last executing test programs: 27.290866789s ago: executing program 2 (id=3): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@void, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @val={@val, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x17c3, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x4, 0x100}}}}}}}}, 0x3a) 27.114667163s ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 27.068150314s ago: executing program 2 (id=7): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRES8, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81800) openat(0xffffffffffffff9c, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40, 0x104) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1b1a469, &(0x7f0000000000)=ANY=[@ANYRESOCT, @ANYRES32, @ANYBLOB="41319d36b19da0f92c34d4161aedb4d9c117bb97d9a14da38deb4d799f7396c16e53eea9b38952392679dc9965aff692fc7a1de3490b4e22f3468c98ec62faff6c802527cda5cb48c5bc97b57252bea2f306513526e3e61d4e206934c90150ba2c325365d34a4866416a647a2022e5485163e3fad30730c80a46b63900f5dfdd845440d244a1e889fb14a29c06fcc85f976afbb0ce220bde0da45028db74413dd6a37b7b63c2b7a26169fc2a44d210bd17af7173aa72d2ad45542299334fe9576104e3e3e7d25997fe6c8bb5fa15b761725a39fedaf8d5533570ba136ac826592163351666324320c93c98c4", @ANYRES8], 0xb, 0x0, &(0x7f0000000b40)) rename(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./sys\x00') renameat2(r0, &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0, &(0x7f00000013c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 25.817125655s ago: executing program 2 (id=30): readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/193, 0xc1}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001380)}], 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400", 0x2}], 0x1}, 0x4000) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 25.817023435s ago: executing program 32 (id=30): readv(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f00000000c0)=""/193, 0xc1}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001380)}], 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1400", 0x2}], 0x1}, 0x4000) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 16.92156021s ago: executing program 4 (id=164): modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = gettid() wait4(r1, 0x0, 0x1, 0x0) ptrace$setregs(0xd, r0, 0x5, &(0x7f0000002080)="84fff29ab187e0e7598238b73bb330b800b6a8dfb20858c411ff069d4e4b7617e77d2bee4113caeb90da3c5f72e6012834e060e9ec243030f1e204d17c2a46dd1276b2ce0d617a8b5ae78ad7ad44f03994a7d48c4988dcc38a59a9afc818413737f0f29bb6858832d56c17b21457381466e8ad258acbc4fdc2b0b9e941f37351ef0ab2bae2634b747f") ptrace$cont(0x9, r0, 0x7, 0x1) ptrace$cont(0x21, r0, 0x80000001, 0x4) 16.777245113s ago: executing program 4 (id=167): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f0000000280)=[@in6={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0xff}}, @in6={0xa, 0x4e21, 0xf, @loopback, 0x6}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x4e24, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x3}, 0x90) 16.591205628s ago: executing program 4 (id=171): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x8d, &(0x7f0000000740)=ANY=[], 0x0) 16.51168668s ago: executing program 4 (id=173): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) 16.419681582s ago: executing program 4 (id=174): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xc}, 0x201, 0x233, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) r2 = dup(r1) sendmsg$inet_sctp(r2, &(0x7f0000000040)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x6, @private2, 0xc8}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000005c0)='I1', 0x2}], 0x1, &(0x7f0000000280)=[@dstaddrv4={0x18, 0x84, 0x7, @local}], 0x18, 0x48d5}, 0x8050) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e24, @local}}}, 0x84) 16.056577371s ago: executing program 4 (id=185): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 16.009818082s ago: executing program 33 (id=185): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ba3000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000a18000/0x2000)=nil, &(0x7f0000e1d000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x3, 0x8}, 0x10f8eb, 0x1224, 0x2, 0x5, 0xc, 0x20005, 0x8, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 3.755595069s ago: executing program 0 (id=358): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x10) write$9p(r1, &(0x7f0000000100)="d5", 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="2b8974"], 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) 3.659959931s ago: executing program 0 (id=360): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xd}, 0x54) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) 3.258796701s ago: executing program 0 (id=366): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3e, 0x0) 1.835162495s ago: executing program 1 (id=383): mkdir(0x0, 0x1ff) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_mempolicy(0x4005, 0x0, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/sys/kernel/printk_devkmsg\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='onf\n', 0x4) 1.681830059s ago: executing program 1 (id=387): socket$unix(0x1, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r0, 0x4095, 0x7721, 0x16, 0x0, 0x0) 1.63971629s ago: executing program 1 (id=388): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) mkdir(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xf2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="8004", 0x0, 0x91eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x82}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000100)="c2", 0x1}], 0x1}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.590873001s ago: executing program 3 (id=389): move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d96000100000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.473635224s ago: executing program 3 (id=392): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5) 1.465451855s ago: executing program 1 (id=393): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_buf(r0, 0x0, 0x17, &(0x7f0000000080)=""/3, &(0x7f00000000c0)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230228bd7002ffdbdf250c000000180001801400020076657468315f746f5f62617461647600200003801c0003800c"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x2, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 1.452820524s ago: executing program 3 (id=394): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000074000000060a010400000000e5000000010000004c000480240001800b00010072656a656374000014000280080001400000000005000200fc000000240001800b000100736f636b6574000014000280080002400000000a080001400000000208000b40000000000900010073797a300000000014000000110001"], 0xfc}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 1.373414126s ago: executing program 3 (id=396): socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002042, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@quota}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") exit(0x5) pselect6(0x29, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x6, 0xa, 0x0, 0x800, 0xa}, 0x0, 0x0, 0x0, 0x0) 1.299691428s ago: executing program 1 (id=397): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) ioperm(0xc, 0x8, 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) flock(r1, 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x82) flock(r2, 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1.159502012s ago: executing program 5 (id=400): r0 = socket(0x2, 0x80805, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000400)={r3, 0x9, 0x10}, &(0x7f0000000440)=0xc) 1.114270343s ago: executing program 5 (id=401): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2c, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x6e1f, @private=0xa010100}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)="c4", 0x1}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="98"], 0x98}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x6, 0x20, 0x7, 0x8000000000000000}, &(0x7f00000001c0)=0x18) 555.304937ms ago: executing program 6 (id=402): r0 = perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000001a40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x40004) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000440)={0x0, 0xfffffffffffffff3, 0x6, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x20050890) 421.34791ms ago: executing program 1 (id=403): r0 = syz_clone(0x82020000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r0, &(0x7f0000000240)='attr/sockcreate\x00') syz_usb_disconnect(0xffffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 318.244832ms ago: executing program 6 (id=404): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0xa1, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x4, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0x9, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x50, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x3d, 0x3, 0x3}, @TCA_CAKE_MPU={0x0, 0xe, 0xa8}]}}]}, 0x50}}, 0x0) 283.830473ms ago: executing program 6 (id=405): unshare(0xc040400) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x8, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x9a) 269.009293ms ago: executing program 5 (id=406): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r2}, &(0x7f0000000540), &(0x7f0000000700)=r1}, 0x3d) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7606, 0x3ff, 0xfffffffd, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x20}, 0x3) 240.593744ms ago: executing program 6 (id=407): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004005) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) io_uring_enter(r1, 0x2219, 0x34d3, 0x16, 0x0, 0x0) 230.993594ms ago: executing program 3 (id=408): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_buf(r0, 0x0, 0x17, &(0x7f0000000080)=""/3, &(0x7f00000000c0)=0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230228bd7002ffdbdf250c000000180001801400020076657468315f746f5f62617461647600200003801c0003800c"], 0x4c}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x2, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 207.057275ms ago: executing program 0 (id=409): socket$inet6_udp(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x2, 0x5b6}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) close_range(r1, 0xffffffffffffffff, 0x0) 117.959997ms ago: executing program 3 (id=410): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0}, 0xb9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x10000, 0x0, 0xd16, 0x3}, &(0x7f0000000000)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 98.950468ms ago: executing program 0 (id=411): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14) syz_emit_ethernet(0x58, &(0x7f0000002200)={@empty, @random="011f4235d70d", @val={@val={0x88a8, 0x0, 0x0, 0x4}, {0x8100, 0x6, 0x0, 0x2}}, {@mpls_mc={0x8848, {[], @ipv6=@icmpv6={0x7, 0x6, "5cbc86", 0x1a, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0xf, '\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, [{0x22}]}}}}}}}, 0x0) 91.187137ms ago: executing program 6 (id=412): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000e70c00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x4004884}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r3, 0x0, 0x0, 0x4004892, &(0x7f00000001c0)={0x11, 0x1, r2, 0x1, 0x8, 0x6, @remote}, 0x14) 74.593768ms ago: executing program 5 (id=413): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x1000]}, 0x0, &(0x7f0000000040)={0x77359400}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) inotify_rm_watch(0xffffffffffffffff, 0x0) 34.807469ms ago: executing program 0 (id=414): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xd, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 34.191509ms ago: executing program 6 (id=415): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = eventfd2(0xffffffff, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) write$eventfd(r2, &(0x7f0000000080)=0xffffffff00000000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) 26.458869ms ago: executing program 5 (id=416): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r2, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r0}, 0x20) recvfrom(r0, &(0x7f00000014c0)=""/4074, 0xffa, 0x40010060, 0x0, 0xfffffffffffffe5d) 0s ago: executing program 5 (id=417): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1219, &(0x7f0000003880)="$eJzs3E9rXFUYB+A3Y2rS1PxRa7Vd6AE34uLSZOFKkCApSAaE2gitINyaGx1mnClzh8CIGF25de1HcO1O8Btk08/gLpsuuxCv9E6nTerUIiQzos+zmPtyz/lxzoFh4Az33KN3f/iyvVdme/kgGnNz0bgTke6nSNGIsde3R9ebt7Y3m82t6yld27yx/k5KaeWNXz/5eiEiLnz888ovC3G49unRvY3fDi8dXj7648YXrTK1ytTtDVKebvd6g/x2ZyXttsp2ltLdH4u8LFKrWxb9Y+1F2ns7IoYp7+4uL93pF2WZ8u4wtYthGvTSoD9M+ed5q5uyLEvLS8FTnXt2l52f7ldVFVFV5+L5qKqqOh9LcSFeiOVYiW8j4sV4KV6Oi/FKXIpX47W4XPeaxvQBAAAAAAAAAAAAAAAAAADg/+Pvzv+vxprz/wAAAAAAAAAAAAAAAAAAADAFH928tb3ZbG5dT2kxovP9/s7+zug6al978NGJIq7Gavwe9en/kVF97YPm1tVUW4vvOgcP8wf7O8/V+c1xfr1+ncDD/HzdNs6vj/LpZH4hlh7k96JV5zdiNS5OHn9jYn4x3nrzWD6L1bj7WfSiE7v12I/z36yn9P6HzSfyV+p+AAAA8F+QpUcm7t+z7Gnto/yj/fWz/x94Yn89H1fmZ7t2IsrhV+280Sn6ddEZF4t/uXN2RUxxrNMtIu5VdbFwsqlxRoM2YuZLPlbM/TumoTid4nycvDPrXyam4fHXYNYzAQAAAAAAAAAA4J844+cK52PCk2XvjYvqYOrrBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9mBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASwEAAP//NkHHfg==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x0) ftruncate(r0, 0x2007ffc) open(&(0x7f0000000180)='./bus\x00', 0x2f77e, 0x42) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 29.202891][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 29.202909][ T28] audit: type=1400 audit(1786308103.506:125): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.232436][ T28] audit: type=1400 audit(1786308103.536:126): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.233119][ T3284] cgroup: Unknown subsys name 'net' [ 29.260381][ T28] audit: type=1400 audit(1786308103.566:127): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.358368][ T3284] cgroup: Unknown subsys name 'cpuset' [ 29.364833][ T3284] cgroup: Unknown subsys name 'rlimit' [ 29.484060][ T28] audit: type=1400 audit(1786308103.786:128): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.514947][ T28] audit: type=1400 audit(1786308103.786:129): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.536724][ T28] audit: type=1400 audit(1786308103.786:130): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.557660][ T28] audit: type=1400 audit(1786308103.786:131): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.564141][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.578422][ T28] audit: type=1400 audit(1786308103.786:132): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.612436][ T28] audit: type=1400 audit(1786308103.786:133): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.627237][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.636274][ T28] audit: type=1400 audit(1786308103.786:134): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.977742][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.984857][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.992145][ T3294] bridge_slave_0: entered allmulticast mode [ 30.998603][ T3294] bridge_slave_0: entered promiscuous mode [ 31.019744][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.026916][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.034230][ T3294] bridge_slave_1: entered allmulticast mode [ 31.040662][ T3294] bridge_slave_1: entered promiscuous mode [ 31.089945][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.097112][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.104475][ T3299] bridge_slave_0: entered allmulticast mode [ 31.111045][ T3299] bridge_slave_0: entered promiscuous mode [ 31.118554][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.141191][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.148435][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.155551][ T3299] bridge_slave_1: entered allmulticast mode [ 31.162159][ T3299] bridge_slave_1: entered promiscuous mode [ 31.169572][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.182748][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.190246][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.197367][ T3300] bridge_slave_0: entered allmulticast mode [ 31.203633][ T3300] bridge_slave_0: entered promiscuous mode [ 31.228230][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.235499][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.242822][ T3300] bridge_slave_1: entered allmulticast mode [ 31.249386][ T3300] bridge_slave_1: entered promiscuous mode [ 31.255671][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.262825][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.270035][ T3301] bridge_slave_0: entered allmulticast mode [ 31.276453][ T3301] bridge_slave_0: entered promiscuous mode [ 31.291886][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.299123][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.306282][ T3295] bridge_slave_0: entered allmulticast mode [ 31.312830][ T3295] bridge_slave_0: entered promiscuous mode [ 31.323515][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.330717][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.337896][ T3301] bridge_slave_1: entered allmulticast mode [ 31.344453][ T3301] bridge_slave_1: entered promiscuous mode [ 31.352557][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.362983][ T3294] team0: Port device team_slave_0 added [ 31.368783][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.376053][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.383254][ T3295] bridge_slave_1: entered allmulticast mode [ 31.389779][ T3295] bridge_slave_1: entered promiscuous mode [ 31.405664][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.415544][ T3294] team0: Port device team_slave_1 added [ 31.426554][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.453899][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.467888][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.486564][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.500561][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.514909][ T3299] team0: Port device team_slave_0 added [ 31.521014][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.528079][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.554424][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.566178][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.580933][ T3300] team0: Port device team_slave_0 added [ 31.591742][ T3299] team0: Port device team_slave_1 added [ 31.601913][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.609063][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.635392][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.651281][ T3300] team0: Port device team_slave_1 added [ 31.657659][ T3301] team0: Port device team_slave_0 added [ 31.670300][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.677664][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.703803][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.715324][ T3295] team0: Port device team_slave_0 added [ 31.726073][ T3301] team0: Port device team_slave_1 added [ 31.741563][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.748612][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.775256][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.787032][ T3295] team0: Port device team_slave_1 added [ 31.797733][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.804895][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.831524][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.842694][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.849841][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.876307][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.898899][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.906210][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.932310][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.950158][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.957384][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.984627][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.020142][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.027388][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.055613][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.069771][ T3294] hsr_slave_0: entered promiscuous mode [ 32.075909][ T3294] hsr_slave_1: entered promiscuous mode [ 32.093016][ T3299] hsr_slave_0: entered promiscuous mode [ 32.099795][ T3299] hsr_slave_1: entered promiscuous mode [ 32.105584][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 32.111358][ T3299] Cannot create hsr debugfs directory [ 32.117200][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.124522][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.150972][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.171511][ T3300] hsr_slave_0: entered promiscuous mode [ 32.177451][ T3300] hsr_slave_1: entered promiscuous mode [ 32.183185][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 32.188942][ T3300] Cannot create hsr debugfs directory [ 32.225818][ T3301] hsr_slave_0: entered promiscuous mode [ 32.232177][ T3301] hsr_slave_1: entered promiscuous mode [ 32.238286][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 32.244279][ T3301] Cannot create hsr debugfs directory [ 32.278072][ T3295] hsr_slave_0: entered promiscuous mode [ 32.283982][ T3295] hsr_slave_1: entered promiscuous mode [ 32.289867][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 32.295686][ T3295] Cannot create hsr debugfs directory [ 32.471085][ T3294] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.480370][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.488421][ T3294] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.496926][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.504744][ T3294] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.512807][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.520682][ T3294] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.529382][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.553695][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.562687][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.570395][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.578995][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.586659][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.595630][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.604739][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.613555][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.648990][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 32.658069][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.670711][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 32.679333][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.688708][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 32.697647][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.714604][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.723472][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.745703][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.754664][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.763111][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.772278][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.780271][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.789050][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.796752][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.805488][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.840020][ T3295] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.849106][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.857232][ T3295] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.866228][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.878682][ T3295] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.887145][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.895123][ T3295] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.903643][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.914942][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.944346][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.955558][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.967191][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.974942][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.994141][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.001267][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.010028][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.030035][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.037406][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.046649][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.053968][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.081560][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.095699][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.126445][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.136509][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.158619][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.165722][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.174691][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.181771][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.194576][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.201681][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.223143][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.230790][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.246043][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.290398][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.306842][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.313975][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.329158][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.336725][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.522566][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.534927][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.552653][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.582217][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.680345][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.702917][ T3301] veth0_vlan: entered promiscuous mode [ 33.724073][ T3301] veth1_vlan: entered promiscuous mode [ 33.779016][ T3301] veth0_macvtap: entered promiscuous mode [ 33.787963][ T3301] veth1_macvtap: entered promiscuous mode [ 33.817089][ T3299] veth0_vlan: entered promiscuous mode [ 33.828850][ T3294] veth0_vlan: entered promiscuous mode [ 33.837746][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.847124][ T3299] veth1_vlan: entered promiscuous mode [ 33.859937][ T3294] veth1_vlan: entered promiscuous mode [ 33.869537][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.917501][ T3300] veth0_vlan: entered promiscuous mode [ 33.927548][ T3295] veth0_vlan: entered promiscuous mode [ 33.940567][ T3299] veth0_macvtap: entered promiscuous mode [ 33.947931][ T3294] veth0_macvtap: entered promiscuous mode [ 33.955691][ T3300] veth1_vlan: entered promiscuous mode [ 33.958160][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.965465][ T3299] veth1_macvtap: entered promiscuous mode [ 33.984486][ T3294] veth1_macvtap: entered promiscuous mode [ 33.997345][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.019913][ T3295] veth1_vlan: entered promiscuous mode [ 34.022508][ T3500] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 34.043721][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.054180][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.067807][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.078400][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.088581][ T3300] veth0_macvtap: entered promiscuous mode [ 34.098155][ T2399] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.110363][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.136926][ T3300] veth1_macvtap: entered promiscuous mode [ 34.165336][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.174524][ T3295] veth0_macvtap: entered promiscuous mode [ 34.189161][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.204421][ T3295] veth1_macvtap: entered promiscuous mode [ 34.212744][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.221658][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 34.221672][ T28] audit: type=1400 audit(1786308108.526:161): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 34.258724][ T2516] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.271152][ T28] audit: type=1400 audit(1786308108.576:162): avc: denied { prog_load } for pid=3504 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.291187][ T3505] Driver unsupported XDP return value 0 on prog (id 1) dev N/A, expect packet loss! [ 34.295421][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.311163][ T28] audit: type=1400 audit(1786308108.576:163): avc: denied { bpf } for pid=3504 comm="syz.0.1" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.332934][ T28] audit: type=1400 audit(1786308108.576:164): avc: denied { perfmon } for pid=3504 comm="syz.0.1" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.355669][ T28] audit: type=1400 audit(1786308108.576:165): avc: denied { map_create } for pid=3504 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.384865][ T3508] loop0: detected capacity change from 0 to 1024 [ 34.388158][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.395976][ T28] audit: type=1400 audit(1786308108.576:166): avc: denied { map_read map_write } for pid=3504 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.419116][ T28] audit: type=1400 audit(1786308108.576:167): avc: denied { prog_run } for pid=3504 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 34.430147][ T3508] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.452302][ T28] audit: type=1400 audit(1786308108.756:168): avc: denied { mount } for pid=3507 comm="syz.0.8" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.485717][ T28] audit: type=1400 audit(1786308108.786:169): avc: denied { open } for pid=3512 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.505982][ T28] audit: type=1400 audit(1786308108.786:170): avc: denied { kernel } for pid=3512 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 34.537571][ T2516] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.546987][ T2516] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.560397][ T2516] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.647363][ T2399] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.658572][ T2399] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.668394][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.687512][ T2516] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.696919][ T2516] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.738430][ T30] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.774458][ T30] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.817116][ T3522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5'. [ 34.831506][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.880803][ T2516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.893404][ T2516] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.937368][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.958842][ T49] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.970704][ T3538] netlink: 'syz.3.16': attribute type 10 has an invalid length. [ 34.984956][ T3538] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.996109][ T3538] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 35.007527][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.190242][ T3558] netlink: 88 bytes leftover after parsing attributes in process `syz.3.24'. [ 35.428005][ T3301] syz-executor (3301) used greatest stack depth: 10808 bytes left [ 35.464023][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.670445][ T3587] process 'syz.4.36' launched './file0' with NULL argv: empty string added [ 35.816717][ T3594] capability: warning: `syz.4.39' uses 32-bit capabilities (legacy support in use) [ 35.991282][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.008853][ T3573] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.016365][ T3573] bridge_slave_0: entered allmulticast mode [ 36.023651][ T3573] bridge_slave_0: entered promiscuous mode [ 36.056458][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.067967][ T3573] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.086805][ T3573] bridge_slave_1: entered allmulticast mode [ 36.103450][ T3573] bridge_slave_1: entered promiscuous mode [ 36.142296][ T3573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.166148][ T3573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.201037][ T3573] team0: Port device team_slave_0 added [ 36.218674][ T3573] team0: Port device team_slave_1 added [ 36.272141][ T3573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.285536][ T3573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.347120][ T3573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.359871][ T3573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.366920][ T3616] loop0: detected capacity change from 0 to 512 [ 36.367841][ T3616] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.379454][ T3573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.416434][ T3573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.433032][ T3616] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.463405][ T3573] hsr_slave_0: entered promiscuous mode [ 36.471337][ T3573] hsr_slave_1: entered promiscuous mode [ 36.478726][ T3573] debugfs: 'hsr0' already exists in 'hsr' [ 36.485385][ T3616] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 36.498666][ T3573] Cannot create hsr debugfs directory [ 36.508444][ T3618] loop1: detected capacity change from 0 to 512 [ 36.515406][ T3616] EXT4-fs (loop0): 1 truncate cleaned up [ 36.521950][ T3616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.537742][ T3618] ======================================================= [ 36.537742][ T3618] WARNING: The mand mount option has been deprecated and [ 36.537742][ T3618] and is ignored by this kernel. Remove the mand [ 36.537742][ T3618] option from the mount to silence this warning. [ 36.537742][ T3618] ======================================================= [ 36.668339][ T3618] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.731262][ T3618] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 36.794202][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.976804][ T3584] loop3: detected capacity change from 0 to 512 [ 37.013378][ T3573] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.047859][ T3573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.074499][ T3573] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 37.119525][ T3573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.268498][ T3573] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 37.311434][ T3573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.325798][ T3573] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 37.592275][ T3584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.248285][ T3573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 38.339326][ T3295] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 67: padding at end of block bitmap is not set [ 38.380931][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.396098][ T3295] EXT4-fs (loop3): Remounting filesystem read-only [ 38.432816][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.449604][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.458900][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.468041][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.477170][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.486441][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.495680][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.505404][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.515412][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.525042][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.534971][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.544400][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.553816][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.563343][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.572682][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.583289][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.594231][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.605975][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.615389][ T3295] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=12 [ 38.632439][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.660946][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.739585][ T3573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.770313][ T3573] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.795216][ T3739] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.802498][ T3739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.854586][ T3736] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.862048][ T3736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.873628][ T3764] netlink: 4 bytes leftover after parsing attributes in process `syz.3.62'. [ 38.949163][ T3573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.012984][ T36] bridge_slave_1: left allmulticast mode [ 39.019017][ T36] bridge_slave_1: left promiscuous mode [ 39.024904][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.033524][ T36] bridge_slave_0: left allmulticast mode [ 39.039747][ T36] bridge_slave_0: left promiscuous mode [ 39.045556][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.210734][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.232433][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.242828][ T36] bond0 (unregistering): Released all slaves [ 39.262383][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 39.262410][ T28] audit: type=1400 audit(1786308113.566:274): avc: denied { write } for pid=3776 comm="syz.3.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.321910][ T36] hsr_slave_0: left promiscuous mode [ 39.333344][ T36] hsr_slave_1: left promiscuous mode [ 39.338145][ T28] audit: type=1400 audit(1786308113.626:275): avc: denied { getopt } for pid=3788 comm="syz.3.69" lport=36861 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 39.345516][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.457479][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.459859][ T3797] loop3: detected capacity change from 0 to 1024 [ 39.489628][ T28] audit: type=1400 audit(1786308113.786:276): avc: denied { write } for pid=3800 comm="syz.4.72" lport=55348 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 39.516041][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.534744][ T3797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.568597][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.589942][ T28] audit: type=1400 audit(1786308113.796:277): avc: denied { write } for pid=3783 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.632431][ T28] audit: type=1400 audit(1786308113.906:278): avc: denied { write } for pid=3795 comm="syz.3.71" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 39.654469][ T28] audit: type=1400 audit(1786308113.926:279): avc: denied { write } for pid=3807 comm="syz.4.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.660029][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.685401][ T36] veth1_macvtap: left promiscuous mode [ 39.695964][ T36] veth0_macvtap: left promiscuous mode [ 39.701905][ T28] audit: type=1400 audit(1786308113.926:280): avc: denied { write } for pid=3806 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.724690][ T36] veth1_vlan: left promiscuous mode [ 39.736451][ T28] audit: type=1400 audit(1786308113.956:281): avc: denied { mount } for pid=3809 comm="syz.1.74" name="/" dev="ramfs" ino=5458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 39.758940][ T36] veth0_vlan: left promiscuous mode [ 39.834491][ T36] team0 (unregistering): Port device team_slave_1 removed [ 39.845848][ T36] team0 (unregistering): Port device team_slave_0 removed [ 39.900871][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 40.060701][ T28] audit: type=1400 audit(1786308114.366:282): avc: denied { node_bind } for pid=3833 comm="syz.1.80" saddr=127.0.0.1 src=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 40.142139][ T3573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.177964][ T28] audit: type=1400 audit(1786308114.486:283): avc: denied { write } for pid=3831 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.335945][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 40.522721][ T3573] veth0_vlan: entered promiscuous mode [ 40.557059][ T3573] veth1_vlan: entered promiscuous mode [ 40.606819][ T3573] veth0_macvtap: entered promiscuous mode [ 40.635009][ T3573] veth1_macvtap: entered promiscuous mode [ 40.672380][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.703004][ T3573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.747449][ T3723] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.772936][ T3723] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.792675][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 40.813207][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 40.838791][ T3896] gretap1: entered promiscuous mode [ 40.859027][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.861883][ T3896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 40.880516][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.895240][ T3903] netlink: 'syz.3.92': attribute type 49 has an invalid length. [ 40.997743][ T3910] loop4: detected capacity change from 0 to 256 [ 41.026611][ T3910] FAT-fs (loop4): bogus logical sector size 65529 [ 41.048168][ T3910] FAT-fs (loop4): Can't find a valid FAT filesystem [ 41.195960][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 41.434912][ T3947] loop5: detected capacity change from 0 to 512 [ 41.463560][ T3947] EXT4-fs: inline encryption not supported [ 41.481362][ T3947] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 41.507380][ T3947] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.102: corrupted in-inode xattr: e_value size too large [ 41.541359][ T3947] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.542991][ T3947] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.102: couldn't read orphan inode 15 (err -117) [ 41.552791][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 41.552815][ C1] EXT4-fs (loop5): initial error at time 1786308115: ext4_iget_extra_inode:5180: inode 15 [ 41.552851][ C1] EXT4-fs (loop5): last error at time 1786308115: ext4_iget_extra_inode:5180: inode 15 [ 41.675630][ T3947] loop5: lost filesystem error report for type 5 error -117 [ 41.676390][ T3947] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.818213][ T3573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.030560][ T3976] netlink: 7 bytes leftover after parsing attributes in process `syz.5.112'. [ 42.177312][ T3998] netlink: 'syz.3.117': attribute type 9 has an invalid length. [ 42.196316][ T3998] netlink: 'syz.3.117': attribute type 7 has an invalid length. [ 42.218317][ T3998] netlink: 'syz.3.117': attribute type 8 has an invalid length. [ 42.690843][ T4049] netlink: 'syz.5.133': attribute type 1 has an invalid length. [ 43.160544][ T4083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 43.171078][ T4083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.140'. [ 43.204143][ T4083] Zero length message leads to an empty skb [ 43.218411][ T3723] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.227683][ T3723] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.249106][ T3723] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.285208][ T3723] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 43.541851][ T4093] lo: entered allmulticast mode [ 43.548085][ T4092] lo: left allmulticast mode [ 43.809991][ T4119] syzkaller1: entered promiscuous mode [ 43.820065][ T4119] syzkaller1: entered allmulticast mode [ 44.140419][ T4131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.159166][ T4131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.282973][ T28] kauditd_printk_skb: 66 callbacks suppressed [ 44.282992][ T28] audit: type=1326 audit(1786308118.586:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.4.162" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fce51e0d9 code=0x7ffc0000 [ 44.315196][ T28] audit: type=1326 audit(1786308118.586:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.4.162" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8fce51e0d9 code=0x7ffc0000 [ 44.396879][ T28] audit: type=1326 audit(1786308118.626:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.4.162" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8fce51e0d9 code=0x7ffc0000 [ 44.486378][ T28] audit: type=1326 audit(1786308118.626:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4134 comm="syz.4.162" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f8fce51e0d9 code=0x7ffc0000 [ 44.547231][ T4149] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.168'. [ 44.982783][ T28] audit: type=1400 audit(1786308119.286:354): avc: denied { create } for pid=4186 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.019562][ T28] audit: type=1400 audit(1786308119.306:355): avc: denied { setopt } for pid=4186 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.047021][ T28] audit: type=1400 audit(1786308119.306:356): avc: denied { bind } for pid=4186 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.068450][ T28] audit: type=1400 audit(1786308119.306:357): avc: denied { write } for pid=4186 comm="syz.5.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 45.083094][ T4193] loop0: detected capacity change from 0 to 2048 [ 45.139730][ T4197] veth0: entered promiscuous mode [ 45.145229][ T4197] batadv_slave_1: entered promiscuous mode [ 45.154661][ T4197] batadv_slave_1: left promiscuous mode [ 45.155449][ T4193] loop0: p1 < > p4 < > [ 45.160734][ T4197] veth0: left promiscuous mode [ 45.166222][ T4193] loop0: partition table partially beyond EOD, truncated [ 45.179739][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.190427][ T4193] loop0: p1 start 8388608 is beyond EOD, truncated [ 45.207798][ T2981] loop0: p1 < > p4 < > [ 45.217407][ T2981] loop0: partition table partially beyond EOD, truncated [ 45.233508][ T2981] loop0: p1 start 8388608 is beyond EOD, truncated [ 45.256477][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.301350][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.342291][ T4210] loop0: detected capacity change from 0 to 1024 [ 45.354542][ T4212] team0 (unregistering): Port device team_slave_0 removed [ 45.365877][ T4212] team0 (unregistering): Port device team_slave_1 removed [ 45.379287][ T28] audit: type=1400 audit(1786308119.686:358): avc: denied { module_request } for pid=4213 comm="syz-executor" kmod="netdev-nr6" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.381499][ T4210] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 45.434393][ T4210] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.446048][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.473760][ T4210] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 3: comm syz.0.189: lblock 3 mapped to illegal pblock 3 (length 3) [ 45.480764][ T28] audit: type=1400 audit(1786308119.776:359): avc: denied { write } for pid=4209 comm="syz.0.189" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.519555][ T4210] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 45.570619][ T4224] loop3: detected capacity change from 0 to 1024 [ 45.586716][ T4210] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.586716][ T4210] [ 45.602987][ T4210] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 1: comm syz.0.189: lblock 1 mapped to illegal pblock 1 (length 2) [ 45.606744][ T3285] udevd[3285]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 45.617949][ T4224] EXT4-fs: inline encryption not supported [ 45.650576][ T4224] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 45.664065][ T4210] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 117 [ 45.685329][ T36] bridge_slave_1: left allmulticast mode [ 45.691223][ T36] bridge_slave_1: left promiscuous mode [ 45.716808][ T4210] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.716808][ T4210] [ 45.720316][ T4239] loop1: detected capacity change from 0 to 1024 [ 45.731131][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.739678][ T4239] EXT4-fs: Ignoring removed nobh option [ 45.750376][ T4224] EXT4-fs error (device loop3): ext4_free_blocks:6718: comm syz.3.192: Freeing blocks not in datazone - block = 0, count = 4096 [ 45.757556][ T4239] EXT4-fs: Ignoring removed bh option [ 45.774384][ T4235] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 4: comm syz.0.189: lblock 4 mapped to illegal pblock 4 (length 2) [ 45.790750][ T4224] loop3: lost filesystem error report for type 5 error -117 [ 45.792281][ T36] bridge_slave_0: left allmulticast mode [ 45.805933][ T4239] EXT4-fs (loop1): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 45.807285][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 45.816061][ T4235] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 45.822500][ C1] EXT4-fs (loop3): initial error at time 1786308120: ext4_free_blocks:6718 [ 45.822537][ C1] EXT4-fs (loop3): last error at time 1786308120: ext4_free_blocks:6718 [ 45.836451][ T36] bridge_slave_0: left promiscuous mode [ 45.843764][ C1] [ 45.855157][ T4224] EXT4-fs (loop3): Remounting filesystem read-only [ 45.858312][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.860317][ T4224] EXT4-fs (loop3): 1 orphan inode deleted [ 45.867068][ T4235] EXT4-fs (loop0): This should not happen!! Data will be lost [ 45.867068][ T4235] [ 45.876543][ T4224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.883677][ T4239] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 45.891948][ T4235] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: block 8: comm syz.0.189: lblock 8 mapped to illegal pblock 8 (length 8) [ 45.903644][ T3729] EXT4-fs (loop3): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 45.912307][ T4239] System zones: 0-1, 3-12 [ 45.941600][ T4235] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 45.941907][ T4239] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.987401][ T3729] EXT4-fs (loop3): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 45.998073][ T3729] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 46.003683][ T4235] EXT4-fs (loop0): This should not happen!! Data will be lost [ 46.003683][ T4235] [ 46.056475][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 46.076842][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 46.087140][ T36] bond0 (unregistering): Released all slaves [ 46.156686][ T3294] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.169602][ T36] hsr_slave_0: left promiscuous mode [ 46.183768][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.200503][ T36] hsr_slave_1: left promiscuous mode [ 46.209891][ T3299] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 46.226021][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.234458][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 46.243832][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.252563][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.274371][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.304101][ T36] veth1_macvtap: left promiscuous mode [ 46.310302][ T36] veth0_macvtap: left promiscuous mode [ 46.317092][ T36] veth1_vlan: left promiscuous mode [ 46.331577][ T36] veth0_vlan: left promiscuous mode [ 46.348816][ T4278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.203'. [ 46.395747][ T36] team0 (unregistering): Port device team_slave_1 removed [ 46.406589][ T36] team0 (unregistering): Port device team_slave_0 removed [ 46.443294][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 46.558425][ T4295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 46.568124][ T4295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.614619][ T4213] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.622107][ T4213] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.629818][ T4213] bridge_slave_0: entered allmulticast mode [ 46.636542][ T4213] bridge_slave_0: entered promiscuous mode [ 46.645938][ T4213] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.653397][ T4213] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.661170][ T4213] bridge_slave_1: entered allmulticast mode [ 46.668871][ T4213] bridge_slave_1: entered promiscuous mode [ 46.698960][ T4213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.709814][ T4213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.731478][ T4213] team0: Port device team_slave_0 added [ 46.740068][ T4213] team0: Port device team_slave_1 added [ 46.755671][ T4318] uprobe: syz.0.210:4318 failed to unregister, leaking uprobe [ 46.759819][ T4213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.770874][ T4213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.797820][ T4213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.809797][ T4213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.817050][ T4213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.845840][ T4213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.861126][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 46.890696][ T4213] hsr_slave_0: entered promiscuous mode [ 46.896943][ T4213] hsr_slave_1: entered promiscuous mode [ 46.903410][ T4213] debugfs: 'hsr0' already exists in 'hsr' [ 46.909542][ T4213] Cannot create hsr debugfs directory [ 46.932299][ T4323] loop0: detected capacity change from 0 to 1024 [ 46.946498][ T4323] EXT4-fs: inline encryption not supported [ 46.981550][ T4323] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.996354][ T4323] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.211: Freeing blocks not in datazone - block = 0, count = 4096 [ 47.017383][ T4323] loop0: lost filesystem error report for type 5 error -117 [ 47.017599][ T4323] EXT4-fs (loop0): Remounting filesystem read-only [ 47.031786][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 47.031819][ C1] EXT4-fs (loop0): initial error at time 1786308121: ext4_free_blocks:6718 [ 47.031844][ C1] EXT4-fs (loop0): last error at time 1786308121: ext4_free_blocks:6718 [ 47.064596][ T4323] EXT4-fs (loop0): 1 orphan inode deleted [ 47.074925][ T4323] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.099044][ T36] EXT4-fs (loop0): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 47.125246][ T36] EXT4-fs (loop0): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 47.136296][ T36] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 47.198348][ T4213] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 47.228128][ T4213] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.238149][ T4213] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 47.263285][ T4213] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.273374][ T4213] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 47.293089][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.311189][ T4213] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.340620][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 47.351234][ T4213] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 47.370522][ T4213] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.488638][ T4213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.514442][ T4213] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.525314][ T3719] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.532486][ T3719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.547571][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.554820][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.772074][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 47.993748][ T4411] loop5: detected capacity change from 0 to 1024 [ 48.019263][ T4213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.039171][ T4411] EXT4-fs: inline encryption not supported [ 48.099059][ T4411] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 48.185051][ T4411] EXT4-fs error (device loop5): ext4_free_blocks:6718: comm syz.5.227: Freeing blocks not in datazone - block = 0, count = 4096 [ 48.238887][ T4411] loop5: lost filesystem error report for type 5 error -117 [ 48.242140][ T4411] EXT4-fs (loop5): Remounting filesystem read-only [ 48.249621][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 48.249650][ C0] EXT4-fs (loop5): initial error at time 1786308122: ext4_free_blocks:6718 [ 48.249672][ C0] EXT4-fs (loop5): last error at time 1786308122: ext4_free_blocks:6718 [ 48.310206][ T4411] EXT4-fs (loop5): 1 orphan inode deleted [ 48.328697][ T36] EXT4-fs (loop5): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 48.351525][ T36] EXT4-fs (loop5): Quota write (off=2048, len=1024) cancelled because transaction is not started [ 48.363322][ T4411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.387582][ T36] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 48.481787][ T4213] veth0_vlan: entered promiscuous mode [ 48.506172][ T4213] veth1_vlan: entered promiscuous mode [ 48.550622][ T4213] veth0_macvtap: entered promiscuous mode [ 48.558780][ T4213] veth1_macvtap: entered promiscuous mode [ 48.571027][ T3573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.582969][ T4213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.604051][ T4213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.637593][ T36] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.659001][ T36] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.671726][ T4447] loop5: detected capacity change from 0 to 512 [ 48.697691][ T3736] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.711459][ T4447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.719582][ T3723] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.733589][ T4447] ext4 filesystem being mounted at /37/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.813909][ T4447] syz.5.233 (4447) used greatest stack depth: 10424 bytes left [ 48.818391][ T4458] sctp: [Deprecated]: syz.3.235 (pid 4458) Use of struct sctp_assoc_value in delayed_ack socket option. [ 48.818391][ T4458] Use struct sctp_sack_info instead [ 48.848833][ T3573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.172490][ T4479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.243'. [ 49.328667][ T28] kauditd_printk_skb: 67 callbacks suppressed [ 49.328699][ T28] audit: type=1400 audit(1786308123.636:412): avc: denied { read } for pid=4476 comm="syz.0.242" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.360424][ T28] audit: type=1400 audit(1786308123.636:413): avc: denied { open } for pid=4476 comm="syz.0.242" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.394569][ T4486] loop6: detected capacity change from 0 to 512 [ 49.408348][ T28] audit: type=1400 audit(1786308123.666:414): avc: denied { ioctl } for pid=4476 comm="syz.0.242" path="/dev/input/event0" dev="devtmpfs" ino=242 ioctlcmd=0x4502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 49.414594][ T4486] EXT4-fs: inline encryption not supported [ 49.457400][ T4486] EXT4-fs: Mount option(s) incompatible with ext3 [ 49.512083][ T28] audit: type=1400 audit(1786308123.666:415): avc: denied { setopt } for pid=4485 comm="syz.6.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.562145][ T28] audit: type=1400 audit(1786308123.866:416): avc: denied { read } for pid=4492 comm="syz.1.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.612825][ T28] audit: type=1400 audit(1786308123.906:417): avc: denied { mount } for pid=4485 comm="syz.6.246" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.691111][ T28] audit: type=1400 audit(1786308123.996:418): avc: denied { unmount } for pid=4213 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 49.740008][ T4475] syz.5.241 (4475) used greatest stack depth: 9984 bytes left [ 49.761646][ T28] audit: type=1400 audit(1786308124.046:419): avc: denied { connect } for pid=4496 comm="syz.6.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.789253][ T28] audit: type=1400 audit(1786308124.046:420): avc: denied { write } for pid=4496 comm="syz.6.250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.797788][ T4501] netlink: 4 bytes leftover after parsing attributes in process `syz.6.252'. [ 49.809108][ T28] audit: type=1400 audit(1786308124.096:421): avc: denied { ioctl } for pid=4498 comm="syz.6.252" path="socket:[7745]" dev="sockfs" ino=7745 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 50.170990][ T4523] loop3: detected capacity change from 0 to 512 [ 50.178511][ T4523] EXT4-fs: inline encryption not supported [ 50.185627][ T4523] EXT4-fs: Mount option(s) incompatible with ext3 [ 50.271361][ T4529] loop0: detected capacity change from 0 to 512 [ 50.279428][ T4529] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.299302][ T4529] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.264: iget: bad i_size value: 38620345925642 [ 50.312198][ T4529] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.312383][ T4529] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.264: couldn't read orphan inode 15 (err -117) [ 50.321844][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 50.321863][ C0] EXT4-fs (loop0): initial error at time 1786308124: ext4_orphan_get:1399: inode 15 [ 50.321893][ C0] EXT4-fs (loop0): last error at time 1786308124: ext4_orphan_get:1399: inode 15 [ 50.360008][ T4529] loop0: lost filesystem error report for type 5 error -117 [ 50.364599][ T4529] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.365959][ T4532] loop5: detected capacity change from 0 to 1024 [ 50.395495][ T4532] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.409829][ T4532] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 50.418993][ T4532] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 50.475749][ T4532] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.262: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 50.515070][ T4532] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 50.515261][ T4532] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.262: couldn't read orphan inode 11 (err -117) [ 50.524652][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 50.524680][ C0] EXT4-fs (loop5): initial error at time 1786308124: ext4_ext_check_inode:521: inode 11 [ 50.524716][ C0] EXT4-fs (loop5): last error at time 1786308124: ext4_ext_check_inode:521: inode 11 [ 50.564974][ T4529] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.264: bg 0: block 5: invalid block bitmap [ 50.578313][ T4532] loop5: lost filesystem error report for type 5 error -117 [ 50.579141][ T4532] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.599811][ T4529] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2008 with error 28 [ 50.644859][ T4529] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.644859][ T4529] [ 50.670049][ T4529] EXT4-fs (loop0): Total free blocks count 0 [ 50.683748][ T4529] EXT4-fs (loop0): Free/Dirty block details [ 50.697203][ T4529] EXT4-fs (loop0): free_blocks=0 [ 50.710674][ T4529] EXT4-fs (loop0): dirty_blocks=2008 [ 50.717350][ T4529] EXT4-fs (loop0): Block reservation details [ 50.723378][ T4529] EXT4-fs (loop0): i_reserved_data_blocks=2008 [ 50.740575][ T4535] EXT4-fs (loop0): shut down requested (0) [ 50.817121][ T4525] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.262: Invalid block bitmap block 0 in block_group 0 [ 50.853988][ T4525] EXT4-fs error (device loop5): ext4_acquire_dquot:7041: comm syz.5.262: Failed to acquire dquot type 0 [ 51.002151][ T4525] syz.5.262 (4525) used greatest stack depth: 9664 bytes left [ 51.012145][ T3573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.055963][ T4559] loop0: detected capacity change from 0 to 512 [ 51.092613][ T4559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.110152][ T4559] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.164577][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.812319][ T4609] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 52.003038][ T4634] loop3: detected capacity change from 0 to 512 [ 52.054030][ T4634] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.066966][ T4634] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.396779][ T4661] loop0: detected capacity change from 0 to 256 [ 52.431418][ T4661] vfat: Unknown parameter 'shª(1q+»Áortname' [ 52.840795][ T3295] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 52.860057][ T3295] CPU: 0 UID: 0 PID: 3295 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 52.860092][ T3295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.860106][ T3295] Call Trace: [ 52.860170][ T3295] [ 52.860180][ T3295] __dump_stack+0x1d/0x30 [ 52.860212][ T3295] dump_stack_lvl+0x95/0xd0 [ 52.860245][ T3295] dump_stack+0x15/0x1b [ 52.860267][ T3295] dump_header+0x80/0x240 [ 52.860347][ T3295] oom_kill_process+0x295/0x350 [ 52.860404][ T3295] out_of_memory+0x981/0xbc0 [ 52.860503][ T3295] try_charge_memcg+0x621/0xa00 [ 52.860524][ T3295] ? should_fail_ex+0x30/0x270 [ 52.860563][ T3295] charge_memcg+0x6d/0x120 [ 52.860642][ T3295] __mem_cgroup_charge+0x28/0xb0 [ 52.860675][ T3295] filemap_add_folio+0x110/0x350 [ 52.860707][ T3295] __filemap_get_folio_mpol+0x32e/0x840 [ 52.860746][ T3295] filemap_fault+0x458/0xb60 [ 52.860802][ T3295] handle_mm_fault+0x167a/0x2da0 [ 52.860892][ T3295] do_user_addr_fault+0x634/0x1060 [ 52.860929][ T3295] ? trace_page_fault_user+0x1f/0xa0 [ 52.861032][ T3295] exc_page_fault+0x62/0xa0 [ 52.861058][ T3295] asm_exc_page_fault+0x26/0x30 [ 52.861082][ T3295] RIP: 0033:0x7f145654bf94 [ 52.861124][ T3295] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 20 98 ee 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 19 97 ee 00 48 01 d1 [ 52.861142][ T3295] RSP: 002b:00007fffe2b1b1a0 EFLAGS: 00010202 [ 52.861160][ T3295] RAX: 0000001b32824000 RBX: 00000000000000a0 RCX: 000000000000cb20 [ 52.861175][ T3295] RDX: 000000000bcab25f RSI: 00007fffe2b1b230 RDI: 0000000000000001 [ 52.861190][ T3295] RBP: 00007fffe2b1b1dc R08: 000000002cfb6a11 R09: 3fffffffffffffff [ 52.861207][ T3295] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 52.861261][ T3295] R13: 00000000000927c0 R14: 000000000000cbaf R15: 00007fffe2b1b230 [ 52.861283][ T3295] [ 52.861304][ T3295] memory: usage 307200kB, limit 307200kB, failcnt 340 [ 53.059244][ T3295] memory+swap: usage 2676kB, limit 9007199254740988kB, failcnt 0 [ 53.068583][ T3295] kmem: usage 2040kB, limit 9007199254740988kB, failcnt 0 [ 53.075756][ T3295] Memory cgroup stats for /syz3: [ 53.076026][ T3295] cache 8192 [ 53.077596][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.081355][ T3295] rss 0 [ 53.097942][ T3295] shmem 0 [ 53.100960][ T3295] mapped_file 0 [ 53.109626][ T3295] dirty 0 [ 53.112799][ T3295] writeback 0 [ 53.116237][ T3295] workingset_refault_anon 56 [ 53.117097][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.121303][ T3295] workingset_refault_file 577 [ 53.136821][ T3295] swap 466944 [ 53.140455][ T3295] swapcached 696320 [ 53.144374][ T3295] pgpgin 7856 [ 53.165617][ T3295] pgpgout 7854 [ 53.175242][ T3295] pgfault 13285 [ 53.183152][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.183876][ T3295] pgmajfault 31 [ 53.198139][ T3295] inactive_anon 0 [ 53.201862][ T3295] active_anon 0 [ 53.218055][ T3295] inactive_file 4096 [ 53.225917][ T3295] active_file 4096 [ 53.235838][ T3295] unevictable 0 [ 53.250056][ T3295] hierarchical_memory_limit 314572800 [ 53.269373][ T3295] hierarchical_memsw_limit 9223372036854771712 [ 53.290653][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 53.303387][ T3295] total_cache 8192 [ 53.316267][ T3295] total_rss 0 [ 53.320428][ T3295] total_shmem 0 [ 53.336855][ T3295] total_mapped_file 0 [ 53.352459][ T3295] total_dirty 0 [ 53.363854][ T3295] total_writeback 0 [ 53.373473][ T3295] total_workingset_refault_anon 56 [ 53.383334][ T3295] total_workingset_refault_file 577 [ 53.408019][ T3295] total_swap 466944 [ 53.425539][ T3295] total_swapcached 696320 [ 53.441063][ T3295] total_pgpgin 7856 [ 53.450568][ T3295] total_pgpgout 7854 [ 53.454691][ T3295] total_pgfault 13285 [ 53.458978][ T3295] total_pgmajfault 31 [ 53.463568][ T3295] total_inactive_anon 0 [ 53.469013][ T3295] total_active_anon 0 [ 53.473121][ T3295] total_inactive_file 4096 [ 53.477948][ T3295] total_active_file 4096 [ 53.482334][ T3295] total_unevictable 0 [ 53.507544][ T36] bridge_slave_1: left allmulticast mode [ 53.514445][ T36] bridge_slave_1: left promiscuous mode [ 53.520384][ T3295] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.293,pid=4633,uid=0 [ 53.535950][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.538738][ T3295] Memory cgroup out of memory: Killed process 4633 (syz.3.293) total-vm:96236kB, anon-rss:1240kB, file-rss:22216kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 53.562265][ T36] bridge_slave_0: left allmulticast mode [ 53.562715][ T4733] netlink: 24 bytes leftover after parsing attributes in process `syz.0.313'. [ 53.568580][ T36] bridge_slave_0: left promiscuous mode [ 53.590154][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.599544][ T4634] syz.3.293 (4634) used greatest stack depth: 9552 bytes left [ 53.623186][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.742641][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.773292][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 53.790134][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.317'. [ 53.803945][ T36] bond0 (unregistering): Released all slaves [ 53.888524][ T4752] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 53.971836][ T4752] netlink: 'syz.0.319': attribute type 2 has an invalid length. [ 53.997690][ T4752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.319'. [ 54.021762][ T36] hsr_slave_0: left promiscuous mode [ 54.078851][ T36] hsr_slave_1: left promiscuous mode [ 54.087408][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.106009][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.170954][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.181397][ T4772] netlink: 28 bytes leftover after parsing attributes in process `syz.5.323'. [ 54.181402][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 54.218227][ T36] veth1_macvtap: left promiscuous mode [ 54.223898][ T36] veth0_macvtap: left promiscuous mode [ 54.229743][ T36] veth1_vlan: left promiscuous mode [ 54.235167][ T36] veth0_vlan: left promiscuous mode [ 54.339512][ T36] team0 (unregistering): Port device team_slave_1 removed [ 54.350899][ T36] team0 (unregistering): Port device team_slave_0 removed [ 54.500171][ T4787] loop0: detected capacity change from 0 to 1024 [ 54.534067][ T4787] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.566565][ T4691] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.582562][ T4787] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 54.601184][ T4691] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.610974][ T4691] bridge_slave_0: entered allmulticast mode [ 54.620240][ T28] kauditd_printk_skb: 54 callbacks suppressed [ 54.620326][ T28] audit: type=1400 audit(1786308128.926:474): avc: denied { write } for pid=4785 comm="syz.0.326" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.632165][ T4691] bridge_slave_0: entered promiscuous mode [ 54.655029][ T4691] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.662311][ T4691] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.670502][ T4691] bridge_slave_1: entered allmulticast mode [ 54.677163][ T4691] bridge_slave_1: entered promiscuous mode [ 54.701869][ T4691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.712668][ T4691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.731383][ T28] audit: type=1400 audit(1786308128.926:475): avc: denied { add_name } for pid=4785 comm="syz.0.326" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.742293][ T4691] team0: Port device team_slave_0 added [ 54.768243][ T4691] team0: Port device team_slave_1 added [ 54.811737][ T4691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.843646][ T4691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.906412][ T28] audit: type=1400 audit(1786308129.206:476): avc: denied { write } for pid=4795 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.940068][ T4691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.986269][ T4691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.004486][ T4691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.030759][ T28] audit: type=1400 audit(1786308129.306:477): avc: denied { write } for pid=4814 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 55.063690][ T4691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.096903][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 55.143083][ T28] audit: type=1326 audit(1786308129.396:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4819 comm="syz.5.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a13abe0d9 code=0x7ffc0000 [ 55.169075][ T28] audit: type=1326 audit(1786308129.406:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4819 comm="syz.5.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a13abe0d9 code=0x7ffc0000 [ 55.180684][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.211646][ T28] audit: type=1326 audit(1786308129.406:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4819 comm="syz.5.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a13abe0d9 code=0x7ffc0000 [ 55.233613][ T4691] hsr_slave_0: entered promiscuous mode [ 55.263382][ T4691] hsr_slave_1: entered promiscuous mode [ 55.285301][ T28] audit: type=1326 audit(1786308129.406:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4819 comm="syz.5.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8a13abe0d9 code=0x7ffc0000 [ 55.396749][ T4834] syz_tun: entered allmulticast mode [ 55.403751][ T28] audit: type=1326 audit(1786308129.466:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4819 comm="syz.5.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a13abe0d9 code=0x7ffc0000 [ 55.444349][ T4834] syz_tun: left allmulticast mode [ 55.447157][ T28] audit: type=1326 audit(1786308129.466:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4819 comm="syz.5.332" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a13abde42 code=0x7ffc0000 [ 55.479607][ T4728] loop6: detected capacity change from 0 to 1024 [ 55.504936][ T4841] netlink: 4 bytes leftover after parsing attributes in process `syz.5.336'. [ 55.542118][ T4841] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 55.579829][ T4841] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.726738][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 55.753436][ T4860] syz.0.341 (4860) used greatest stack depth: 8712 bytes left [ 55.824149][ T4728] EXT4-fs: Ignoring removed orlov option [ 56.185075][ T4691] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.243864][ T4691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.292564][ T4691] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.398102][ T4691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.415867][ T4691] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.481140][ T4691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.500979][ T4691] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.521588][ T4728] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.301975][ T4691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 57.310432][ T4213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.427218][ T4691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.453119][ T4957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.355'. [ 57.458128][ T4691] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.491952][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.499447][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.542652][ T3731] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.549857][ T3731] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.579533][ T4691] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.607538][ T4691] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.711546][ T4975] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.018204][ T4691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.222115][ T4691] veth0_vlan: entered promiscuous mode [ 58.260763][ T4691] veth1_vlan: entered promiscuous mode [ 58.286900][ T4691] veth0_macvtap: entered promiscuous mode [ 58.300643][ T4691] veth1_macvtap: entered promiscuous mode [ 58.323759][ T4691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.340967][ T4691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.369728][ T3731] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.393242][ T3731] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.410695][ T5006] netlink: 'syz.6.368': attribute type 2 has an invalid length. [ 58.437655][ T3723] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.449093][ T3723] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.603764][ T5021] loop5: detected capacity change from 0 to 2048 [ 58.611542][ T5022] mmap: syz.3.373 (5022) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 58.653869][ T5021] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.767906][ T3573] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.324643][ T5046] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 59.667785][ T28] kauditd_printk_skb: 63 callbacks suppressed [ 59.667803][ T28] audit: type=1400 audit(1786308133.966:547): avc: denied { ioctl } for pid=5095 comm="syz.3.386" path="socket:[10620]" dev="sockfs" ino=10620 ioctlcmd=0x891b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 59.756062][ T5104] loop2: detected capacity change from 0 to 7 [ 59.763061][ T5104] loop2: [ 59.892608][ T28] audit: type=1400 audit(1786308134.186:548): avc: denied { firmware_load } for pid=5113 comm="syz.1.393" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 60.315578][ T5119] loop3: detected capacity change from 0 to 128 [ 60.372713][ T5106] loop6: detected capacity change from 0 to 512 [ 60.421476][ T5106] EXT4-fs: Ignoring removed bh option [ 60.456558][ T5106] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 60.460414][ T5119] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 60.461362][ T5119] System zones: [ 60.473967][ T5106] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 60.502192][ T5106] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 60.505521][ T5119] 1-3, 19-19, 35-36 [ 60.536442][ T5106] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 60.546626][ T5119] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 60.581047][ T5119] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 60.678554][ T5106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.789718][ T4213] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.845947][ T28] audit: type=1400 audit(1786308135.146:549): avc: denied { write } for pid=5136 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.914475][ T28] audit: type=1400 audit(1786308135.216:550): avc: denied { write } for pid=5152 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.937412][ T28] audit: type=1400 audit(1786308135.236:551): avc: denied { mounton } for pid=5149 comm="syz.1.403" path="/proc/20/task" dev="proc" ino=10701 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 60.984541][ T5157] netlink: 20 bytes leftover after parsing attributes in process `syz.6.404'. [ 61.065180][ T3295] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.368597][ T5184] loop5: detected capacity change from 0 to 8192 [ 61.389055][ T5184] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 61.415876][ T28] audit: type=1400 audit(1786308135.716:552): avc: denied { mount } for pid=5183 comm="syz.5.417" name="/" dev="loop5" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 61.500821][ T5186] ================================================================== [ 61.509931][ T5186] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 61.517463][ T5186] [ 61.519812][ T5186] write to 0xffff88811bb2c4e8 of 2 bytes by task 5184 on cpu 0: [ 61.527747][ T5186] fat16_ent_put+0x28/0x60 [ 61.532557][ T5186] fat_ent_write+0x6c/0xe0 [ 61.537459][ T5186] fat_chain_add+0x174/0x4a0 [ 61.542096][ T5186] fat_get_block+0x468/0x5e0 [ 61.546750][ T5186] __block_write_begin_int+0x400/0xf90 [ 61.552409][ T5186] cont_write_begin+0x5bf/0x920 [ 61.557310][ T5186] fat_write_begin+0x52/0xe0 [ 61.562037][ T5186] cont_write_begin+0x18d/0x920 [ 61.567024][ T5186] fat_write_begin+0x52/0xe0 [ 61.571663][ T5186] generic_cont_expand_simple+0xb0/0x150 [ 61.577339][ T5186] fat_cont_expand+0x3e/0x170 [ 61.582150][ T5186] fat_setattr+0x2a4/0x850 [ 61.586608][ T5186] notify_change+0x842/0x8c0 [ 61.591233][ T5186] do_ftruncate+0x344/0x410 [ 61.596039][ T5186] __x64_sys_ftruncate+0x65/0xc0 [ 61.601018][ T5186] x64_sys_call+0x2beb/0x3020 [ 61.605724][ T5186] do_syscall_64+0x136/0x3c0 [ 61.610432][ T5186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.616723][ T5186] [ 61.619153][ T5186] read to 0xffff88811bb2c400 of 512 bytes by task 5186 on cpu 1: [ 61.626967][ T5186] fat_mirror_bhs+0x1df/0x330 [ 61.631927][ T5186] fat_ent_write+0xd0/0xe0 [ 61.636535][ T5186] fat_chain_add+0x174/0x4a0 [ 61.641216][ T5186] fat_get_block+0x468/0x5e0 [ 61.645825][ T5186] __block_write_begin_int+0x400/0xf90 [ 61.651391][ T5186] cont_write_begin+0x5bf/0x920 [ 61.656353][ T5186] fat_write_begin+0x52/0xe0 [ 61.660955][ T5186] generic_perform_write+0x186/0x490 [ 61.666251][ T5186] __generic_file_write_iter+0x9e/0x120 [ 61.671804][ T5186] generic_file_write_iter+0x77/0x1f0 [ 61.677184][ T5186] __kernel_write_iter+0x30f/0x590 [ 61.682320][ T5186] dump_user_range+0xa73/0xd00 [ 61.687126][ T5186] elf_core_dump+0x21c0/0x2340 [ 61.691902][ T5186] coredump_write+0xaf9/0xdd0 [ 61.696698][ T5186] vfs_coredump+0x2770/0x3290 [ 61.702092][ T5186] get_signal+0xd33/0xf10 [ 61.706982][ T5186] arch_do_signal_or_restart+0x96/0x480 [ 61.712584][ T5186] irqentry_exit+0x14d/0x610 [ 61.717373][ T5186] asm_exc_page_fault+0x26/0x30 [ 61.722427][ T5186] [ 61.724783][ T5186] Reported by Kernel Concurrency Sanitizer on: [ 61.731142][ T5186] CPU: 1 UID: 0 PID: 5186 Comm: syz.5.417 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.740532][ T5186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.750878][ T5186] ================================================================== [ 62.019289][ T28] audit: type=1400 audit(1786308136.326:553): avc: denied { unmount } for pid=3573 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1