last executing test programs: 3.32750352s ago: executing program 3 (id=277): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) pselect6(0x40, &(0x7f0000000100)={0x0, 0xf, 0x1000, 0x0, 0x801, 0x100}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x19) ioctl$TCXONC(r0, 0x540a, 0x2) 2.583098277s ago: executing program 1 (id=284): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./bus\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0x7b, 0x11ff, &(0x7f0000002480)="$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") recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x3) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804b, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.428889871s ago: executing program 3 (id=286): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000006f000/0xc000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00003ed000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000178000/0x2000)=nil, &(0x7f00002b6000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0xa403, 0xc, 0x6, 0xfd, 0x6, 0x8c, 0x8001}, 0xc) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000640)="68a55d6df108bed91373cc794c16187a680c0c711ae161400d400e28f7117e17fd75340a58f8d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1000000fc4d76dadbb0", 0x48}], 0x1}}], 0x1, 0x0) 2.219472886s ago: executing program 3 (id=290): r0 = io_uring_setup(0x66a9, &(0x7f0000000100)={0x0, 0xfaf1, 0x800, 0x3, 0x235}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) io_uring_enter(r1, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)=[0x0, 0x0, 0x4]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) 2.161239948s ago: executing program 3 (id=294): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x30, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x1000000830d}, 0x100300, 0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) 1.458421434s ago: executing program 1 (id=300): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x801) r0 = io_uring_setup(0x56c5, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x7ffffffc, 0x9f69a7a086f70aee, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) statfs(&(0x7f0000000000)='./file1\x00', 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.267268549s ago: executing program 3 (id=303): socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) ioctl$EVIOCRMFF(r1, 0x40085503, 0x0) 1.068699584s ago: executing program 1 (id=312): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x30, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e21, 0x4e20, 0x1c, 0x0, @gue={{0x2, 0x0, 0x0, 0x2, 0x100}, "c1963bf57e73e3279fdbd0c7"}}}}, 0x3e) 1.012976195s ago: executing program 2 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/)&\x00'}]}]}]}]}, 0x40}}, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x5, 0x4002) splice(r0, &(0x7f0000000040)=0x4, r2, &(0x7f0000000080)=0x8edd, 0x2, 0x0) semget(0x0, 0x0, 0x2) 937.910517ms ago: executing program 0 (id=316): mount$bpf(0x0, 0x0, 0x0, 0x82000, 0x0) syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 935.631537ms ago: executing program 2 (id=317): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x270, 0x2b8, 0xb0000000, 0x270, 0x0, 0x368, 0x3a8, 0x3a8, 0x368, 0x3a8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [], [], 'vlan1\x00', 'pimreg1\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'virt_wifi0\x00', 'ip_vti0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x5d81, 0xf) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xcb, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 885.742048ms ago: executing program 1 (id=318): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f000006f000/0xc000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00003ed000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000178000/0x2000)=nil, &(0x7f00002b6000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x40, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0xa403, 0xc, 0x6, 0xfd, 0x6, 0x8c, 0x8001}, 0xc) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000640)="68a55d6df108bed91373cc794c16187a680c0c711ae161400d400e28f7117e17fd75340a58f8d37231d4e7cd61719f501fd0d890485c98ee906e64fad259a1000000fc4d76dadbb0", 0x48}], 0x1}}], 0x1, 0x0) 794.68267ms ago: executing program 2 (id=319): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x1, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f00000003c0), 0x2000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f0000000340)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04\x94\x0f\x00\x00\x00\x00\x00\x00\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg\xb1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~))\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x83\xfa#\xf94\xd7\x02A\x10\xec]\xa4,\x06\xbd\xf4\x17\xfcy\xb9\x85/\x9a\xfd\xae\xf2s\x93I\x12\x06\xd5\x8c>w\xb9\x88P\xf1Z\x8a\x98\xcbZ\xe2\x95\xa8I\xdc\xf9\x1d(\xac\xe7q\xd9\xe91\xda\xc2\xb1k\xbcI\xe1\xda/j_Vei\x19\xd5\x1a\xcd\x99f\xd88\x18\x9b\xfa\xb8\x93\x12D\xec\x9d{\"T\xf7\xfb\xe3m\xfb\xc7_Xe\xfe\x89u|\t\xa5\x06\'M\x85 \x96:b?\xa3\xdc\b\xear]\xe4`(\xfd\r\xd1\xcf\xaa\x15kE~\xb1\xdc]irB\b\xf0\x98\x00'/480, 0x42, 0x120, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) setresuid(0x0, 0xee00, 0x0) 710.011352ms ago: executing program 4 (id=321): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'bond_slave_1\x00', 0x800}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x868, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x8018, &(0x7f0000000580)=ANY=[@ANYBLOB="6e6f646f74732c646f733178666c6f7070792c6e6f646f74732c646f74732c6e6f646f74732c646f74732c6e6f646f74732c646f74732c00c54cc17944a18ebf14e2b8a9ac6ea496fe7b48b2b2f8cdb92be6a539029275fea026b227a52d8faa1d1088d548ed4aaf1db14670bcdf8437de27498ec07a9c0ab653b718c93d3b8927625ec6b392"], 0x1, 0x2c5, &(0x7f0000000180)="$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") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f00000001c0), 0x0}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x1, 0x1, 0xb0, 0x68, 0x0, 0x5, 0x11, 0x0, @private=0xa010102, @local}, {0x4e26, 0x4e24, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffe, "20d8d4d6b2f00a9795ccf219ab049f0a5e4d08280f52495896d0b0f076e72bdc", "b4147fed1a085acea00957b0c8c943a409e47311ecbf8fbca2c8d804e89b2e7a7da9a2d4746248b36aa925d5f0e2712c", "e695c8fe83d4c43e88cc5df5b0d466a85b82447c6a7880efd800", {"97c437cd50e41b2c6f7260410fa7cbfb"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 709.088352ms ago: executing program 1 (id=322): perf_event_open(&(0x7f0000000700)={0x1, 0xaf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0xfffffffffffffff8}, 0x0, 0x0, 0x5, 0x2, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, 0x0, 0x10049014) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x20000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x40) 648.619994ms ago: executing program 2 (id=323): r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xa200, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f000068c000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f000068a000/0xa000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x62) 616.413734ms ago: executing program 1 (id=324): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe6, 0x2}, {0xfff2, 0x10}, {0xd, 0x1a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8c1) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="400109"], 0x87) 537.060696ms ago: executing program 3 (id=325): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/)&\x00'}]}]}]}]}, 0x40}}, 0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, 0x0, 0x5, 0x4002) splice(r0, &(0x7f0000000040)=0x4, r2, &(0x7f0000000080)=0x8edd, 0x2, 0x0) semget(0x0, 0x0, 0x2) 535.659296ms ago: executing program 2 (id=335): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 474.416288ms ago: executing program 2 (id=326): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000200)=ANY=[], 0x0) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 427.787699ms ago: executing program 4 (id=327): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x106) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee6888847", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 406.49045ms ago: executing program 0 (id=328): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_io_uring_setup(0x5fce, &(0x7f0000001100)={0x0, 0x40939e, 0x1, 0xfffffffe, 0x35}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) 366.11402ms ago: executing program 4 (id=329): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x13) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "3ebe4dd909f3c312"}, 0x28) sendfile(r0, r1, &(0x7f0000000100)=0x1010, 0x10001) 365.073631ms ago: executing program 4 (id=330): perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x2, 0x10000, 0x800000}, 0x0, 0xfffffffffffff7ff, 0xffffffffffffffff, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000100)=""/80, 0x50, 0x3, 0x0, 0x0) epoll_create1(0x80000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_procfs(0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) r1 = dup(r0) preadv(r1, &(0x7f0000001500)=[{&(0x7f0000000380)=""/109, 0x6d}, {0x0}], 0x2, 0x3, 0x1) 296.353122ms ago: executing program 4 (id=331): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) setitimer(0x2, &(0x7f0000000040)={{}, {0x0, 0xea60}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) ioctl$int_in(r1, 0x5452, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x503, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1140, 0x3806}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x43}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008080}, 0x440b0) 271.891773ms ago: executing program 0 (id=332): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x20502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff, 0xfffffffffffff909}, 0x4, 0x0, 0x20000000, 0x9, 0x0, 0x0, 0x101}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x7, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x95, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x4d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r3, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xd50, 0xfffffffffffffee0, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 241.680854ms ago: executing program 4 (id=333): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x9) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800100, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 100.721877ms ago: executing program 0 (id=334): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000100000000a500000000000018490000fe"], 0x0, 0x0, 0x6, 0x0, 0x41100, 0x5b, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d087277b9b108b4ab51c"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000018"], 0xfe33) 75.671448ms ago: executing program 0 (id=336): perf_event_open(0x0, 0x0, 0xfffffffffffffffa, 0xffffffffffffffff, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) syz_emit_ethernet(0x1e, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)='0', 0xfffffffffffffdcd, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=337): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000ac0)=[{&(0x7f0000000540)="ee", 0x1}], 0x20, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 20.939705][ T29] audit: type=1400 audit(1788164911.452:111): avc: denied { write } for pid=3262 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.117693][ T3277] sshd-session (3277) used greatest stack depth: 11216 bytes left Warning: Permanently added '10.128.0.234' (ED25519) to the list of known hosts. [ 29.134388][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 29.134419][ T29] audit: type=1400 audit(1788164919.642:117): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.141536][ T3285] cgroup: Unknown subsys name 'net' [ 29.141839][ T29] audit: type=1400 audit(1788164919.662:118): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.141863][ T29] audit: type=1400 audit(1788164919.662:119): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.305638][ T3285] cgroup: Unknown subsys name 'cpuset' [ 29.311641][ T3285] cgroup: Unknown subsys name 'rlimit' [ 29.420702][ T29] audit: type=1400 audit(1788164919.932:120): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.436594][ T29] audit: type=1400 audit(1788164919.952:121): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.436619][ T29] audit: type=1400 audit(1788164919.952:122): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.436640][ T29] audit: type=1400 audit(1788164919.952:123): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.450043][ T29] audit: type=1400 audit(1788164919.962:124): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.453484][ T29] audit: type=1400 audit(1788164919.962:125): avc: denied { search } for pid=3020 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.453509][ T29] audit: type=1400 audit(1788164919.962:126): avc: denied { search } for pid=3020 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.486170][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.514337][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.805650][ T3295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.805689][ T3295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.805778][ T3295] bridge_slave_0: entered allmulticast mode [ 30.806164][ T3295] bridge_slave_0: entered promiscuous mode [ 30.823333][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.823392][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.823508][ T3300] bridge_slave_0: entered allmulticast mode [ 30.824007][ T3300] bridge_slave_0: entered promiscuous mode [ 30.825414][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.825442][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.825538][ T3300] bridge_slave_1: entered allmulticast mode [ 30.825993][ T3300] bridge_slave_1: entered promiscuous mode [ 30.836726][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.837645][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.846789][ T3300] team0: Port device team_slave_0 added [ 30.847597][ T3300] team0: Port device team_slave_1 added [ 30.857144][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.857158][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.857247][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.857724][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.857734][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.857794][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.873644][ T3300] hsr_slave_0: entered promiscuous mode [ 30.874131][ T3300] hsr_slave_1: entered promiscuous mode [ 30.896631][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.896742][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.896790][ T3296] bridge_slave_0: entered allmulticast mode [ 30.897403][ T3296] bridge_slave_0: entered promiscuous mode [ 30.906374][ T3295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.906413][ T3295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.906527][ T3295] bridge_slave_1: entered allmulticast mode [ 30.906936][ T3295] bridge_slave_1: entered promiscuous mode [ 30.912055][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.912216][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.912267][ T3296] bridge_slave_1: entered allmulticast mode [ 30.912757][ T3296] bridge_slave_1: entered promiscuous mode [ 30.956663][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.956696][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.956746][ T3303] bridge_slave_0: entered allmulticast mode [ 30.957345][ T3303] bridge_slave_0: entered promiscuous mode [ 30.959102][ T3295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.960267][ T3295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.963751][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.964720][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.006741][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.006788][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.006905][ T3303] bridge_slave_1: entered allmulticast mode [ 31.007469][ T3303] bridge_slave_1: entered promiscuous mode [ 31.013863][ T3296] team0: Port device team_slave_0 added [ 31.031858][ T3296] team0: Port device team_slave_1 added [ 31.039609][ T3295] team0: Port device team_slave_0 added [ 31.040633][ T3295] team0: Port device team_slave_1 added [ 31.070836][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.070851][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.070877][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.071441][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.071452][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.071474][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.075466][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.076561][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.101187][ T3303] team0: Port device team_slave_0 added [ 31.102116][ T3303] team0: Port device team_slave_1 added [ 31.110239][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.110290][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.110500][ T3302] bridge_slave_0: entered allmulticast mode [ 31.110962][ T3302] bridge_slave_0: entered promiscuous mode [ 31.111911][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.111939][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.112057][ T3302] bridge_slave_1: entered allmulticast mode [ 31.112595][ T3302] bridge_slave_1: entered promiscuous mode [ 31.120313][ T3296] hsr_slave_0: entered promiscuous mode [ 31.120808][ T3296] hsr_slave_1: entered promiscuous mode [ 31.121015][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 31.121027][ T3296] Cannot create hsr debugfs directory [ 31.126427][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.126440][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.126464][ T3295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.140300][ T3295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.140314][ T3295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.140339][ T3295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.143923][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.143936][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.143960][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.144451][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.144461][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.144507][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.163112][ T3300] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.171006][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.178163][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.179410][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.194238][ T3300] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.201129][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.217574][ T3295] hsr_slave_0: entered promiscuous mode [ 31.217987][ T3295] hsr_slave_1: entered promiscuous mode [ 31.218374][ T3295] debugfs: 'hsr0' already exists in 'hsr' [ 31.218393][ T3295] Cannot create hsr debugfs directory [ 31.218608][ T3300] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.244790][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.245697][ T3300] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.255281][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.258508][ T3303] hsr_slave_0: entered promiscuous mode [ 31.258855][ T3303] hsr_slave_1: entered promiscuous mode [ 31.259125][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 31.259137][ T3303] Cannot create hsr debugfs directory [ 31.268589][ T3302] team0: Port device team_slave_0 added [ 31.274596][ T3302] team0: Port device team_slave_1 added [ 31.322261][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.322276][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.322301][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.330787][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.330801][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.330827][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.337229][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.337268][ T3300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.337403][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.337432][ T3300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.398066][ T3302] hsr_slave_0: entered promiscuous mode [ 31.398521][ T3302] hsr_slave_1: entered promiscuous mode [ 31.398799][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 31.398811][ T3302] Cannot create hsr debugfs directory [ 31.467687][ T3296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.480797][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.488616][ T3296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.496793][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.497374][ T3296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.522775][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.528944][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.534141][ T3296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.540132][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.597907][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.606963][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.882008][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.891227][ T3295] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.898232][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.908525][ T3295] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.912236][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.916510][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.916540][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.927459][ T3295] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.932922][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.938811][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.938843][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.946206][ T3295] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.953743][ T3295] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.979200][ T3303] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.981733][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.000113][ T3303] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.002707][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.013920][ T3303] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.016714][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.031079][ T3303] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.037973][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.074069][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.082398][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.088932][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.092453][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.095886][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.114382][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.122906][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.134886][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.143525][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.149323][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.166208][ T3295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.168392][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.168424][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.181020][ T3296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.181042][ T3296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.214307][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.214358][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.231985][ T3295] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.244471][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.244512][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.263260][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.277943][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.277989][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.287808][ T3295] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 32.287842][ T3295] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.335973][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.348129][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.356809][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.356855][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.360590][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.360628][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.396025][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.427267][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 32.447629][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.460588][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.478677][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.478731][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.487223][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.487252][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.610358][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.620510][ T3300] veth0_vlan: entered promiscuous mode [ 32.633210][ T3295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.637449][ T3300] veth1_vlan: entered promiscuous mode [ 32.669245][ T3300] veth0_macvtap: entered promiscuous mode [ 32.670520][ T3300] veth1_macvtap: entered promiscuous mode [ 32.674786][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.678487][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.715575][ T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.715772][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.715852][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.715888][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.766203][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.787424][ T3296] veth0_vlan: entered promiscuous mode [ 32.794768][ T3303] veth0_vlan: entered promiscuous mode [ 32.812724][ T3303] veth1_vlan: entered promiscuous mode [ 32.829100][ T3296] veth1_vlan: entered promiscuous mode [ 32.854638][ T3295] veth0_vlan: entered promiscuous mode [ 32.856488][ T3303] veth0_macvtap: entered promiscuous mode [ 32.861010][ T3295] veth1_vlan: entered promiscuous mode [ 32.861966][ T3303] veth1_macvtap: entered promiscuous mode [ 32.885501][ T3296] veth0_macvtap: entered promiscuous mode [ 32.888400][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.896602][ T3295] veth0_macvtap: entered promiscuous mode [ 32.899014][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.908668][ T3295] veth1_macvtap: entered promiscuous mode [ 32.915071][ T3456] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.915331][ T3456] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.915443][ T3456] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.915532][ T3456] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.949555][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.950438][ T3296] veth1_macvtap: entered promiscuous mode [ 32.956285][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.978165][ T3295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.982185][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.010143][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.025804][ T3456] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.046779][ T70] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.047813][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.048025][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.076755][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.095578][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.095755][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.095857][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.101782][ T3500] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6'. [ 33.166951][ T3513] Illegal XDP return value 4294967294 on prog (id 1) dev syz_tun, expect packet loss! [ 33.221667][ T3302] veth0_vlan: entered promiscuous mode [ 33.230080][ T3302] veth1_vlan: entered promiscuous mode [ 33.243645][ T3302] veth0_macvtap: entered promiscuous mode [ 33.245615][ T3302] veth1_macvtap: entered promiscuous mode [ 33.249865][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.253048][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.257282][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.257509][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.257574][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.257659][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.311541][ T3506] syz.2.3 (3506) used greatest stack depth: 11072 bytes left [ 33.384166][ T3531] loop2: detected capacity change from 0 to 128 [ 33.393507][ T3531] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 33.405878][ T3531] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.234352][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.274328][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 34.274355][ T29] audit: type=1400 audit(1788164924.782:194): avc: denied { name_bind } for pid=3544 comm="syz.2.14" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 34.274405][ T29] audit: type=1400 audit(1788164924.782:195): avc: denied { node_bind } for pid=3544 comm="syz.2.14" saddr=255.255.255.255 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 34.878754][ T29] audit: type=1400 audit(1788164925.392:196): avc: denied { create } for pid=3549 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.880583][ T29] audit: type=1400 audit(1788164925.392:197): avc: denied { connect } for pid=3549 comm="syz.1.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.881004][ T29] audit: type=1400 audit(1788164925.392:198): avc: denied { ioctl } for pid=3549 comm="syz.1.16" path="socket:[4465]" dev="sockfs" ino=4465 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.899594][ T29] audit: type=1400 audit(1788164925.422:199): avc: denied { read write } for pid=3549 comm="syz.1.16" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.899708][ T29] audit: type=1400 audit(1788164925.422:200): avc: denied { open } for pid=3549 comm="syz.1.16" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 34.901749][ T29] audit: type=1400 audit(1788164925.422:201): avc: denied { ioctl } for pid=3549 comm="syz.1.16" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 35.041309][ T29] audit: type=1400 audit(1788164925.552:202): avc: denied { create } for pid=3551 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.043809][ T29] audit: type=1400 audit(1788164925.552:203): avc: denied { getopt } for pid=3551 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 35.103387][ T3554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.113897][ T3554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.158333][ T3559] erspan0: entered promiscuous mode [ 35.160831][ T3559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 35.221891][ T3556] loop4: detected capacity change from 0 to 1164 [ 35.231286][ T3556] ======================================================= [ 35.231286][ T3556] WARNING: The mand mount option has been deprecated and [ 35.231286][ T3556] and is ignored by this kernel. Remove the mand [ 35.231286][ T3556] option from the mount to silence this warning. [ 35.231286][ T3556] ======================================================= [ 35.383822][ T3565] ip_tables: iptables: counters copy to user failed while replacing table [ 35.391670][ T3563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.395414][ T3563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.638943][ T3573] syz_tun: entered allmulticast mode [ 36.200536][ T3517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 36.267484][ T3383] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.276385][ T3383] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 36.316472][ T3604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.39'. [ 36.325271][ T3604] macvlan2: entered promiscuous mode [ 36.325316][ T3604] macvlan2: entered allmulticast mode [ 36.340235][ T3601] fido_id[3601]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.394761][ T3615] capability: warning: `syz.3.44' uses 32-bit capabilities (legacy support in use) [ 36.614954][ T3687] loop3: detected capacity change from 0 to 256 [ 36.771778][ T3690] loop3: detected capacity change from 0 to 8192 [ 37.131930][ T3695] loop2: detected capacity change from 0 to 2048 [ 37.141094][ T3695] EXT4-fs: Ignoring removed nobh option [ 37.141211][ T3695] EXT4-fs: Ignoring removed i_version option [ 37.141267][ T3695] EXT4-fs: Ignoring removed nobh option [ 37.168984][ T3695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 37.182459][ T3697] loop0: detected capacity change from 0 to 2048 [ 37.195905][ T3697] ext4: Unknown parameter 'smackfsdef' [ 37.248368][ T3695] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.248448][ T3695] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 828 with error 28 [ 37.248470][ T3695] EXT4-fs (loop2): This should not happen!! Data will be lost [ 37.248470][ T3695] [ 37.248479][ T3695] EXT4-fs (loop2): Total free blocks count 0 [ 37.248489][ T3695] EXT4-fs (loop2): Free/Dirty block details [ 37.252982][ T3695] EXT4-fs (loop2): free_blocks=2415919104 [ 37.253072][ T3695] EXT4-fs (loop2): dirty_blocks=832 [ 37.253084][ T3695] EXT4-fs (loop2): Block reservation details [ 37.253182][ T3695] EXT4-fs (loop2): i_reserved_data_blocks=52 [ 37.972638][ T3695] syz.2.53 (3695) used greatest stack depth: 10672 bytes left [ 38.042459][ T3700] syz.2.53 (3700) used greatest stack depth: 10496 bytes left [ 38.046514][ T3669] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 828 with error 28 [ 38.391335][ T3735] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96 [ 39.382204][ T3780] loop0: detected capacity change from 0 to 1024 [ 39.394178][ T3780] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.469967][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 39.469989][ T29] audit: type=1400 audit(1788165185.984:287): avc: denied { mmap_zero } for pid=3786 comm="syz.4.86" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 39.512167][ T29] audit: type=1400 audit(1788165186.024:288): avc: denied { create } for pid=3788 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.541685][ T29] audit: type=1400 audit(1788165186.054:289): avc: denied { bind } for pid=3788 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.541715][ T29] audit: type=1400 audit(1788165186.054:290): avc: denied { listen } for pid=3788 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.541743][ T29] audit: type=1400 audit(1788165186.054:291): avc: denied { connect } for pid=3788 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.541838][ T29] audit: type=1400 audit(1788165186.054:292): avc: denied { write } for pid=3788 comm="syz.4.87" path="socket:[5797]" dev="sockfs" ino=5797 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.541863][ T29] audit: type=1400 audit(1788165186.054:293): avc: denied { accept } for pid=3788 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.541886][ T29] audit: type=1400 audit(1788165186.054:294): avc: denied { read } for pid=3788 comm="syz.4.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.666166][ T29] audit: type=1400 audit(1788165186.184:295): avc: denied { setopt } for pid=3795 comm="syz.1.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 39.709770][ T29] audit: type=1400 audit(1788165186.214:296): avc: denied { create } for pid=3793 comm="syz.4.90" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 39.744226][ T3794] syz.4.90 uses obsolete (PF_INET,SOCK_PACKET) [ 39.849560][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.899360][ T3806] FAULT_INJECTION: forcing a failure. [ 39.899360][ T3806] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.899451][ T3806] CPU: 1 UID: 0 PID: 3806 Comm: syz.0.92 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.899474][ T3806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.899493][ T3806] Call Trace: [ 39.899501][ T3806] [ 39.899510][ T3806] __dump_stack+0x1d/0x30 [ 39.899592][ T3806] dump_stack_lvl+0x95/0xd0 [ 39.899626][ T3806] dump_stack+0x15/0x1b [ 39.899646][ T3806] should_fail_ex+0x262/0x280 [ 39.899669][ T3806] should_fail+0xb/0x20 [ 39.899686][ T3806] should_fail_usercopy+0x1a/0x20 [ 39.899709][ T3806] _copy_to_iter+0xd2/0xea0 [ 39.899732][ T3806] ? chacha_block_generic+0x2dc/0x310 [ 39.899761][ T3806] get_random_bytes_user+0x13b/0x2b0 [ 39.899794][ T3806] ? import_ubuf+0xe8/0x120 [ 39.899815][ T3806] __x64_sys_getrandom+0xcf/0x1a0 [ 39.899985][ T3806] x64_sys_call+0x218d/0x2550 [ 39.900015][ T3806] do_syscall_64+0x112/0x360 [ 39.900048][ T3806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.900070][ T3806] RIP: 0033:0x7fa07cc8e159 [ 39.900099][ T3806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.900117][ T3806] RSP: 002b:00007fa07b6e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 39.900136][ T3806] RAX: ffffffffffffffda RBX: 00007fa07cf15fa0 RCX: 00007fa07cc8e159 [ 39.900230][ T3806] RDX: 0000000000000000 RSI: 00000000ffffff9a RDI: 0000200000000240 [ 39.900243][ T3806] RBP: 00007fa07cd25024 R08: 0000000000000000 R09: 0000000000000000 [ 39.900257][ T3806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.900269][ T3806] R13: 00007fa07cf16038 R14: 00007fa07cf15fa0 R15: 00007fffe898c318 [ 39.900288][ T3806] [ 40.146252][ T3820] ¥: port 1(batadv0) entered blocking state [ 40.146312][ T3820] ¥: port 1(batadv0) entered disabled state [ 40.146401][ T3820] batadv0: entered allmulticast mode [ 40.147288][ T3820] batadv0: entered promiscuous mode [ 40.252114][ T3833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.107'. [ 40.291597][ T3838] netlink: 12 bytes leftover after parsing attributes in process `syz.4.111'. [ 40.337173][ T3839] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.389715][ T3839] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.420909][ T3839] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.469062][ T3839] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.486742][ T3670] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 40.486796][ T3670] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 40.554056][ T3661] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.555115][ T3670] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.577365][ T3661] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.577788][ T3661] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.454061][ T3899] loop0: detected capacity change from 0 to 1024 [ 41.468102][ T3899] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 41.468136][ T3899] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 41.468335][ T3899] EXT4-fs error (device loop0): ext4_get_journal_inode:5927: comm syz.0.135: inode #1: comm syz.0.135: iget: illegal inode # [ 41.468360][ T3899] loop0: lost filesystem error report for type 5 error -117 [ 41.468463][ T3899] EXT4-fs (loop0): no journal found [ 41.468474][ T3899] EXT4-fs (loop0): can't get journal size [ 41.469163][ T3899] EXT4-fs (loop0): failed to initialize system zone (-22) [ 41.469191][ T3899] EXT4-fs (loop0): mount failed [ 41.573072][ T3884] loop1: detected capacity change from 0 to 8192 [ 41.597236][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 41.597339][ T3899] netlink: 'syz.0.135': attribute type 30 has an invalid length. [ 41.597355][ T3899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.135'. [ 41.597607][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 41.597674][ T3899] netlink: 'syz.0.135': attribute type 30 has an invalid length. [ 41.597685][ T3899] netlink: 12 bytes leftover after parsing attributes in process `syz.0.135'. [ 41.676661][ T3894] loop3: detected capacity change from 0 to 1024 [ 41.687908][ T3894] EXT4-fs: Ignoring removed orlov option [ 41.702972][ T3894] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.706383][ T3894] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 41.723670][ T3894] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 41.731646][ T3894] EXT4-fs (loop3): orphan cleanup on readonly fs [ 41.759277][ T3894] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.132: Invalid inode table block 0 in block_group 0 [ 41.759347][ T3894] loop3: lost filesystem error report for type 5 error -117 [ 41.766576][ T3894] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 41.766646][ T3894] loop3: lost filesystem error report for type 5 error -117 [ 41.770111][ T3894] EXT4-fs error (device loop3): ext4_quota_write:7458: inode #3: comm syz.3.132: mark_inode_dirty error [ 41.770238][ T3894] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 41.773483][ T3894] EXT4-fs error (device loop3): ext4_acquire_dquot:7069: comm syz.3.132: Failed to acquire dquot type 0 [ 41.773542][ T3894] loop3: lost filesystem error report for type 5 error -117 [ 41.775090][ C1] EXT4-fs (loop3): error count since last fsck: 4 [ 41.775115][ C1] EXT4-fs (loop3): initial error at time 1788165188: __ext4_get_inode_loc:4916 [ 41.775187][ C1] EXT4-fs (loop3): last error at time 1788165188: ext4_acquire_dquot:7069 [ 41.779367][ T3894] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.132: Invalid inode table block 0 in block_group 0 [ 41.779416][ T3894] loop3: lost filesystem error report for type 5 error -117 [ 41.780496][ T3894] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 41.780585][ T3894] loop3: lost filesystem error report for type 5 error -117 [ 41.783011][ T3894] EXT4-fs error (device loop3): ext4_ext_truncate:4565: inode #15: comm syz.3.132: mark_inode_dirty error [ 41.783227][ T3894] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.794512][ T3894] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.132: Invalid inode table block 0 in block_group 0 [ 41.794583][ T3894] loop3: lost filesystem error report for type 5 error -117 [ 41.795306][ T3894] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 41.795408][ T3894] loop3: lost filesystem error report for type 5 error -117 [ 41.797336][ T3894] EXT4-fs error (device loop3) in ext4_orphan_del:304: Corrupt filesystem [ 41.797365][ T3894] loop3: lost filesystem error report for type 5 error -117 [ 41.797844][ T3894] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.132: Invalid inode table block 0 in block_group 0 [ 41.797936][ T3894] loop3: lost filesystem error report for type 5 error -117 [ 41.799187][ T3894] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 41.799657][ T3894] EXT4-fs error (device loop3): ext4_truncate:4721: inode #15: comm syz.3.132: mark_inode_dirty error [ 41.799739][ T3894] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.801895][ T3894] EXT4-fs error (device loop3) in ext4_process_orphan:346: Corrupt filesystem [ 41.804918][ T3894] EXT4-fs (loop3): 1 truncate cleaned up [ 41.856692][ T3894] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.920303][ T3894] EXT4-fs error (device loop3): __ext4_get_inode_loc:4916: comm syz.3.132: Invalid inode table block 0 in block_group 0 [ 41.960784][ T3910] loop2: detected capacity change from 0 to 128 [ 41.963546][ T3910] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.965934][ T3910] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 41.984384][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.175878][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.214543][ T3922] loop2: detected capacity change from 0 to 512 [ 42.221206][ T3922] EXT4-fs: inline encryption not supported [ 42.223007][ T3923] loop3: detected capacity change from 0 to 128 [ 42.233791][ T3923] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 42.235393][ T3923] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.253819][ T3922] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 42.253836][ T3922] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.284542][ T3922] EXT4-fs (loop2): 1 truncate cleaned up [ 42.284938][ T3922] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.335124][ T3303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.363051][ T3928] netlink: 'syz.2.144': attribute type 1 has an invalid length. [ 42.369082][ T3928] 8021q: adding VLAN 0 to HW filter on device bond1 [ 42.386717][ T3928] bond1: (slave veth3): Enslaving as an active interface with a down link [ 42.401783][ T3928] veth0_virt_wifi: entered promiscuous mode [ 42.411620][ T3928] bond1: (slave veth0_virt_wifi): making interface the new active one [ 42.421452][ T3928] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 42.435328][ T3928] bond1: (slave veth0_virt_wifi): Releasing active interface [ 42.455436][ T3302] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 42.488480][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 42.488899][ T3383] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 42.498814][ T3933] hid-generic 0000:0000:0000.0002: pid 3933 passed too large report [ 42.498858][ T3933] hid-generic 0000:0000:0000.0002: pid 3933 passed too large report [ 42.498879][ T3933] hid-generic 0000:0000:0000.0002: pid 3933 passed too large report [ 42.498899][ T3933] hid-generic 0000:0000:0000.0002: pid 3933 passed too large report [ 42.573306][ T3936] fido_id[3936]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 42.604974][ T3940] Zero length message leads to an empty skb [ 42.751906][ T3959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 42.751930][ T3959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.158'. [ 42.962957][ T3979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.166'. [ 43.082074][ T3984] netlink: 12 bytes leftover after parsing attributes in process `syz.4.169'. [ 43.439415][ T4025] loop1: detected capacity change from 0 to 512 [ 43.449989][ T4025] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 43.459797][ T4025] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 43.474788][ T4025] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.185: bg 0: block 248: padding at end of block bitmap is not set [ 43.489117][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 43.489140][ C0] EXT4-fs (loop1): last error at time 1788165189: ext4_validate_block_bitmap:445 [ 43.492065][ T4025] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.185: Failed to acquire dquot type 1 [ 43.493008][ T4025] EXT4-fs (loop1): 1 truncate cleaned up [ 43.500097][ T4025] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 43.555863][ T4025] syz.1.185 (4025) used greatest stack depth: 9512 bytes left [ 43.566359][ T3300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 44.335555][ T4077] loop0: detected capacity change from 0 to 256 [ 44.815334][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 44.815359][ T29] audit: type=1400 audit(1788165191.334:362): avc: denied { create } for pid=4093 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.851110][ T29] audit: type=1400 audit(1788165191.364:363): avc: denied { setopt } for pid=4093 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.873581][ T29] audit: type=1400 audit(1788165191.384:364): avc: denied { bind } for pid=4093 comm="syz.0.214" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 44.941149][ T29] audit: type=1400 audit(1788165191.454:365): avc: denied { wake_alarm } for pid=4095 comm="syz.0.215" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 45.543398][ T4110] netlink: 'syz.0.230': attribute type 1 has an invalid length. [ 45.550255][ T4110] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.566825][ T4110] bond1: (slave veth3): Enslaving as an active interface with a down link [ 45.573087][ T4110] veth0_virt_wifi: entered promiscuous mode [ 45.582542][ T4110] bond1: (slave veth0_virt_wifi): making interface the new active one [ 45.591008][ T4110] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 45.616826][ T4110] bond1: (slave veth0_virt_wifi): Releasing active interface [ 45.985078][ T4127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.225'. [ 46.226567][ T4001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 46.312737][ T29] audit: type=1400 audit(1788165193.829:366): avc: denied { write } for pid=4134 comm="syz.4.233" name="001" dev="devtmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 46.517188][ T4150] unsupported nlmsg_type 40 [ 46.564283][ T29] audit: type=1326 audit(1788165195.074:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.1.238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3badf4e159 code=0x7ffc0000 [ 46.565758][ T29] audit: type=1326 audit(1788165195.084:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.1.238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3badf4e159 code=0x7ffc0000 [ 46.565882][ T29] audit: type=1326 audit(1788165195.084:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.1.238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3badf4e159 code=0x7ffc0000 [ 46.567724][ T29] audit: type=1326 audit(1788165195.084:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4152 comm="syz.1.238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f3badf4e159 code=0x7ffc0000 [ 46.587410][ T29] audit: type=1400 audit(1788165195.084:371): avc: denied { execute } for pid=4147 comm="syz.2.236" path="/memory.events.local" dev="ramfs" ino=6961 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 47.063725][ T4178] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 47.122935][ T4188] loop0: detected capacity change from 0 to 128 [ 47.132180][ T4188] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 47.145000][ T4188] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.207436][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 47.889478][ T4211] loop2: detected capacity change from 0 to 8192 [ 48.275578][ T4232] loop3: detected capacity change from 0 to 2048 [ 48.275832][ T4232] EXT4-fs: Ignoring removed nobh option [ 48.275936][ T4232] EXT4-fs: Ignoring removed i_version option [ 48.275952][ T4232] EXT4-fs: Ignoring removed nobh option [ 48.328310][ T4232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 48.411305][ T4232] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 48.411494][ T4232] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 118 with error 28 [ 48.411515][ T4232] EXT4-fs (loop3): This should not happen!! Data will be lost [ 48.411515][ T4232] [ 48.411528][ T4232] EXT4-fs (loop3): Total free blocks count 0 [ 48.411594][ T4232] EXT4-fs (loop3): Free/Dirty block details [ 48.411607][ T4232] EXT4-fs (loop3): free_blocks=2415919104 [ 48.411622][ T4232] EXT4-fs (loop3): dirty_blocks=128 [ 48.411678][ T4232] EXT4-fs (loop3): Block reservation details [ 48.411688][ T4232] EXT4-fs (loop3): i_reserved_data_blocks=8 [ 48.629617][ T3669] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 118 with error 28 [ 48.697724][ T4246] netlink: 64 bytes leftover after parsing attributes in process `syz.0.272'. [ 48.711255][ T4246] syzkaller1: entered promiscuous mode [ 48.711287][ T4246] syzkaller1: entered allmulticast mode [ 48.883976][ T4253] loop2: detected capacity change from 0 to 128 [ 48.895971][ T4253] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 48.896193][ T4253] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.977302][ T3303] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.449897][ T4275] loop0: detected capacity change from 0 to 512 [ 49.782883][ T4283] loop1: detected capacity change from 0 to 8192 [ 49.911708][ T4290] batman_adv: batadv0: Adding interface: veth0 [ 49.911730][ T4290] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.911765][ T4290] batman_adv: batadv0: Interface activated: veth0 [ 49.914458][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 49.914475][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.919845][ T4290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 49.919860][ T4290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.945644][ T4290] batman_adv: batadv0: Interface deactivated: veth0 [ 49.945659][ T4290] batman_adv: batadv0: Removing interface: veth0 [ 50.174419][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 50.174443][ T29] audit: type=1400 audit(1788165198.684:425): avc: denied { write } for pid=4292 comm="syz.4.288" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.243088][ T29] audit: type=1400 audit(1788165198.744:426): avc: denied { map } for pid=4302 comm="syz.3.294" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 50.667308][ T4311] netlink: 64 bytes leftover after parsing attributes in process `syz.2.297'. [ 50.691219][ T4311] syzkaller1: entered promiscuous mode [ 50.691245][ T4311] syzkaller1: entered allmulticast mode [ 50.730450][ T29] audit: type=1400 audit(1788165199.244:427): avc: denied { ioctl } for pid=4314 comm="syz.0.298" path="socket:[7969]" dev="sockfs" ino=7969 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.079853][ T29] audit: type=1400 audit(1788165199.594:428): avc: denied { name_connect } for pid=4329 comm="syz.4.304" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 51.185501][ T29] audit: type=1400 audit(1788165199.704:429): avc: denied { read } for pid=4336 comm="syz.4.308" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.185537][ T29] audit: type=1400 audit(1788165199.704:430): avc: denied { open } for pid=4336 comm="syz.4.308" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.199558][ T29] audit: type=1400 audit(1788165199.714:431): avc: denied { ioctl } for pid=4336 comm="syz.4.308" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 51.210536][ T29] audit: type=1400 audit(1788165199.724:432): avc: denied { getopt } for pid=4338 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.278240][ T4328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.278379][ T4328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.304477][ T4345] netlink: 64 bytes leftover after parsing attributes in process `syz.1.312'. [ 51.306400][ T4347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.311'. [ 51.308156][ T29] audit: type=1400 audit(1788165199.824:433): avc: denied { write } for pid=4342 comm="syz.0.311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.356355][ T4345] syzkaller1: entered promiscuous mode [ 51.356451][ T4345] syzkaller1: entered allmulticast mode [ 51.539795][ T29] audit: type=1326 audit(1788165200.054:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4359 comm="syz.2.319" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc3bcfee159 code=0x7ffc0000 [ 51.646056][ T4365] loop4: detected capacity change from 0 to 512 [ 51.802083][ T4378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.335'. [ 52.114284][ T4382] loop2: detected capacity change from 0 to 8192 [ 52.233696][ T4401] netlink: 'syz.0.334': attribute type 1 has an invalid length. [ 52.233781][ T4401] netlink: 63743 bytes leftover after parsing attributes in process `syz.0.334'. [ 52.301254][ T4399] ================================================================== [ 52.301292][ T4399] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 52.301325][ T4399] [ 52.301331][ T4399] write to 0xffff8881087cb922 of 2 bytes by task 4382 on cpu 1: [ 52.301346][ T4399] fat16_ent_put+0x28/0x60 [ 52.301372][ T4399] fat_ent_write+0x6c/0xe0 [ 52.301398][ T4399] fat_truncate_blocks+0x376/0x5b0 [ 52.301426][ T4399] fat_write_end+0xba/0x160 [ 52.301449][ T4399] generic_perform_write+0x314/0x490 [ 52.301469][ T4399] __generic_file_write_iter+0x9e/0x120 [ 52.301493][ T4399] generic_file_write_iter+0x77/0x1f0 [ 52.301517][ T4399] vfs_write+0x57f/0x9a0 [ 52.301541][ T4399] ksys_write+0xdc/0x1a0 [ 52.301561][ T4399] __x64_sys_write+0x40/0x50 [ 52.301582][ T4399] x64_sys_call+0x154e/0x2550 [ 52.301603][ T4399] do_syscall_64+0x112/0x360 [ 52.301630][ T4399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.301649][ T4399] [ 52.301655][ T4399] read to 0xffff8881087cb800 of 512 bytes by task 4399 on cpu 0: [ 52.301672][ T4399] fat_mirror_bhs+0x1df/0x330 [ 52.301697][ T4399] fat_ent_write+0xd0/0xe0 [ 52.301720][ T4399] fat_chain_add+0x170/0x4c0 [ 52.301751][ T4399] fat_add_cluster+0x77/0xe0 [ 52.301779][ T4399] fat_fallocate+0x11e/0x1c0 [ 52.301803][ T4399] vfs_fallocate+0x3ac/0x400 [ 52.301825][ T4399] file_ioctl+0x4e1/0x5b0 [ 52.301847][ T4399] do_vfs_ioctl+0x7c4/0xe50 [ 52.301871][ T4399] __se_sys_ioctl+0x82/0x140 [ 52.301897][ T4399] __x64_sys_ioctl+0x43/0x50 [ 52.301924][ T4399] x64_sys_call+0x239d/0x2550 [ 52.301949][ T4399] do_syscall_64+0x112/0x360 [ 52.301972][ T4399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.301990][ T4399] [ 52.301994][ T4399] Reported by Kernel Concurrency Sanitizer on: [ 52.302006][ T4399] CPU: 0 UID: 0 PID: 4399 Comm: syz.2.326 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.302032][ T4399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.302046][ T4399] ================================================================== [ 54.716280][ T4371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512