrCfTzLtezNv973vzLzdN/N2AhhYY/mfJGJ7RPwaESP17M0Fxur/rl29MPv31QuzSWTZG38mtXJ/Xb0wWxYtX7etyIynEenHSextUu/CufOnZqrVubNFfnLx9LuTC+fOP3vy9MyJuRNzZ6YPHz50cOqF56ef60mcO/K27vlgft/uI29dfm326OW3f/gqb+/2YntjHHWjXdc5FmM378sGT3T97hvLjoZ0MtTHhtCRSkTkh2u41v9HohI3Dt5IvPpRXxsHrKssy7LNK9ZWysRSBtzBkuh3C4D+KL/o8+vfcrmFw4++u/JS/QIoj/tasdS3DEValBledn3bS2MRcXTpn8/yJZrehwAA6K1v8vHPM83Gf2nc31Du7mJuaDQi7omInRFxb0Tsioj7ImplH4iIBzusf2xZfuX45+ctawqsTfn478Vibuvm8V85+ovRSpHbUYt/ODl+sjp3oNgn4zG8Oc9PrVLHt6/88mmrbY3jv3zJ6y/HgkU7/hhadoPu2MziTDcxN7ryYcSeoWbxJ9fnrvL/uyNizxreP99nJ5/6cl+r7f8f/yp6MM+UfRHxZP34L8Wy+EvJ6vOTk3dFde7AZHlWrPTjT5deb1V/V/H3QH78tzY9/6/HP5o0ztcudF7Hpd8+aXlNs9bzf1PyZi29qVj3/szi4tmpiE3J0sr10zdeW+bL8nn84/ub9/+dEf9+Xrxub0TkJ/FDEfFwRDxStP3RiHgsIvavEv/3Lz/+ztrjX195/Mc6Ov6dJyqnvvu6Vf3tHf9DtdR4saadz792G9jNvgMAAIDbRVr7DXySTlxPp+nERP03/Ltia1qdX1h8+vj8e2eO1X8rPxrDaXmna6ThfuhUcW+4zE8vyx+s3TfOsizbUstPzM5X12tOHWjPthb9P/d7pd+tA9ZdR/NorZ5oA25LnteEwaX/w+DS/2Fw6f8wuJr1/4sR1/rQFOAW8/0Pg0v/h8Gl/8Pg0v9hIHXzXP9qiZ1H1uud77REZWM0o+NEpBuiGWtLpBujGfXE5ohot/DFuFUN6/cnEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQG/8FwAA//8Hl+jb") 459.074785ms ago: executing program 7 (id=643): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x7, 0x7, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0500"], 0x48}}, 0x0) 413.439306ms ago: executing program 5 (id=644): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001085f0000000000003a33a9e4fc", @ANYRES32=0x0, @ANYBLOB="00000000e300020008000a00", @ANYRES32, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f00070000"], 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 281.134471ms ago: executing program 7 (id=645): r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x400) socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4020, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x6, 0x29, 0x80, 0xf, 0xffffffff, 0x91b1}, [@TCA_NETEM_RATE={0x14, 0x6, {0x2, 0x7, 0x7fffffff}}]}}}]}, 0x60}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x0) 280.233141ms ago: executing program 0 (id=646): r0 = io_uring_setup(0x40000a73, &(0x7f0000000240)={0x0, 0x86a1, 0x10, 0x3, 0x2e2}) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) io_uring_register$IORING_UNREGISTER_NAPI(r0, 0x1c, &(0x7f0000000440), 0x1) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) close_range(r0, 0xffffffffffffffff, 0x0) 190.430914ms ago: executing program 0 (id=647): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x11feb0, 0x21002, 0x0, 0x0, 0x0, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) write$selinux_load(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x7025, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000380)=0xe, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x52, 0x0, 0x0) 189.985644ms ago: executing program 7 (id=648): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c00000003"], 0x7c}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000000000014f194e20"], 0xfdef) 134.670316ms ago: executing program 6 (id=649): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 125.153196ms ago: executing program 5 (id=650): syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x7, 0x20002fa}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x2}], 0x1}, 0x24048081) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x6dcb, 0x7721, 0x7f, 0x0, 0x0) 47.047368ms ago: executing program 7 (id=651): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010218"], &(0x7f0000000100)=""/141, 0x26, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180800ec0c00000000000000000000001801000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 46.704098ms ago: executing program 0 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) close(0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe15, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffff4b, 0x0}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1}, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r1, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000040), &(0x7f0000000380)='%pI4 \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2, r0}, 0xc) 46.555558ms ago: executing program 5 (id=653): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, 0xffffffffffffffff, 0x0) ptrace(0x4206, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prctl$PR_MCE_KILL(0x4e, 0x1, 0x2) 0s ago: executing program 0 (id=654): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) stat(0x0, &(0x7f0000000740)) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400104"], 0x14) kernel console output (not intermixed with test programs): MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 25.924412][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.956499][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.973855][ T3307] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.980974][ T3307] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.988246][ T3307] bridge_slave_0: entered allmulticast mode [ 25.994514][ T3307] bridge_slave_0: entered promiscuous mode [ 26.001655][ T3307] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.008769][ T3307] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.015882][ T3307] bridge_slave_1: entered allmulticast mode [ 26.022265][ T3307] bridge_slave_1: entered promiscuous mode [ 26.029393][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.050030][ T3299] hsr_slave_0: entered promiscuous mode [ 26.055986][ T3299] hsr_slave_1: entered promiscuous mode [ 26.072184][ T3306] hsr_slave_0: entered promiscuous mode [ 26.078109][ T3306] hsr_slave_1: entered promiscuous mode [ 26.083852][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 26.089607][ T3306] Cannot create hsr debugfs directory [ 26.113445][ T3308] team0: Port device team_slave_0 added [ 26.121806][ T3304] hsr_slave_0: entered promiscuous mode [ 26.127787][ T3304] hsr_slave_1: entered promiscuous mode [ 26.133456][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 26.139289][ T3304] Cannot create hsr debugfs directory [ 26.145929][ T3307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.156065][ T3307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.172356][ T3308] team0: Port device team_slave_1 added [ 26.222507][ T3307] team0: Port device team_slave_0 added [ 26.232494][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.239544][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.265427][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.282999][ T3307] team0: Port device team_slave_1 added [ 26.295072][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.302072][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.328015][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.358984][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.365963][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.391874][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.414605][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.421600][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.447550][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 26.494544][ T3308] hsr_slave_0: entered promiscuous mode [ 26.500518][ T3308] hsr_slave_1: entered promiscuous mode [ 26.506261][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 26.511996][ T3308] Cannot create hsr debugfs directory [ 26.564155][ T3307] hsr_slave_0: entered promiscuous mode [ 26.570491][ T3307] hsr_slave_1: entered promiscuous mode [ 26.576299][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 26.582039][ T3307] Cannot create hsr debugfs directory [ 26.635507][ T3299] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 26.644208][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.659006][ T3299] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 26.667722][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.686457][ T3299] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 26.694832][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.709615][ T3299] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 26.718042][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.741762][ T3304] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.750415][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.763521][ T3304] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.772171][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.783760][ T3304] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.792123][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.804241][ T3304] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.812845][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.827317][ T3306] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 26.835817][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.843343][ T3306] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 26.851676][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.863606][ T3306] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 26.872114][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.883858][ T3306] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 26.892321][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 26.916585][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 26.925119][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 26.933161][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 26.941835][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 26.949538][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 26.957833][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 26.966272][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 26.975039][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.009286][ T3307] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 27.017608][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 27.025153][ T3307] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 27.033487][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 27.041022][ T3307] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 27.049359][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 27.057139][ T3307] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 27.065527][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 27.105635][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.119283][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.134983][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.144632][ T2128] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.151730][ T2128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.163958][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.178557][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.185627][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.206234][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.216444][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.223548][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.241303][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.248411][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.265754][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.278190][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.299628][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.315884][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.323071][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.342406][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.349580][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.369768][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.384546][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 27.398063][ T2128] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.405193][ T2128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.420218][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.427304][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.451191][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 27.485925][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.493091][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.504501][ T3308] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.521611][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.528694][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.561546][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.575691][ T3307] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 27.607939][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.710181][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.748332][ T3304] veth0_vlan: entered promiscuous mode [ 27.763815][ T3304] veth1_vlan: entered promiscuous mode [ 27.786686][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.827858][ T3304] veth0_macvtap: entered promiscuous mode [ 27.847288][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 27.858795][ T3304] veth1_macvtap: entered promiscuous mode [ 27.866204][ T3306] veth0_vlan: entered promiscuous mode [ 27.883301][ T3306] veth1_vlan: entered promiscuous mode [ 27.893759][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.910074][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.932084][ T2060] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.942823][ T2060] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.954615][ T3299] veth0_vlan: entered promiscuous mode [ 27.966177][ T2060] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.975189][ T2060] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.984867][ T3306] veth0_macvtap: entered promiscuous mode [ 27.993259][ T3299] veth1_vlan: entered promiscuous mode [ 28.011515][ T28] audit: type=1400 audit(1781005488.174:146): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.NFFNq4/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 28.015252][ T3306] veth1_macvtap: entered promiscuous mode [ 28.044658][ T28] audit: type=1400 audit(1781005488.174:147): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 28.052003][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.074047][ T28] audit: type=1400 audit(1781005488.174:148): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.NFFNq4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 28.083316][ T3307] veth0_vlan: entered promiscuous mode [ 28.105453][ T28] audit: type=1400 audit(1781005488.204:149): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 28.123087][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.137747][ T3308] veth0_vlan: entered promiscuous mode [ 28.144843][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 28.148644][ T3307] veth1_vlan: entered promiscuous mode [ 28.178163][ T3308] veth1_vlan: entered promiscuous mode [ 28.186705][ T3299] veth0_macvtap: entered promiscuous mode [ 28.208915][ T2541] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.218072][ T2541] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.230667][ T3299] veth1_macvtap: entered promiscuous mode [ 28.238849][ T2541] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.247767][ T2541] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.279014][ T3307] veth0_macvtap: entered promiscuous mode [ 28.290926][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.306352][ T3308] veth0_macvtap: entered promiscuous mode [ 28.315260][ T3308] veth1_macvtap: entered promiscuous mode [ 28.322012][ T3307] veth1_macvtap: entered promiscuous mode [ 28.333816][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.351913][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.362993][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.372432][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.384663][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.394010][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.402975][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.424126][ T30] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.433096][ T30] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.442045][ T2060] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.452225][ T30] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.479831][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 28.489442][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 28.500891][ T3511] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 28.519982][ T2060] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.532683][ T2060] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.545502][ T2060] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.558659][ T2060] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 28.650058][ T3527] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 28.724481][ T3533] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12'. [ 28.839086][ T3541] tipc: Started in network mode [ 28.844146][ T3541] tipc: Node identity 1230d7f7ba7c, cluster identity 4711 [ 28.852538][ T3541] tipc: Enabled bearer , priority 0 [ 28.893521][ T3541] tipc: Resetting bearer [ 28.913046][ T3540] tipc: Resetting bearer [ 28.925376][ T3540] tipc: Disabling bearer [ 29.165399][ T3549] netlink: 'syz.3.16': attribute type 16 has an invalid length. [ 29.196186][ T3549] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.203529][ T3549] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.259519][ T3549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 29.283050][ T3549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 29.315815][ T2541] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.329370][ T2541] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.380745][ T2541] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.390153][ T2541] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 29.640703][ T28] kauditd_printk_skb: 27 callbacks suppressed [ 29.640718][ T28] audit: type=1400 audit(1781005489.804:177): avc: denied { mount } for pid=3559 comm="syz.2.20" name="/" dev="autofs" ino=5178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 29.685997][ T28] audit: type=1400 audit(1781005489.844:178): avc: denied { prog_run } for pid=3561 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 29.727778][ T3562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21'. [ 29.743397][ T3562] hsr_slave_1 (unregistering): left promiscuous mode [ 29.745540][ T3566] capability: warning: `syz.4.23' uses deprecated v2 capabilities in a way that may be insecure [ 29.763853][ T3566] GUP no longer grows the stack in syz.4.23 (3566): 200000004000-20000000a000 (200000002000) [ 29.774228][ T3566] CPU: 0 UID: 0 PID: 3566 Comm: syz.4.23 Not tainted syzkaller #0 PREEMPT(lazy) [ 29.774263][ T3566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 29.774346][ T3566] Call Trace: [ 29.774356][ T3566] [ 29.774363][ T3566] __dump_stack+0x1d/0x30 [ 29.774387][ T3566] dump_stack_lvl+0x95/0xd0 [ 29.774408][ T3566] dump_stack+0x15/0x1b [ 29.774429][ T3566] __get_user_pages+0x1b26/0x1f10 [ 29.774475][ T3566] ? __rcu_read_unlock+0x4e/0x70 [ 29.774508][ T3566] get_user_pages_remote+0x1d5/0x6b0 [ 29.774537][ T3566] __access_remote_vm+0x154/0x4c0 [ 29.774567][ T3566] access_remote_vm+0x32/0x40 [ 29.774667][ T3566] proc_pid_cmdline_read+0x32b/0x6b0 [ 29.774697][ T3566] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 29.774819][ T3566] vfs_readv+0x432/0x6e0 [ 29.774836][ T3566] __x64_sys_preadv+0xfd/0x1c0 [ 29.774855][ T3566] x64_sys_call+0x2915/0x3020 [ 29.774869][ T3566] do_syscall_64+0x12c/0x3b0 [ 29.774955][ T3566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 29.774969][ T3566] RIP: 0033:0x7f895678ce59 [ 29.775054][ T3566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.775080][ T3566] RSP: 002b:00007f89551df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 29.775151][ T3566] RAX: ffffffffffffffda RBX: 00007f8956a05fa0 RCX: 00007f895678ce59 [ 29.775160][ T3566] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 29.775168][ T3566] RBP: 00007f8956822d6f R08: 00000000fffffff9 R09: 0000000000000000 [ 29.775235][ T3566] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 29.775244][ T3566] R13: 00007f8956a06038 R14: 00007f8956a05fa0 R15: 00007ffd4b9137c8 [ 29.775255][ T3566] [ 29.973552][ T28] audit: type=1400 audit(1781005490.134:179): avc: denied { tracepoint } for pid=3568 comm="syz.4.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.001031][ T3549] syz.3.16 (3549) used greatest stack depth: 10792 bytes left [ 30.030365][ T3571] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 30.040523][ T28] audit: type=1400 audit(1781005490.204:180): avc: denied { relabelto } for pid=3570 comm="syz.3.25" name="3" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 30.067099][ T28] audit: type=1400 audit(1781005490.204:181): avc: denied { associate } for pid=3570 comm="syz.3.25" name="3" dev="tmpfs" ino=29 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:inetd_var_run_t:s0" [ 30.144314][ T28] audit: type=1400 audit(1781005490.304:182): avc: denied { watch } for pid=3572 comm="syz.4.26" path="/7" dev="tmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.166099][ T28] audit: type=1400 audit(1781005490.314:183): avc: denied { write } for pid=3304 comm="syz-executor" name="3" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 30.195472][ T3575] netlink: 24 bytes leftover after parsing attributes in process `syz.3.27'. [ 30.209517][ T28] audit: type=1400 audit(1781005490.314:184): avc: denied { remove_name } for pid=3304 comm="syz-executor" name="binderfs" dev="tmpfs" ino=33 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 30.240652][ T28] audit: type=1400 audit(1781005490.314:185): avc: denied { write } for pid=3304 comm="syz-executor" name="3" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 30.267936][ T28] audit: type=1400 audit(1781005490.314:186): avc: denied { write } for pid=3304 comm="syz-executor" name="3" dev="tmpfs" ino=29 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:inetd_var_run_t:s0" [ 30.397446][ T3591] loop2: detected capacity change from 0 to 4096 [ 30.422022][ T3596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.434023][ T3596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.445734][ T3591] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 30.454481][ T3591] System zones: 0-5 [ 30.471534][ T3591] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.541217][ T3605] vlan0: entered promiscuous mode [ 30.568126][ T3607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.37'. [ 30.577568][ T3607] wg1: Master is either lo or non-ether device [ 30.588893][ T3306] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 416: padding at end of block bitmap is not set [ 30.605580][ T3306] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 30.788133][ T3602] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.798144][ T2060] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.809165][ T3306] syz-executor (3306) used greatest stack depth: 10784 bytes left [ 30.870411][ T2060] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.921043][ T2060] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 30.970846][ T2060] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.014949][ T3611] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.022140][ T3611] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.029481][ T3611] bridge_slave_0: entered allmulticast mode [ 31.035941][ T3611] bridge_slave_0: entered promiscuous mode [ 31.042713][ T3611] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.049841][ T3611] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.057182][ T3611] bridge_slave_1: entered allmulticast mode [ 31.063578][ T3611] bridge_slave_1: entered promiscuous mode [ 31.081002][ T3611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.094005][ T3611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.120293][ T3611] team0: Port device team_slave_0 added [ 31.129676][ T3611] team0: Port device team_slave_1 added [ 31.140696][ T2060] bridge_slave_1: left allmulticast mode [ 31.146478][ T2060] bridge_slave_1: left promiscuous mode [ 31.152189][ T2060] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.159936][ T2060] bridge_slave_0: left allmulticast mode [ 31.165597][ T2060] bridge_slave_0: left promiscuous mode [ 31.171400][ T2060] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.239072][ T2060] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 31.249142][ T2060] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 31.258607][ T2060] bond0 (unregistering): Released all slaves [ 31.272227][ T3611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.279510][ T3611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.305492][ T3611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.316880][ T3611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.324236][ T3611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.350547][ T3611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.367429][ T2060] tipc: Left network mode [ 31.386316][ T2060] hsr_slave_0: left promiscuous mode [ 31.391980][ T2060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.399817][ T2060] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 31.407455][ T2060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.414932][ T2060] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 31.425500][ T2060] veth1_macvtap: left promiscuous mode [ 31.431153][ T2060] veth0_macvtap: left promiscuous mode [ 31.436886][ T2060] veth1_vlan: left promiscuous mode [ 31.442390][ T2060] veth0_vlan: left promiscuous mode [ 31.451489][ T3636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.45'. [ 31.502604][ T2060] team0 (unregistering): Port device team_slave_1 removed [ 31.513059][ T2060] team0 (unregistering): Port device team_slave_0 removed [ 31.568207][ T3611] hsr_slave_0: entered promiscuous mode [ 31.574257][ T3611] hsr_slave_1: entered promiscuous mode [ 31.580685][ T3611] debugfs: 'hsr0' already exists in 'hsr' [ 31.586604][ T3611] Cannot create hsr debugfs directory [ 31.669593][ T3653] loop1: detected capacity change from 0 to 128 [ 31.688179][ T3653] msdos: Bad value for 'gid' [ 31.692861][ T3653] msdos: Bad value for 'gid' [ 31.704181][ T3653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 31.729281][ T3653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 31.745069][ T3653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 31.771952][ T3611] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 31.775606][ T3664] loop0: detected capacity change from 0 to 512 [ 31.792546][ T3611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.806060][ T3653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 31.817040][ T3664] EXT4-fs (loop0): 1 truncate cleaned up [ 31.833491][ T3664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.846930][ T3611] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 31.855559][ T3611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.872390][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 31.911909][ T3611] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 31.927254][ T3611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.935076][ T3611] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 31.945187][ T3611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.956852][ T3674] netlink: 'syz.1.53': attribute type 1 has an invalid length. [ 31.980903][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.071858][ T3611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.096647][ T3611] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.118142][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.125255][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.143788][ T2060] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.150949][ T2060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.176574][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 32.201049][ T3611] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.413868][ T3611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.441672][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 32.666104][ T3611] veth0_vlan: entered promiscuous mode [ 32.687384][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 32.701057][ T3611] veth1_vlan: entered promiscuous mode [ 32.742623][ T3611] veth0_macvtap: entered promiscuous mode [ 32.766474][ T3611] veth1_macvtap: entered promiscuous mode [ 32.794402][ T3611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.808551][ T3611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.828233][ T2541] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.844279][ T2541] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.871628][ T2541] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.887191][ T2541] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.740571][ T3791] loop3: detected capacity change from 0 to 512 [ 33.758898][ T3791] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.795432][ T3791] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.67: iget: bad i_size value: 38620345925642 [ 33.815371][ T3791] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 33.815584][ T3791] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.67: couldn't read orphan inode 15 (err -117) [ 33.824779][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 33.824799][ C0] EXT4-fs (loop3): initial error at time 1781005493: ext4_orphan_get:1397: inode 15 [ 33.824824][ C0] EXT4-fs (loop3): last error at time 1781005493: ext4_orphan_get:1397: inode 15 [ 33.857836][ T3789] Zero length message leads to an empty skb [ 33.868862][ T3791] loop3: lost filesystem error report for type 5 error -117 [ 33.877358][ T3791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.941630][ T3789] syz.0.66 (3789) used greatest stack depth: 10496 bytes left [ 33.961395][ T3799] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.67: bg 0: block 5: invalid block bitmap [ 33.991048][ T3799] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 34.018808][ T3799] EXT4-fs (loop3): This should not happen!! Data will be lost [ 34.018808][ T3799] [ 34.054411][ T3799] EXT4-fs (loop3): Total free blocks count 0 [ 34.075511][ T3799] EXT4-fs (loop3): Free/Dirty block details [ 34.093918][ T3799] EXT4-fs (loop3): free_blocks=0 [ 34.111081][ T3799] EXT4-fs (loop3): dirty_blocks=2140 [ 34.129240][ T3799] EXT4-fs (loop3): Block reservation details [ 34.136934][ T3799] EXT4-fs (loop3): i_reserved_data_blocks=2140 [ 34.225286][ T30] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2052 with max blocks 88 with error 28 [ 34.251967][ T3799] syz.3.67 (3799) used greatest stack depth: 10448 bytes left [ 34.263047][ T3304] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 34.332124][ T3818] loop0: detected capacity change from 0 to 512 [ 34.346132][ T3818] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 34.360120][ T3818] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 34.421366][ T3820] syzkaller0: entered promiscuous mode [ 34.427869][ T3820] syzkaller0: entered allmulticast mode [ 34.769759][ T28] kauditd_printk_skb: 59 callbacks suppressed [ 34.769775][ T28] audit: type=1400 audit(1781005750.934:246): avc: denied { setopt } for pid=3832 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.796527][ T28] audit: type=1400 audit(1781005750.964:247): avc: denied { bind } for pid=3832 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.815887][ T28] audit: type=1400 audit(1781005750.964:248): avc: denied { name_bind } for pid=3832 comm="syz.4.81" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 34.838279][ T28] audit: type=1400 audit(1781005750.964:249): avc: denied { node_bind } for pid=3832 comm="syz.4.81" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 34.860862][ T28] audit: type=1400 audit(1781005750.964:250): avc: denied { write } for pid=3832 comm="syz.4.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 34.895687][ T3834] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.902889][ T3834] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.957879][ T3834] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.967673][ T3834] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 35.001515][ T2541] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.020394][ T2541] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.029474][ T2541] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.038653][ T2541] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.229947][ T28] audit: type=1400 audit(1781005751.394:251): avc: denied { mount } for pid=3842 comm="syz.3.84" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 35.287481][ T28] audit: type=1400 audit(1781005751.434:252): avc: denied { watch watch_reads } for pid=3844 comm="syz.3.85" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 36.188818][ T3855] loop0: detected capacity change from 0 to 128 [ 36.206207][ T28] audit: type=1400 audit(1781005752.364:253): avc: denied { create } for pid=3856 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 36.261924][ T28] audit: type=1400 audit(1781005752.364:254): avc: denied { mount } for pid=3854 comm="syz.0.90" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 36.319917][ T28] audit: type=1400 audit(1781005752.444:255): avc: denied { perfmon } for pid=3858 comm="syz.3.91" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.356054][ T3855] syz.0.90: attempt to access beyond end of device [ 36.356054][ T3855] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 36.371313][ T3855] syz.0.90: attempt to access beyond end of device [ 36.371313][ T3855] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 36.386502][ T3855] syz.0.90: attempt to access beyond end of device [ 36.386502][ T3855] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 36.409662][ T3860] syz.3.91 (3860) used greatest stack depth: 10320 bytes left [ 36.424275][ T3855] syz.0.90: attempt to access beyond end of device [ 36.424275][ T3855] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 36.438819][ T3855] syz.0.90: attempt to access beyond end of device [ 36.438819][ T3855] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 36.453214][ T3855] syz.0.90: attempt to access beyond end of device [ 36.453214][ T3855] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 36.486841][ T3855] syz.0.90: attempt to access beyond end of device [ 36.486841][ T3855] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 36.519353][ T3855] syz.0.90: attempt to access beyond end of device [ 36.519353][ T3855] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 36.532974][ T3866] netlink: 2028 bytes leftover after parsing attributes in process `syz.3.92'. [ 36.542157][ T3866] netlink: 20 bytes leftover after parsing attributes in process `syz.3.92'. [ 36.560158][ T3855] syz.0.90: attempt to access beyond end of device [ 36.560158][ T3855] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 36.573976][ T3855] syz.0.90: attempt to access beyond end of device [ 36.573976][ T3855] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 36.703120][ T3877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.711806][ T3877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.010307][ T3916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 38.192602][ T3925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.115'. [ 38.219575][ T3925] netlink: 12 bytes leftover after parsing attributes in process `syz.3.115'. [ 38.237338][ T3925] veth1_macvtap: left promiscuous mode [ 38.437967][ T3945] netlink: 'syz.1.123': attribute type 1 has an invalid length. [ 38.466986][ T3945] gretap1: entered promiscuous mode [ 38.723677][ T3957] netlink: 'syz.4.126': attribute type 1 has an invalid length. [ 38.751407][ T3957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 38.802322][ T3960] netlink: 'syz.5.127': attribute type 1 has an invalid length. [ 38.805572][ T3957] bond1: (slave veth1_to_team): Enslaving as a backup interface with a down link [ 38.877400][ T3957] syz.4.126 (3957) used greatest stack depth: 10136 bytes left [ 39.246036][ T3978] netlink: 'syz.4.134': attribute type 4 has an invalid length. [ 39.275953][ T3978] netlink: 'syz.4.134': attribute type 4 has an invalid length. [ 39.349675][ T3980] netlink: 'syz.4.135': attribute type 1 has an invalid length. [ 39.389013][ T3980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 39.489379][ T3980] bond2: (slave geneve2): making interface the new active one [ 39.532178][ T3980] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 39.561127][ T30] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.578510][ T30] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.608592][ T30] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.627763][ T3980] syz.4.135 (3980) used greatest stack depth: 9784 bytes left [ 39.640177][ T30] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.686154][ T3991] loop4: detected capacity change from 0 to 512 [ 39.705498][ T3991] EXT4-fs: dax option not supported [ 39.826888][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 39.826902][ T28] audit: type=1400 audit(1781005755.994:270): avc: denied { setopt } for pid=3995 comm="syz.4.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.918640][ T28] audit: type=1400 audit(1781005756.074:271): avc: denied { lock } for pid=3997 comm="syz.4.141" path="socket:[6011]" dev="sockfs" ino=6011 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 40.275508][ T4009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.144'. [ 40.307326][ T4009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.144'. [ 40.337174][ T4005] loop4: detected capacity change from 0 to 764 [ 40.402282][ T28] audit: type=1400 audit(1781005756.554:272): avc: denied { mount } for pid=4004 comm="syz.4.143" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 40.483273][ T28] audit: type=1400 audit(1781005756.594:273): avc: denied { read } for pid=4004 comm="syz.4.143" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 40.623321][ T4014] loop0: detected capacity change from 0 to 256 [ 40.646410][ T4005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.666956][ T28] audit: type=1400 audit(1781005756.824:274): avc: denied { module_request } for pid=4013 comm="syz.0.146" kmod="nls_cp857" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 40.681350][ T4005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.711381][ T4014] FAT-fs (loop0): codepage cp857 not found [ 40.733007][ T28] audit: type=1400 audit(1781005756.894:275): avc: denied { name_bind } for pid=4018 comm="syz.1.147" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 40.811966][ T4025] netlink: 36 bytes leftover after parsing attributes in process `syz.1.151'. [ 40.904253][ T4029] netlink: 'syz.1.151': attribute type 2 has an invalid length. [ 40.914889][ T4028] bridge_slave_1: left allmulticast mode [ 40.922549][ T4028] bridge_slave_1: left promiscuous mode [ 40.935281][ T4028] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.951687][ T4028] bridge_slave_0: left allmulticast mode [ 40.959321][ T4028] bridge_slave_0: left promiscuous mode [ 40.966973][ T4028] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.123542][ T4036] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.155'. [ 41.141816][ T28] audit: type=1400 audit(1781005757.304:276): avc: denied { read write } for pid=4037 comm="syz.5.156" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 41.198549][ T28] audit: type=1400 audit(1781005757.304:277): avc: denied { open } for pid=4037 comm="syz.5.156" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 41.230667][ T28] audit: type=1400 audit(1781005757.394:278): avc: denied { ioctl } for pid=4041 comm="syz.0.158" path="socket:[6076]" dev="sockfs" ino=6076 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 41.289275][ T4047] loop0: detected capacity change from 0 to 1024 [ 41.306476][ T4047] EXT4-fs: Ignoring removed bh option [ 41.374280][ T4047] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.388442][ T28] audit: type=1400 audit(1781005757.534:279): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 41.422252][ T4052] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 41.435252][ T4054] ipip0: entered promiscuous mode [ 41.443198][ T4047] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.508770][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.538430][ T4061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 41.556127][ T4066] syz.5.163 uses obsolete (PF_INET,SOCK_PACKET) [ 42.071103][ T4078] netlink: 'syz.0.169': attribute type 6 has an invalid length. [ 42.120882][ T4082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.180916][ T4082] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 42.217641][ T4087] netlink: 24 bytes leftover after parsing attributes in process `syz.1.173'. [ 42.230086][ T4085] cgroup: fork rejected by pids controller in /syz0 [ 42.246901][ T2541] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 42.379709][ T2541] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 42.761611][ T2541] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.807925][ T4116] netlink: 'syz.5.187': attribute type 1 has an invalid length. [ 42.818154][ T2541] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.819101][ T4116] netlink: 63763 bytes leftover after parsing attributes in process `syz.5.187'. [ 42.880277][ T2541] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.941658][ T2541] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.980813][ T4123] loop5: detected capacity change from 0 to 4096 [ 42.994405][ T4123] EXT4-fs: inline encryption not supported [ 43.035912][ T4123] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 43.056570][ T4123] System zones: 0-5 [ 43.068480][ T4123] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.139440][ T2541] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 43.162402][ T2541] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 43.182188][ T2541] bond0 (unregistering): Released all slaves [ 43.205156][ T2541] bond1 (unregistering): Released all slaves [ 43.296644][ T2541] hsr_slave_0: left promiscuous mode [ 43.304574][ T2541] hsr_slave_1: left promiscuous mode [ 43.311187][ T2541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.318965][ T2541] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 43.347749][ T2541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 43.359059][ T2541] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 43.389531][ T2541] veth1_macvtap: left promiscuous mode [ 43.397183][ T2541] veth0_macvtap: left promiscuous mode [ 43.404709][ T2541] veth1_vlan: left promiscuous mode [ 43.415457][ T2541] veth0_vlan: left promiscuous mode [ 43.654549][ T2541] team0 (unregistering): Port device team_slave_1 removed [ 43.664502][ T2541] team0 (unregistering): Port device team_slave_0 removed [ 43.713810][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 43.835598][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.004189][ T4195] loop5: detected capacity change from 0 to 512 [ 44.021113][ T4195] ======================================================= [ 44.021113][ T4195] WARNING: The mand mount option has been deprecated and [ 44.021113][ T4195] and is ignored by this kernel. Remove the mand [ 44.021113][ T4195] option from the mount to silence this warning. [ 44.021113][ T4195] ======================================================= [ 44.426603][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 44.542386][ T4117] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.556938][ T4117] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.573151][ T4167] syz.1.193 (4167) used greatest stack depth: 9728 bytes left [ 44.588569][ T4117] bridge_slave_0: entered allmulticast mode [ 44.614030][ T4117] bridge_slave_0: entered promiscuous mode [ 44.645134][ T4117] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.674024][ T4117] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.700199][ T4117] bridge_slave_1: entered allmulticast mode [ 44.730426][ T4233] loop5: detected capacity change from 0 to 1024 [ 44.739141][ T4117] bridge_slave_1: entered promiscuous mode [ 44.747333][ T4233] EXT4-fs: Ignoring removed bh option [ 44.783727][ T4233] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.818904][ T4117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.841461][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 44.841515][ T28] audit: type=1400 audit(1781005761.004:317): avc: denied { write } for pid=4232 comm="syz.5.199" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 44.870780][ T4117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.900980][ T4245] loop3: detected capacity change from 0 to 512 [ 44.916176][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.950823][ T4117] team0: Port device team_slave_0 added [ 44.962408][ T28] audit: type=1400 audit(1781005761.124:318): avc: denied { write } for pid=4243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 44.965374][ T4117] team0: Port device team_slave_1 added [ 45.018906][ T28] audit: type=1400 audit(1781005761.174:319): avc: denied { write } for pid=4260 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.036374][ T4117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.049376][ T4117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.076016][ T4117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.089770][ T4117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.098028][ T4259] netlink: 212 bytes leftover after parsing attributes in process `syz.3.204'. [ 45.106251][ T4117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 45.133243][ T4117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.185504][ T28] audit: type=1400 audit(1781005761.344:320): avc: denied { write } for pid=4264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.225240][ T28] audit: type=1400 audit(1781005761.384:321): avc: denied { write } for pid=4277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.267192][ T4117] hsr_slave_0: entered promiscuous mode [ 45.280224][ T4117] hsr_slave_1: entered promiscuous mode [ 45.293085][ T4117] debugfs: 'hsr0' already exists in 'hsr' [ 45.301797][ T4117] Cannot create hsr debugfs directory [ 45.307428][ T28] audit: type=1400 audit(1781005761.464:322): avc: denied { write } for pid=4280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.345622][ T28] audit: type=1400 audit(1781005761.484:323): avc: denied { write } for pid=4291 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.472083][ T28] audit: type=1400 audit(1781005761.634:324): avc: denied { write } for pid=4299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.534074][ T28] audit: type=1400 audit(1781005761.694:325): avc: denied { write } for pid=4315 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 45.547594][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 45.582347][ T28] audit: type=1400 audit(1781005761.744:326): avc: denied { map_read map_write } for pid=4318 comm="syz.3.208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 45.681723][ T4117] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.702989][ T4117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 45.711543][ T4117] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.724440][ T4117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 45.741979][ T4117] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.759613][ T4117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 45.767671][ T4117] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.777303][ T4117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 45.847718][ T4331] IPv6: sit1: Disabled Multicast RS [ 45.967197][ T4372] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.217'. [ 45.980633][ T4372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.217'. [ 45.999058][ T4117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.030593][ T4117] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.040972][ T4175] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.048093][ T4175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.063012][ T2541] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.070113][ T2541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.090556][ T4117] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 46.101910][ T4117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.273058][ T4117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.345048][ T4117] veth0_vlan: entered promiscuous mode [ 46.353467][ T4117] veth1_vlan: entered promiscuous mode [ 46.371954][ T4117] veth0_macvtap: entered promiscuous mode [ 46.380045][ T4117] veth1_macvtap: entered promiscuous mode [ 46.392412][ T4117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.403820][ T4117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.415110][ T2541] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.424527][ T2541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.433939][ T2541] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.443926][ T2541] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.489570][ T4413] loop0: detected capacity change from 0 to 1024 [ 46.496415][ T4413] EXT4-fs: inline encryption not supported [ 46.518699][ T4413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.642053][ T4117] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.778521][ T4423] 9pnet: p9_errstr2errno: server reported unknown error [ 46.836903][ T4433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.227'. [ 46.856196][ T4435] loop1: detected capacity change from 0 to 1024 [ 46.874087][ T4435] EXT4-fs: Ignoring removed bh option [ 46.882989][ T4175] Bluetooth: hci0: Frame reassembly failed (-84) [ 46.898134][ T4435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.965741][ T4444] netlink: 12 bytes leftover after parsing attributes in process `syz.5.230'. [ 47.003143][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.082935][ T4454] loop5: detected capacity change from 0 to 1024 [ 47.091814][ T4454] ext4: Unknown parameter 'noacl' [ 47.115243][ T4454] loop5: detected capacity change from 0 to 512 [ 47.132715][ T4454] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 47.150204][ T4454] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 47.170825][ T4454] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.235: bg 0: block 441: padding at end of block bitmap is not set [ 47.185387][ T4454] loop5: lost filesystem error report for type 5 error -117 [ 47.185655][ T4454] EXT4-fs (loop5): 1 truncate cleaned up [ 47.192983][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 47.193004][ C0] EXT4-fs (loop5): initial error at time 1781005763: ext4_validate_block_bitmap:441 [ 47.193030][ C0] EXT4-fs (loop5): last error at time 1781005763: ext4_validate_block_bitmap:441 [ 47.236196][ T4454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.248463][ T4450] loop4: detected capacity change from 0 to 512 [ 47.260199][ T4450] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.273907][ T4450] ext4 filesystem being mounted at /50/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.315080][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.320464][ T3299] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.652531][ T4173] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.722496][ T4173] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.780308][ T4173] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.846489][ T4173] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.901452][ T4485] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.908611][ T4485] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.915823][ T4485] bridge_slave_0: entered allmulticast mode [ 47.922345][ T4485] bridge_slave_0: entered promiscuous mode [ 47.929695][ T4485] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.936924][ T4485] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.944156][ T4485] bridge_slave_1: entered allmulticast mode [ 47.950730][ T4485] bridge_slave_1: entered promiscuous mode [ 47.970897][ T4485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.981318][ T4485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.028210][ T4485] team0: Port device team_slave_0 added [ 48.044853][ T4485] team0: Port device team_slave_1 added [ 48.060095][ T4173] bridge_slave_1: left allmulticast mode [ 48.066030][ T4173] bridge_slave_1: left promiscuous mode [ 48.072097][ T4173] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.080700][ T4173] bridge_slave_0: left allmulticast mode [ 48.086408][ T4173] bridge_slave_0: left promiscuous mode [ 48.093064][ T4173] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.129866][ T4173] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 48.139673][ T4173] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 48.172593][ T4516] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 48.209986][ T4173] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.220171][ T4173] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.230016][ T4173] bond0 (unregistering): Released all slaves [ 48.238034][ T4173] bond1 (unregistering): Released all slaves [ 48.253917][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.261075][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.287976][ T4485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.305700][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 48.318742][ T4522] bond0: (slave veth1_to_team): Enslaving as an active interface with an up link [ 48.330819][ T4524] loop4: detected capacity change from 0 to 4096 [ 48.337509][ T4173] hsr_slave_0: left promiscuous mode [ 48.346308][ T4173] hsr_slave_1: left promiscuous mode [ 48.352970][ T4524] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 48.366664][ T4173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.374731][ T4173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.380156][ T4524] System zones: 0-5 [ 48.386606][ T4173] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.394429][ T4173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.405446][ T4524] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.418437][ T4173] veth1_macvtap: left promiscuous mode [ 48.424082][ T4173] veth0_macvtap: left promiscuous mode [ 48.504230][ T4173] team0 (unregistering): Port device team_slave_1 removed [ 48.510755][ T3299] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 416: padding at end of block bitmap is not set [ 48.526254][ T3299] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 48.526628][ T4173] team0 (unregistering): Port device team_slave_0 removed [ 48.571419][ T4485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.578457][ T4485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.605429][ T4485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.646676][ T4485] hsr_slave_0: entered promiscuous mode [ 48.653435][ T4485] hsr_slave_1: entered promiscuous mode [ 48.659461][ T4485] debugfs: 'hsr0' already exists in 'hsr' [ 48.665172][ T4485] Cannot create hsr debugfs directory [ 48.719442][ T4529] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.795553][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 48.808808][ T4485] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 48.818220][ T4485] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.836799][ T4485] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 48.853231][ T4485] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.862012][ T4485] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 48.873871][ T4485] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.883948][ T4485] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 48.893257][ T4485] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.918212][ T3631] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 48.946368][ T4485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.969187][ T4485] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.007094][ T2541] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.014180][ T2541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.032411][ T4176] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.039540][ T4176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.148948][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 49.242540][ T4175] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.296609][ T4175] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.324873][ T4485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.332811][ T4550] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.340108][ T4550] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.348222][ T4550] bridge_slave_0: entered allmulticast mode [ 49.354819][ T4550] bridge_slave_0: entered promiscuous mode [ 49.362147][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 49.369990][ T4175] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.381732][ T4550] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.389044][ T4550] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.396382][ T4550] bridge_slave_1: entered allmulticast mode [ 49.403481][ T4550] bridge_slave_1: entered promiscuous mode [ 49.429304][ T4175] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.442695][ T4550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.458387][ T4550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.487333][ T4550] team0: Port device team_slave_0 added [ 49.493909][ T4550] team0: Port device team_slave_1 added [ 49.523626][ T4550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.531066][ T4550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.557876][ T4550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.577817][ T4550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.586726][ T4550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.612980][ T4550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.635550][ T4175] bridge_slave_1: left allmulticast mode [ 49.643317][ T4175] bridge_slave_1: left promiscuous mode [ 49.655095][ T4175] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.663985][ T4175] bridge_slave_0: left allmulticast mode [ 49.672487][ T4175] bridge_slave_0: left promiscuous mode [ 49.678395][ T4175] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.705853][ T4175] bond2 (unregistering): (slave geneve2): Releasing active interface [ 49.759008][ T4175] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.768689][ T4175] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.777764][ T4175] bond0 (unregistering): Released all slaves [ 49.786261][ T4175] bond1 (unregistering): (slave veth1_to_team): Releasing backup interface [ 49.796473][ T4175] bond1 (unregistering): Released all slaves [ 49.807627][ T4175] bond2 (unregistering): Released all slaves [ 49.832132][ T4550] hsr_slave_0: entered promiscuous mode [ 49.838502][ T4550] hsr_slave_1: entered promiscuous mode [ 49.844970][ T4550] debugfs: 'hsr0' already exists in 'hsr' [ 49.852175][ T4550] Cannot create hsr debugfs directory [ 49.874744][ T4175] hsr_slave_0: left promiscuous mode [ 49.882853][ T4175] hsr_slave_1: left promiscuous mode [ 49.888711][ T4175] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.896279][ T4175] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.951298][ T4175] team0 (unregistering): Port device team_slave_1 removed [ 49.956124][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 49.956139][ T28] audit: type=1400 audit(1781005766.114:357): avc: denied { write } for pid=4639 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.990978][ T4175] team0 (unregistering): Port device team_slave_0 removed [ 50.006907][ T28] audit: type=1400 audit(1781005766.164:358): avc: denied { write } for pid=4651 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.043160][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 50.080012][ T4485] veth0_vlan: entered promiscuous mode [ 50.093164][ T4485] veth1_vlan: entered promiscuous mode [ 50.118862][ T4550] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 50.127311][ T4550] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.135156][ T4550] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 50.143741][ T4550] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.151937][ T4550] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 50.160906][ T4550] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.174036][ T4485] veth0_macvtap: entered promiscuous mode [ 50.180865][ T4550] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 50.190397][ T4550] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.200777][ T4485] veth1_macvtap: entered promiscuous mode [ 50.217430][ T4485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.231040][ T4485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.239980][ T28] audit: type=1400 audit(1781005766.404:359): avc: denied { write } for pid=4655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.267250][ T4171] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.284855][ T4171] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.295025][ T28] audit: type=1400 audit(1781005766.444:360): avc: denied { write } for pid=4672 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.295340][ T4171] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.333428][ T4171] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.342816][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 50.374162][ T4550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.392700][ T4550] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.418875][ T4176] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.426012][ T4176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.443791][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.450910][ T4177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.470345][ T28] audit: type=1400 audit(1781005766.634:361): avc: denied { write } for pid=4676 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.524083][ T4693] netlink: 'syz.6.259': attribute type 1 has an invalid length. [ 50.543455][ T28] audit: type=1400 audit(1781005766.704:362): avc: denied { write } for pid=4692 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.579383][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 50.596645][ T4700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.619526][ T4700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.730702][ T4550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.861944][ T28] audit: type=1400 audit(1781005767.024:363): avc: denied { write } for pid=4717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.920273][ T28] audit: type=1400 audit(1781005767.074:364): avc: denied { mount } for pid=4737 comm="syz.0.265" name="/" dev="ramfs" ino=10289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 50.968438][ T28] audit: type=1400 audit(1781005767.134:365): avc: denied { write } for pid=4743 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.039802][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 51.060146][ T4550] veth0_vlan: entered promiscuous mode [ 51.068397][ T4550] veth1_vlan: entered promiscuous mode [ 51.127638][ T4550] veth0_macvtap: entered promiscuous mode [ 51.155085][ T4550] veth1_macvtap: entered promiscuous mode [ 51.188227][ T4550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.212656][ T4550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.232261][ T4177] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.243387][ T4177] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.261112][ T4177] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.274467][ T4177] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.341588][ T4762] loop7: detected capacity change from 0 to 1024 [ 51.368397][ T4762] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 51.381129][ T4762] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.473232][ T4767] netlink: 12 bytes leftover after parsing attributes in process `syz.3.270'. [ 51.486251][ T4550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 51.533054][ T4772] netlink: 'syz.7.271': attribute type 1 has an invalid length. [ 51.545377][ T4775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 51.555845][ T4775] netlink: 12 bytes leftover after parsing attributes in process `syz.3.272'. [ 51.652051][ T28] audit: type=1107 audit(1781005767.814:366): pid=4781 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='’¢' [ 51.666527][ T4784] netlink: 24 bytes leftover after parsing attributes in process `syz.7.276'. [ 51.809735][ T4798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'. [ 51.993442][ T4817] netlink: 55631 bytes leftover after parsing attributes in process `syz.7.285'. [ 52.048677][ T4823] netlink: 4 bytes leftover after parsing attributes in process `syz.7.286'. [ 52.058808][ T4823] netlink: 12 bytes leftover after parsing attributes in process `syz.7.286'. [ 52.150257][ T4829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.162168][ T4829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.391988][ T4840] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.399289][ T4840] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.491978][ T4840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.504549][ T4840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.549173][ T4175] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.564575][ T4175] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.579065][ T4175] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.597141][ T4175] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.760888][ T4856] netlink: 4 bytes leftover after parsing attributes in process `syz.6.304'. [ 52.771423][ T4856] netlink: 12 bytes leftover after parsing attributes in process `syz.6.304'. [ 52.808154][ T4863] netlink: 'syz.0.307': attribute type 16 has an invalid length. [ 53.179615][ T4884] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.186834][ T4884] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.276835][ T4884] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 53.310664][ T4884] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 53.431039][ T4177] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.441852][ T4177] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.464495][ T4177] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.478701][ T4177] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.543775][ T4904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.560649][ T4904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.652325][ T4899] loop5: detected capacity change from 0 to 512 [ 53.682069][ T4899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.704171][ T4899] ext4 filesystem being mounted at /53/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.804066][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.182189][ T4933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.190746][ T4933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.839367][ T4941] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.846529][ T4941] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.877410][ T4941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.887042][ T4941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.915655][ T4175] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.924995][ T4175] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.935991][ T4175] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 54.945152][ T4175] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.088710][ T4952] IPv6: sit1: Disabled Multicast RS [ 55.234875][ T4967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.252390][ T4967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.664493][ T4983] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.671805][ T4983] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.720878][ T4983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.732236][ T4983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.883957][ T4988] IPv6: sit1: Disabled Multicast RS [ 55.913929][ T4173] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.923799][ T4173] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.954612][ T4997] bond1: entered allmulticast mode [ 55.960255][ T4173] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.971095][ T4173] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.971174][ T4988] syz.0.356 (4988) used greatest stack depth: 9664 bytes left [ 55.987706][ T4992] tipc: Started in network mode [ 55.992979][ T4992] tipc: Node identity a268b54e719f, cluster identity 4711 [ 56.007897][ T4992] tipc: Enabled bearer , priority 0 [ 56.017445][ T4997] macvlan2: entered promiscuous mode [ 56.022919][ T4997] macvlan2: entered allmulticast mode [ 56.028961][ T4997] bond1: (slave macvlan2): Opening slave failed [ 56.034165][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 56.034179][ T28] audit: type=1400 audit(1781005772.194:392): avc: denied { mount } for pid=4999 comm="syz.0.360" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 56.109323][ T4995] tipc: Resetting bearer [ 56.140282][ T4991] tipc: Resetting bearer [ 56.152331][ T4991] tipc: Disabling bearer [ 56.255034][ T28] audit: type=1326 audit(1781005772.414:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21aa4bce59 code=0x7ffc0000 [ 56.312494][ T28] audit: type=1326 audit(1781005772.414:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21aa4bce59 code=0x7ffc0000 [ 56.364156][ T28] audit: type=1326 audit(1781005772.444:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21aa4bce59 code=0x7ffc0000 [ 56.391680][ T5024] bridge3: entered allmulticast mode [ 56.407511][ T28] audit: type=1326 audit(1781005772.444:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21aa4bce59 code=0x7ffc0000 [ 56.433957][ T28] audit: type=1326 audit(1781005772.444:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f21aa4bce59 code=0x7ffc0000 [ 56.460047][ T28] audit: type=1326 audit(1781005772.444:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21aa4bce59 code=0x7ffc0000 [ 56.486478][ T28] audit: type=1326 audit(1781005772.444:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21aa4bce59 code=0x7ffc0000 [ 56.515117][ T28] audit: type=1326 audit(1781005772.444:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21aa4bce59 code=0x7ffc0000 [ 56.556643][ T28] audit: type=1326 audit(1781005772.444:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5014 comm="syz.3.366" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f21aa4bce59 code=0x7ffc0000 [ 56.613299][ T5033] netlink: 20 bytes leftover after parsing attributes in process `syz.3.372'. [ 56.626165][ T5033] ip6gre1: entered promiscuous mode [ 56.631818][ T5033] ip6gre1: entered allmulticast mode [ 56.653738][ T5033] netlink: 'syz.3.372': attribute type 6 has an invalid length. [ 56.661931][ T5033] netlink: 72 bytes leftover after parsing attributes in process `syz.3.372'. [ 57.189405][ T5052] netlink: 8 bytes leftover after parsing attributes in process `syz.7.379'. [ 57.435833][ T5062] batadv_slave_1: entered promiscuous mode [ 57.537202][ T5061] batadv_slave_1: left promiscuous mode [ 57.944939][ T5076] 9p: Bad value for 'rfdno' [ 58.016015][ T5082] netlink: 'syz.0.391': attribute type 1 has an invalid length. [ 58.148624][ T5084] netlink: 100 bytes leftover after parsing attributes in process `syz.3.393'. [ 58.197560][ T5082] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.263434][ T5090] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 58.277038][ T5082] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 58.297412][ T5098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 58.297971][ T5100] netlink: 76 bytes leftover after parsing attributes in process `syz.6.397'. [ 58.307794][ T5082] netlink: 'syz.0.391': attribute type 10 has an invalid length. [ 58.323166][ T4175] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 58.333141][ T5098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 58.356390][ T5082] netlink: 40 bytes leftover after parsing attributes in process `syz.0.391'. [ 58.368863][ T5082] dummy0: entered promiscuous mode [ 58.391695][ T5082] bond1: (slave dummy0): Removing an active aggregator [ 58.412176][ T5082] bond1: (slave dummy0): Releasing backup interface [ 58.491818][ T5108] capability: warning: `syz.6.400' uses 32-bit capabilities (legacy support in use) [ 58.531382][ T4171] Bluetooth: hci0: Frame reassembly failed (-84) [ 58.635896][ T5116] loop6: detected capacity change from 0 to 512 [ 58.642599][ T5118] netlink: 277 bytes leftover after parsing attributes in process `syz.7.405'. [ 58.706166][ T5116] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.723425][ T5116] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.742575][ T5116] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.404: corrupted xattr block 33: invalid ea_ino [ 58.759787][ T5116] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 58.773891][ T5128] loop7: detected capacity change from 0 to 1024 [ 58.780725][ T5116] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.404: corrupted xattr block 33: invalid ea_ino [ 58.798065][ T5116] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop6 ino=15 [ 58.808266][ T5128] EXT4-fs: Ignoring removed bh option [ 58.815169][ T5116] EXT4-fs error (device loop6): ext4_xattr_block_get:597: inode #15: comm syz.6.404: corrupted xattr block 33: invalid ea_ino [ 58.838200][ T5128] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.870904][ T4485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.304229][ T5140] tipc: Started in network mode [ 59.309382][ T5140] tipc: Node identity e242c142bd1f, cluster identity 4711 [ 59.316642][ T5140] tipc: Enabled bearer , priority 0 [ 59.337681][ T5140] syzkaller0: entered promiscuous mode [ 59.343234][ T5140] syzkaller0: entered allmulticast mode [ 59.349136][ T5140] tipc: Resetting bearer [ 59.356662][ T5139] tipc: Resetting bearer [ 59.368173][ T5139] tipc: Disabling bearer [ 59.559805][ T4550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.744210][ T5154] loop7: detected capacity change from 0 to 1024 [ 59.752145][ T5154] EXT4-fs: Ignoring removed bh option [ 59.782053][ T5154] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 59.800315][ T5159] workqueue: Failed to create a rescuer kthread for wq "dio/loop7": -EINTR [ 59.800367][ T5159] workqueue: Failed to create a rescuer kthread for wq "dio/loop7": -EINTR [ 59.809553][ T5159] workqueue: Failed to create a rescuer kthread for wq "dio/loop7": -EINTR [ 59.818715][ T5159] workqueue: Failed to create a rescuer kthread for wq "dio/loop7": -EINTR [ 59.835605][ T4550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.415904][ T5199] loop7: detected capacity change from 0 to 1024 [ 60.422758][ T5199] ext4: Unknown parameter 'noacl' [ 60.498120][ T5205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 60.596985][ T3631] Bluetooth: hci0: command 0x1003 tx timeout [ 60.597647][ T4439] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 60.642390][ T5214] Unsupported ieee802154 address type: 0 [ 60.700379][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.7.436'. [ 60.710354][ T5221] netlink: 12 bytes leftover after parsing attributes in process `syz.7.436'. [ 60.765563][ T5225] netlink: 'syz.5.438': attribute type 1 has an invalid length. [ 60.806048][ T5225] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.830875][ T5231] loop0: detected capacity change from 0 to 512 [ 60.859245][ T5232] bond2: (slave geneve2): making interface the new active one [ 60.885999][ T5232] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 60.895698][ T4175] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.923458][ T4175] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.936586][ T4175] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.955292][ T4175] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.038448][ T5245] loop7: detected capacity change from 0 to 1024 [ 61.054935][ T5245] EXT4-fs: Ignoring removed bh option [ 61.084541][ T5245] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.103548][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 61.103562][ T28] audit: type=1400 audit(1781005777.264:507): avc: denied { write } for pid=5244 comm="syz.7.447" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 61.200535][ T4550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.272410][ T28] audit: type=1400 audit(1781005777.434:508): avc: denied { write } for pid=5253 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.314314][ T28] audit: type=1400 audit(1781005777.474:509): avc: denied { write } for pid=5272 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.517651][ T28] audit: type=1400 audit(1781005777.674:510): avc: denied { name_bind } for pid=5288 comm="syz.6.464" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 61.537401][ T5286] loop7: detected capacity change from 0 to 512 [ 61.594959][ T28] audit: type=1400 audit(1781005777.684:511): avc: denied { write } for pid=5275 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.620493][ T28] audit: type=1400 audit(1781005777.704:512): avc: denied { name_connect } for pid=5288 comm="syz.6.464" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 61.635619][ T5286] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.642683][ T28] audit: type=1400 audit(1781005777.784:513): avc: denied { write } for pid=5295 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.677170][ T28] audit: type=1400 audit(1781005777.844:514): avc: denied { getopt } for pid=5303 comm="syz.6.457" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.731385][ T28] audit: type=1400 audit(1781005777.894:515): avc: denied { setattr } for pid=5281 comm="syz.7.453" name="file1" dev="loop7" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 61.783926][ T5310] syzkaller1: entered promiscuous mode [ 61.789723][ T28] audit: type=1400 audit(1781005777.944:516): avc: denied { ioctl } for pid=5309 comm="syz.5.458" path="socket:[11179]" dev="sockfs" ino=11179 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 61.823747][ T5310] syzkaller1: entered allmulticast mode [ 61.859858][ T4550] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.922429][ T5329] cgroup: fork rejected by pids controller in /syz7 [ 61.978963][ T5335] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 62.048472][ T5346] syzkaller0: entered promiscuous mode [ 62.065481][ T5352] netlink: 'syz.0.466': attribute type 1 has an invalid length. [ 62.080472][ T5346] syzkaller0: entered allmulticast mode [ 62.100692][ T5358] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 65487 [ 62.117455][ T5352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.166170][ T5352] bond2: (slave geneve2): making interface the new active one [ 62.175018][ T5352] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 62.211450][ T2060] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.232073][ T2060] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.245415][ T2060] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.257979][ T2060] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.371289][ T5385] __nla_validate_parse: 7 callbacks suppressed [ 62.371305][ T5385] netlink: 28 bytes leftover after parsing attributes in process `syz.5.475'. [ 62.549992][ T5397] netlink: 'syz.5.478': attribute type 1 has an invalid length. [ 62.568177][ T5397] 8021q: adding VLAN 0 to HW filter on device bond3 [ 62.715303][ T2060] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.733213][ T2060] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.745579][ T2060] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.788091][ T2060] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.836299][ T5422] tipc: Started in network mode [ 62.850275][ T5422] tipc: Node identity 3a3fdc524ac8, cluster identity 4711 [ 62.872797][ T5422] tipc: Enabled bearer , priority 0 [ 62.945851][ T5422] tipc: Resetting bearer [ 62.974267][ T5418] tipc: Resetting bearer [ 63.006529][ T5418] tipc: Disabling bearer [ 63.014147][ T5431] loop3: detected capacity change from 0 to 512 [ 63.023312][ T5431] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.034520][ T5431] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 63.043824][ T5431] EXT4-fs (loop3): orphan cleanup on readonly fs [ 63.060217][ T5431] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.494: Allocating blocks 41-42 which overlap fs metadata [ 63.074437][ T5431] loop3: lost filesystem error report for type 5 error -117 [ 63.076441][ T5431] EXT4-fs (loop3): Remounting filesystem read-only [ 63.083887][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 63.083906][ C1] EXT4-fs (loop3): initial error at time 1781005779: ext4_mb_mark_diskspace_used:4222 [ 63.083933][ C1] EXT4-fs (loop3): last error at time 1781005779: ext4_mb_mark_diskspace_used:4222 [ 63.118864][ T5431] EXT4-fs (loop3): 1 truncate cleaned up [ 63.126556][ T5431] EXT4-fs (loop3): pa ffff8881085c4a10: logic 1, phys. 41, len 23 [ 63.154018][ T5431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.220541][ T310] bridge_slave_1: left allmulticast mode [ 63.226406][ T310] bridge_slave_1: left promiscuous mode [ 63.232787][ T310] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.246547][ T310] bridge_slave_0: left allmulticast mode [ 63.268752][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.278093][ T310] bridge_slave_0: left promiscuous mode [ 63.290724][ T310] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.418999][ T310] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.428596][ T310] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.438058][ T310] bond0 (unregistering): Released all slaves [ 63.489621][ T310] hsr_slave_0: left promiscuous mode [ 63.509155][ T310] hsr_slave_1: left promiscuous mode [ 63.519414][ T310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.545952][ T310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 63.645489][ T310] team0 (unregistering): Port device team_slave_1 removed [ 63.682971][ T310] team0 (unregistering): Port device team_slave_0 removed [ 63.763338][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 63.862119][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.869266][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.881097][ T5423] bridge_slave_0: entered allmulticast mode [ 63.887594][ T5423] bridge_slave_0: entered promiscuous mode [ 63.894459][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.899399][ T5488] loop0: detected capacity change from 0 to 512 [ 63.901617][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.915147][ T5423] bridge_slave_1: entered allmulticast mode [ 63.921695][ T5423] bridge_slave_1: entered promiscuous mode [ 63.939155][ T5423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.949759][ T5423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.964133][ T5488] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 64.030804][ T5423] team0: Port device team_slave_0 added [ 64.065158][ T5423] team0: Port device team_slave_1 added [ 64.125878][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.140043][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.167154][ T5423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.178877][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.187688][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.216838][ T5423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.254150][ T5423] hsr_slave_0: entered promiscuous mode [ 64.260260][ T5423] hsr_slave_1: entered promiscuous mode [ 64.324998][ T5518] netlink: 'syz.6.503': attribute type 1 has an invalid length. [ 64.357968][ T5518] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.386144][ T5518] bond1: (slave geneve2): making interface the new active one [ 64.399256][ T5518] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 64.412344][ T5527] loop5: detected capacity change from 0 to 1024 [ 64.424182][ T5527] EXT4-fs: Ignoring removed bh option [ 64.447155][ T310] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.463501][ T310] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.476263][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 64.486211][ T310] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.495630][ T5527] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.511643][ T310] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.620319][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.658309][ T5552] netlink: 12 bytes leftover after parsing attributes in process `syz.5.508'. [ 64.697753][ T5423] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 64.716716][ T5423] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 64.725266][ T5423] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 64.735536][ T5423] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 64.744623][ T5423] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 64.772104][ T5423] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 64.795204][ T5423] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 64.817731][ T5423] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 64.906738][ T5423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.938553][ T5423] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.949645][ T5569] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.956729][ T5569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.976399][ T5569] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.983568][ T5569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.015432][ T5608] netlink: 40 bytes leftover after parsing attributes in process `syz.6.510'. [ 65.039278][ T5608] ip6gre1: entered promiscuous mode [ 65.044957][ T5608] ip6gre1: entered allmulticast mode [ 65.056370][ T5608] netlink: 'syz.6.510': attribute type 6 has an invalid length. [ 65.163050][ T5423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.289515][ T5633] loop6: detected capacity change from 0 to 128 [ 65.303399][ T5633] msdos: Bad value for 'gid' [ 65.320422][ T5633] msdos: Bad value for 'gid' [ 65.351495][ T5423] veth0_vlan: entered promiscuous mode [ 65.363855][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.514'. [ 65.379298][ T5423] veth1_vlan: entered promiscuous mode [ 65.386227][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.514'. [ 65.403053][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.514'. [ 65.412887][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.514'. [ 65.422678][ T5633] netlink: 8 bytes leftover after parsing attributes in process `syz.6.514'. [ 65.441635][ T5423] veth0_macvtap: entered promiscuous mode [ 65.454817][ T5423] veth1_macvtap: entered promiscuous mode [ 65.480714][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.495023][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.521037][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.529971][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.539768][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.548695][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.593534][ T5648] netlink: 'syz.6.518': attribute type 1 has an invalid length. [ 65.614657][ T5648] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.650171][ T5648] bond2: (slave ip6erspan0): making interface the new active one [ 65.670089][ T5648] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 65.827529][ T5660] loop0: detected capacity change from 0 to 4096 [ 65.839747][ T5660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 65.869599][ T5660] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 65.886480][ T5660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.989618][ T4117] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.434038][ T5675] tipc: Started in network mode [ 66.442907][ T5675] tipc: Node identity 2a41c54ba182, cluster identity 4711 [ 66.450834][ T5675] tipc: Enabled bearer , priority 0 [ 66.476034][ T5679] loop3: detected capacity change from 0 to 128 [ 66.501412][ T5675] tipc: Resetting bearer [ 66.502814][ T5679] msdos: Bad value for 'gid' [ 66.508944][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 66.508969][ T28] audit: type=1400 audit(1781005782.674:551): avc: denied { create } for pid=5681 comm="syz.5.528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 66.539179][ T5679] msdos: Bad value for 'gid' [ 66.573899][ T5673] tipc: Resetting bearer [ 66.602272][ T5673] tipc: Disabling bearer [ 66.610429][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 66.622196][ T5679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.527'. [ 66.685267][ T28] audit: type=1326 audit(1781005782.844:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5687 comm="syz.0.530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774b62ce59 code=0x7ffc0000 [ 66.712138][ T28] audit: type=1326 audit(1781005782.874:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5687 comm="syz.0.530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774b62ce59 code=0x7ffc0000 [ 66.739816][ T28] audit: type=1326 audit(1781005782.874:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5687 comm="syz.0.530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774b62ce59 code=0x7ffc0000 [ 66.765818][ T28] audit: type=1326 audit(1781005782.874:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5687 comm="syz.0.530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774b62ce59 code=0x7ffc0000 [ 66.791947][ T28] audit: type=1326 audit(1781005782.874:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5687 comm="syz.0.530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=461 compat=0 ip=0x7f774b62ce59 code=0x7ffc0000 [ 66.857387][ T28] audit: type=1326 audit(1781005782.874:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5687 comm="syz.0.530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774b62ce59 code=0x7ffc0000 [ 66.882955][ T28] audit: type=1326 audit(1781005782.874:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5687 comm="syz.0.530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774b62ce59 code=0x7ffc0000 [ 66.919117][ T28] audit: type=1326 audit(1781005782.874:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5687 comm="syz.0.530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f774b62ce59 code=0x7ffc0000 [ 66.944554][ T28] audit: type=1326 audit(1781005782.994:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5687 comm="syz.0.530" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f774b62ce59 code=0x7ffc0000 [ 67.854944][ T5715] __nla_validate_parse: 3 callbacks suppressed [ 67.854960][ T5715] netlink: 20 bytes leftover after parsing attributes in process `syz.0.540'. [ 68.039403][ T5715] ip6gre1: entered promiscuous mode [ 68.044658][ T5715] ip6gre1: entered allmulticast mode [ 68.053475][ T5725] netlink: 'syz.0.540': attribute type 6 has an invalid length. [ 68.067185][ T5725] netlink: 72 bytes leftover after parsing attributes in process `syz.0.540'. [ 68.131907][ T5729] loop0: detected capacity change from 0 to 128 [ 68.145853][ T5729] msdos: Bad value for 'gid' [ 68.154047][ T5729] msdos: Bad value for 'gid' [ 68.181322][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 68.205398][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 68.227489][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 68.247173][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 68.257886][ T5729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.544'. [ 68.790013][ T5738] loop5: detected capacity change from 0 to 8192 [ 68.852211][ T5738] bio_check_eod: 152 callbacks suppressed [ 68.852228][ T5738] syz.5.550: attempt to access beyond end of device [ 68.852228][ T5738] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 68.871594][ T5738] Buffer I/O error on dev loop5, logical block 57847, async page read [ 68.880369][ T5738] syz.5.550: attempt to access beyond end of device [ 68.880369][ T5738] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 68.897524][ T5738] Buffer I/O error on dev loop5, logical block 57847, async page read [ 68.907554][ T5738] syz.5.550: attempt to access beyond end of device [ 68.907554][ T5738] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192 [ 68.922488][ T5738] Buffer I/O error on dev loop5, logical block 57847, async page read [ 69.064458][ T5745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.554'. [ 69.221955][ T5749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.555'. [ 69.324928][ T5755] netlink: 'syz.5.558': attribute type 1 has an invalid length. [ 69.355112][ T5755] 8021q: adding VLAN 0 to HW filter on device bond5 [ 69.428871][ T5755] bond5: (slave geneve3): making interface the new active one [ 69.438350][ T5755] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 69.449346][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.461244][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.495157][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.504644][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.520126][ T5768] loop5: detected capacity change from 0 to 128 [ 69.529221][ T5768] msdos: Bad value for 'gid' [ 69.536889][ T5768] msdos: Bad value for 'gid' [ 69.550789][ T5768] netlink: 8 bytes leftover after parsing attributes in process `syz.5.562'. [ 69.621745][ T5774] netlink: 'syz.6.575': attribute type 1 has an invalid length. [ 69.642785][ T5774] 8021q: adding VLAN 0 to HW filter on device bond3 [ 69.667112][ T5774] bond3: (slave geneve3): making interface the new active one [ 69.689334][ T5774] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 70.549723][ T5797] 8021q: adding VLAN 0 to HW filter on device bond6 [ 70.565873][ T5797] ipvlan2: entered allmulticast mode [ 70.571591][ T5797] bond6: entered allmulticast mode [ 70.586497][ T5797] bond6: (slave ipip0): refused to change device type [ 70.609565][ T5800] loop7: detected capacity change from 0 to 4096 [ 70.616311][ T5800] EXT4-fs: inline encryption not supported [ 70.624342][ T5800] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=e842c018, mo2=0003] [ 70.633007][ T5800] System zones: 0-5 [ 70.651270][ T5800] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.153610][ T5423] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.176392][ T5813] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 71.199598][ T5816] loop7: detected capacity change from 0 to 128 [ 71.202743][ T5813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 71.215762][ T5816] msdos: Bad value for 'gid' [ 71.230001][ T5816] msdos: Bad value for 'gid' [ 71.247323][ T5819] vlan0: entered promiscuous mode [ 71.264886][ T5813] bond1: (slave geneve2): making interface the new active one [ 71.274028][ T5813] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 71.289745][ T5569] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.307532][ T5569] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.331514][ T5823] 8021q: adding VLAN 0 to HW filter on device bond3 [ 71.341126][ T5569] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.369754][ T5569] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.384706][ T5823] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 71.436962][ T5569] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 71.485745][ T5834] ipvlan2: entered allmulticast mode [ 71.491206][ T5834] veth1_to_bond: entered allmulticast mode [ 71.588051][ T5575] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 71.608282][ T5839] bridge_slave_1: left allmulticast mode [ 71.622695][ T5839] bridge_slave_1: left promiscuous mode [ 71.632633][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.687648][ T5839] bridge_slave_0: left allmulticast mode [ 71.693573][ T5839] bridge_slave_0: left promiscuous mode [ 71.718904][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.783281][ T5841] netlink: 'syz.3.590': attribute type 1 has an invalid length. [ 71.809989][ T5841] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.828377][ T5841] bond2: (slave ip6erspan0): making interface the new active one [ 71.837556][ T5841] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 71.925207][ T5849] netlink: 'syz.0.594': attribute type 1 has an invalid length. [ 71.942458][ T5849] 8021q: adding VLAN 0 to HW filter on device bond4 [ 71.952317][ T5850] netlink: 'syz.3.593': attribute type 4 has an invalid length. [ 71.973669][ T5849] bond4: (slave geneve3): making interface the new active one [ 71.983509][ T5850] netlink: 'syz.3.593': attribute type 4 has an invalid length. [ 71.991897][ T5849] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 72.107852][ T5861] 8021q: adding VLAN 0 to HW filter on device bond4 [ 72.141191][ T5864] netlink: 'syz.7.599': attribute type 2 has an invalid length. [ 72.150299][ T5855] loop3: detected capacity change from 0 to 764 [ 72.169915][ T5865] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 72.217741][ T12] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 72.366860][ T5572] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 72.450734][ T5855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.461500][ T5855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 72.893994][ T5860] syz.7.599 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 72.908152][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: syz.7.599 Not tainted syzkaller #0 PREEMPT(lazy) [ 72.908253][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 72.908267][ T5860] Call Trace: [ 72.908275][ T5860] [ 72.908284][ T5860] __dump_stack+0x1d/0x30 [ 72.908312][ T5860] dump_stack_lvl+0x95/0xd0 [ 72.908333][ T5860] dump_stack+0x15/0x1b [ 72.908352][ T5860] dump_header+0x80/0x240 [ 72.908405][ T5860] oom_kill_process+0x295/0x350 [ 72.908436][ T5860] out_of_memory+0x97d/0xb80 [ 72.908466][ T5860] try_charge_memcg+0x62f/0xa10 [ 72.908513][ T5860] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 72.908540][ T5860] __alloc_frozen_pages_noprof+0x18a/0x350 [ 72.908645][ T5860] alloc_pages_mpol+0xb3/0x260 [ 72.908672][ T5860] alloc_pages_noprof+0x8f/0x140 [ 72.908701][ T5860] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 72.908836][ T5860] __kvmalloc_node_noprof+0x3d4/0x640 [ 72.908862][ T5860] ? futex_hash_allocate+0x190/0x9a0 [ 72.908892][ T5860] ? futex_hash_allocate+0x190/0x9a0 [ 72.908927][ T5860] futex_hash_allocate+0x190/0x9a0 [ 72.909006][ T5860] ? cap_task_prctl+0x13f/0x6b0 [ 72.909021][ T5860] futex_hash_prctl+0xd8/0xf0 [ 72.909039][ T5860] __se_sys_prctl+0x4f4/0x1400 [ 72.909135][ T5860] __x64_sys_prctl+0x67/0x80 [ 72.909163][ T5860] x64_sys_call+0x2533/0x3020 [ 72.909180][ T5860] do_syscall_64+0x12c/0x3b0 [ 72.909199][ T5860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.909228][ T5860] RIP: 0033:0x7f01e6e0ce59 [ 72.909239][ T5860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.909287][ T5860] RSP: 002b:00007f01e585f028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 72.909327][ T5860] RAX: ffffffffffffffda RBX: 00007f01e7085fa0 RCX: 00007f01e6e0ce59 [ 72.909336][ T5860] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 72.909344][ T5860] RBP: 00007f01e6ea2d6f R08: 0000000000000000 R09: 0000000000000000 [ 72.909369][ T5860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 72.909377][ T5860] R13: 00007f01e7086038 R14: 00007f01e7085fa0 R15: 00007ffe848ff6d8 [ 72.909388][ T5860] [ 72.909393][ T5860] memory: usage 307200kB, limit 307200kB, failcnt 289 [ 73.074605][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 73.074652][ T28] audit: type=1400 audit(1781005789.234:575): avc: denied { execute } for pid=5869 comm="syz.0.611" path="/79/file0" dev="tmpfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.084998][ T5860] memory+swap: usage 318868kB, limit 9007199254740988kB, failcnt 0 [ 73.159699][ T5879] bridge_slave_1: left allmulticast mode [ 73.163236][ T5881] netlink: 'syz.6.604': attribute type 1 has an invalid length. [ 73.168948][ T5879] bridge_slave_1: left promiscuous mode [ 73.175554][ T5860] kmem: usage 307196kB, limit 9007199254740988kB, failcnt 0 [ 73.182782][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.187112][ T5860] Memory cgroup stats for /syz7: [ 73.201651][ T5860] cache 0 [ 73.209583][ T5860] rss 0 [ 73.212347][ T5860] shmem 0 [ 73.215317][ T5860] mapped_file 0 [ 73.219130][ T5860] dirty 0 [ 73.222176][ T5860] writeback 0 [ 73.225476][ T5860] workingset_refault_anon 28 [ 73.236553][ T5879] bridge_slave_0: left allmulticast mode [ 73.242806][ T5879] bridge_slave_0: left promiscuous mode [ 73.250775][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.258205][ T5860] workingset_refault_file 0 [ 73.263606][ T5860] swap 11948032 [ 73.268329][ T5860] swapcached 13873152 [ 73.279528][ T5860] pgpgin 48510 [ 73.282937][ T5860] pgpgout 48509 [ 73.286427][ T5860] pgfault 29417 [ 73.290445][ T5860] pgmajfault 20 [ 73.294072][ T5860] inactive_anon 4096 [ 73.298764][ T5860] active_anon 0 [ 73.302329][ T5860] inactive_file 0 [ 73.306083][ T5860] active_file 0 [ 73.310842][ T5860] unevictable 0 [ 73.314415][ T5860] hierarchical_memory_limit 314572800 [ 73.320956][ T5860] hierarchical_memsw_limit 9223372036854771712 [ 73.327976][ T5860] total_cache 0 [ 73.331505][ T5860] total_rss 0 [ 73.332287][ T5881] 8021q: adding VLAN 0 to HW filter on device bond5 [ 73.334779][ T5860] total_shmem 0 [ 73.334788][ T5860] total_mapped_file 0 [ 73.334796][ T5860] total_dirty 0 [ 73.334878][ T5860] total_writeback 0 [ 73.357047][ T5860] total_workingset_refault_anon 28 [ 73.362215][ T5860] total_workingset_refault_file 0 [ 73.367481][ T5860] total_swap 11948032 [ 73.371519][ T5860] total_swapcached 13873152 [ 73.376038][ T5860] total_pgpgin 48510 [ 73.380507][ T5860] total_pgpgout 48509 [ 73.384516][ T5860] total_pgfault 29417 [ 73.388783][ T5860] total_pgmajfault 20 [ 73.392832][ T5860] total_inactive_anon 4096 [ 73.397538][ T5860] total_active_anon 0 [ 73.401752][ T5860] total_inactive_file 0 [ 73.415803][ T5860] total_active_file 0 [ 73.429440][ T5860] total_unevictable 0 [ 73.439137][ T5860] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz7,task_memcg=/syz7,task=syz.7.599,pid=5858,uid=0 [ 73.455507][ T5860] Memory cgroup out of memory: Killed process 5858 (syz.7.599) total-vm:96348kB, anon-rss:1240kB, file-rss:22320kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 73.484746][ T5864] syz.7.599 (5864) used greatest stack depth: 9472 bytes left [ 73.556147][ T5896] netlink: 'syz.6.608': attribute type 4 has an invalid length. [ 73.568847][ T5898] netlink: 'syz.7.607': attribute type 1 has an invalid length. [ 73.587574][ T5896] netlink: 'syz.6.608': attribute type 4 has an invalid length. [ 73.616054][ T28] audit: type=1400 audit(1781005789.774:576): avc: denied { name_bind } for pid=5899 comm="syz.3.610" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 73.637334][ C0] Illegal XDP return value 16128 on prog (id 15) dev lo, expect packet loss! [ 73.650323][ T5900] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 73.674371][ T28] audit: type=1400 audit(1781005789.834:577): avc: denied { create } for pid=5905 comm="syz.5.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 73.726461][ T5910] __nla_validate_parse: 12 callbacks suppressed [ 73.726479][ T5910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.614'. [ 73.819569][ T28] audit: type=1326 audit(1781005789.984:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.6.620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb4f6ce59 code=0x7ffc0000 [ 73.847756][ T28] audit: type=1326 audit(1781005790.014:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.6.620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb4f6ce59 code=0x7ffc0000 [ 73.873802][ T28] audit: type=1326 audit(1781005790.004:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.6.620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb4f6ce59 code=0x7ffc0000 [ 73.900037][ T28] audit: type=1326 audit(1781005790.014:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.6.620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb4f6ce59 code=0x7ffc0000 [ 73.927910][ T28] audit: type=1326 audit(1781005790.014:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.6.620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb4f6ce59 code=0x7ffc0000 [ 73.953396][ T28] audit: type=1326 audit(1781005790.014:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.6.620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7efeb4f6ce59 code=0x7ffc0000 [ 73.979217][ T28] audit: type=1326 audit(1781005790.014:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5917 comm="syz.6.620" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efeb4f6ce59 code=0x7ffc0000 [ 74.629412][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.3.627'. [ 74.688927][ T5940] syzkaller0: entered promiscuous mode [ 74.694499][ T5940] syzkaller0: entered allmulticast mode [ 74.950304][ T5966] loop5: detected capacity change from 0 to 512 [ 74.957766][ T5969] xt_hashlimit: size too large, truncated to 1048576 [ 74.974818][ T5966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 75.007277][ T5966] ext4 filesystem being mounted at /115/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.120233][ T5978] loop6: detected capacity change from 0 to 512 [ 75.139059][ T5966] mmap: syz.5.640 (5966) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 75.146013][ T5978] EXT4-fs: Ignoring removed mblk_io_submit option [ 75.166728][ T5978] EXT4-fs (loop6): orphan cleanup on readonly fs [ 75.182577][ T5978] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 75.192416][ T5978] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.642: attempt to clear invalid blocks 2 len 1 [ 75.205761][ T5978] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 75.205979][ T5978] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, [ 75.207120][ T3611] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 75.215191][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 75.215206][ C1] EXT4-fs (loop6): initial error at time 1781005791: ext4_clear_blocks:876: inode 13 [ 75.215233][ C1] EXT4-fs (loop6): last error at time 1781005791: ext4_clear_blocks:876: inode 13 [ 75.257815][ T5978] block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 75.266405][ T5978] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.642: invalid indirect mapped block 1819239214 (level 0) [ 75.280405][ T5978] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 75.284485][ T5978] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.642: invalid indirect mapped block 1819239214 (level 1) [ 75.311738][ T5978] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 75.317586][ T5978] EXT4-fs (loop6): 1 truncate cleaned up [ 75.350232][ T5978] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 75.369239][ T5987] netlink: 'syz.5.644': attribute type 4 has an invalid length. [ 75.400082][ T5987] netlink: 'syz.5.644': attribute type 4 has an invalid length. [ 75.426389][ T5987] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 75.454406][ T4485] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.481611][ T5995] loop6: detected capacity change from 0 to 128 [ 75.599556][ T5995] ================================================================== [ 75.607679][ T5995] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 75.615624][ T5995] [ 75.617943][ T5995] write to 0xffff88810870b38c of 4 bytes by task 6002 on cpu 1: [ 75.625566][ T5995] xas_set_mark+0x12b/0x140 [ 75.630057][ T5995] __folio_start_writeback+0x17b/0x370 [ 75.635502][ T5995] __mpage_writepages+0xdbd/0x1390 [ 75.640595][ T5995] fat_writepages+0x26/0x30 [ 75.645083][ T5995] do_writepages+0x1c6/0x310 [ 75.649661][ T5995] file_write_and_wait_range+0x178/0x2f0 [ 75.655276][ T5995] mmb_fsync_noflush+0x48/0x140 [ 75.660108][ T5995] fat_file_fsync+0x98/0x110 [ 75.664701][ T5995] vfs_fsync_range+0xc5/0xe0 [ 75.669267][ T5995] generic_file_write_iter+0x1ba/0x310 [ 75.674706][ T5995] iter_file_splice_write+0x6c4/0xa80 [ 75.680069][ T5995] direct_splice_actor+0x156/0x2a0 [ 75.685184][ T5995] splice_direct_to_actor+0x311/0x670 [ 75.690553][ T5995] do_splice_direct+0x119/0x1a0 [ 75.695396][ T5995] do_sendfile+0x382/0x650 [ 75.699792][ T5995] __x64_sys_sendfile64+0x105/0x150 [ 75.704967][ T5995] x64_sys_call+0x2dc4/0x3020 [ 75.709624][ T5995] do_syscall_64+0x12c/0x3b0 [ 75.714197][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.720068][ T5995] [ 75.722371][ T5995] read to 0xffff88810870b38c of 4 bytes by task 5995 on cpu 0: [ 75.729894][ T5995] __writeback_single_inode+0x1f1/0x650 [ 75.735430][ T5995] writeback_single_inode+0x16d/0x3f0 [ 75.740810][ T5995] sync_inode_metadata+0x6e/0xa0 [ 75.745730][ T5995] mmb_fsync_noflush+0xfa/0x140 [ 75.750565][ T5995] fat_file_fsync+0x98/0x110 [ 75.755145][ T5995] vfs_fsync_range+0xc5/0xe0 [ 75.759716][ T5995] generic_file_write_iter+0x1ba/0x310 [ 75.765242][ T5995] iter_file_splice_write+0x6c4/0xa80 [ 75.770626][ T5995] direct_splice_actor+0x156/0x2a0 [ 75.775722][ T5995] splice_direct_to_actor+0x311/0x670 [ 75.781078][ T5995] do_splice_direct+0x119/0x1a0 [ 75.785911][ T5995] do_sendfile+0x382/0x650 [ 75.790305][ T5995] __x64_sys_sendfile64+0x105/0x150 [ 75.795480][ T5995] x64_sys_call+0x2dc4/0x3020 [ 75.800159][ T5995] do_syscall_64+0x12c/0x3b0 [ 75.804732][ T5995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.810606][ T5995] [ 75.812909][ T5995] value changed: 0x0a000021 -> 0x04000021 [ 75.818609][ T5995] [ 75.820908][ T5995] Reported by Kernel Concurrency Sanitizer on: [ 75.827043][ T5995] CPU: 0 UID: 0 PID: 5995 Comm: syz.6.649 Not tainted syzkaller #0 PREEMPT(lazy) [ 75.836248][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 75.846283][ T5995] ================================================================== [ 78.859366][ T6004] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512