last executing test programs: 6m48.368396139s ago: executing program 32 (id=466): r0 = memfd_create(&(0x7f0000000780)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19\xe5\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKl\xcc\xa4:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xc3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) read(r0, &(0x7f0000000080)=""/221, 0xdd) read(r0, &(0x7f0000000000)=""/22, 0x16) 6m47.070904493s ago: executing program 33 (id=506): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='hybla', 0x5) 5m50.814694553s ago: executing program 34 (id=2011): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b8000000190001000000000000000100e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0800000000000000100000000000000002000000010000000000000000000000ff0f00000000000073b4ffffffffffffffffffffffffffff0000000000000000000000001000000000000000000000200200000000000000fffffffffffffffffeffffff00"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x6, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000000) 5m49.70458535s ago: executing program 35 (id=2042): creat(0x0, 0x182) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) symlink(0x0, &(0x7f0000000040)='./file0\x00') ioctl$USBDEVFS_BULK(r0, 0xc0185502, 0x0) 3m19.59462231s ago: executing program 36 (id=6716): unshare(0x2000680) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)) 2m38.377435415s ago: executing program 37 (id=8004): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000030fdffff7b8af8ff00000000bfa200000000000007020000f80000008000000000000001b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m16.937900525s ago: executing program 38 (id=8536): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000680)={@val={0xa, 0x201}, @void, @eth={@multicast, @remote, @val={@void, {0x8100, 0x4, 0x0, 0x2}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x10, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3, 0x43, 0x100}}}}}}}}}, 0x4e) 1m55.131930247s ago: executing program 7 (id=9105): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000f, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 1m53.913095623s ago: executing program 7 (id=9124): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x90000005}) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 1m53.027144321s ago: executing program 7 (id=9148): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x8, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20) 1m52.986442434s ago: executing program 7 (id=9150): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m52.986026084s ago: executing program 7 (id=9152): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x395180, 0x149) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r0, &(0x7f0000000440)={@void, @val={0x0, 0x83, 0x8, 0xe057, 0x19, 0x9}, @ipv6=@gre_packet={0xa, 0x6, "61b0e4", 0xf98, 0x2f, 0x0, @local, @loopback, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x0, 0x0, 0x1, 0x1}, {0x1}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x0, 0x1, 0x1, 0x0, 0x3, 0x4}, 0x1, {0x8001}}}, {0x8, 0x22eb, 0x9, {{0xa, 0x2, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x2, {0x8, 0x2, 0x1, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "21004c3a153bafa03347b88d207de33a754122557e3e0b1d89b618cce684dbf4fa467fe5b85fb38ad33cfa9564e2f05cfa2fe2b2cc24e84adaa2bac16c9a4fb9a4d5e8472a33b1f7efbc1ae52d5994d963b6ee415b7d336fedef970226b8d68bd4f383122ca7a807025b3a10fc3b6fe84e4b369267e14354a5650ee8c2abd153d64a88a40aceadab38adaf8655a9a995386c2471ee79eb539e73bba8262bb80098dbdc45304895e83d7a949297ba251b2706e11a6b39e39ed03c6d1cefceee2aedc64fcd4c395849d182ce51d83869feb1d6037ef5bdbfae1f090acd47880a221111e23348e3b7904c5ec16195e530a596d3d6bd77e1f4a403188d031b91a98f47405e058f7c4bb3e50c6ee9f859e5bf3a90705dc5bbc3dee3558210addf5dd0869a2532fd27e77a92f259e3e0d620d7c1dcfba62f329e4ff94d318903cf329d567b7a5e8f722aa872c12a8e16ec08f72ae39ba873707b941ba5fd216e4a07621e65006c2eab5085382dd0512058d17f3bc65e82c47482d07cec8e0d8d20d80800679104d59fe1ff03ea980b089ca6297bfc8faeed52e15f78db317710eda738731e478bfd678e23dac121d02e6b8ccb54c391d8d9d9316c1db1bb074d9626ba656c08f1f2d2548924ed72bf5b5cfc0668ead21d45b4432008eab698967fcc3f62d5b7bbaaa465a1785cc3c8f9bf0165aa1fb8aed2cb86e0404903bd2b87e2ca2247eb0060695ab20853d14c164e314bc7abe305e87b13a5c5ddaabc82066bc3cc86bf0e4e4aea9a8404d5c4d5a3bd5e725d1e8a95370ca73bf98f9cb52054fb242d8e16c54a8f0c4338b840802c28ee8a291514ffa44baf5d5a79676b7aaf29f8761db0e42311aedcd4321e9f51847ca441ba7eaa3ac8d93c51f9b6d6fb4cccc5bbab16e278ff560c7781f2f07d7cd337e3195e29bee9bba2bdac04a557564aff6444bae19e49d01c93c15ed1a5c70bef6160a30831d77c1372c4478904f660bed8d6be8082e033c857c1b742bd7f74059bfe70d23526faee33d6356a2cb0d350f18edcebf35f7ccdb8700c413f1405ac8746a63595f804153305e9f3b1c099418764e9f768b4c45bd4db9a7851a209d00361563944082bef756fc01b05791e1117782f3f40c5e527932e83f5eb041d99cf05b4cc0df909a38fd21d4de0c6cf6f5590676d4dc75805fc5b2581e6c6eacefbea06f8b9ef9225d03cd4d12abc6f2fe92ea5914a5831bbcc4371c05039eaba68d4e36ba701f4045ee4e0fdfc220b16c974b8a592b55bcc9535da8df6d30da8c062db4981c8f8a33d0085c2231bd34fb242a9d153665c7dcc4cc2f0ad4f802e9a0cb72a5c3265751ab42fa8d808e571efcd8e4e59b70fa9e3c3e49f5b8332271d5b9a3203525d1f56654fd81ac57fdb96a0d40fb4342ae4863eded211562bcfdf9f7c2ecc52d857fe2f81f9e8788823f312440ec3b9d2c636043354807d155cd25f3ec328d4d27516dc29319e0b0775d9f453298ecd2d196135cb1d180be108e434bee38260cecfde2bc402c12b67f2518aaf5932af71666757cbdd4e4671ee28046233f42e08a109b987ac64b0e831bafc4b70536bf8e6f71d53230276841a12ef1621a4ef1e0e6689c5772c1305707977222e564285f9da23ba83bb5b956835540aefb13af0555b31ebfbe1f2f83b36d72726d88d0b315c7d81b2ea12a6fc65c7414e1d02c4b6f633b83ca0d748f64b4af0da3b0b0f3aa83853812d54ac272c6e78c91733f361a39999e0eb2749edd3333d1231595fd4a14855cd54eefd63f5f5c993f96fd6e8908be336285b5590139a811a789d6f6b195d0026c1f467e983971b75e53fcc448a7e8e384ae03bed3391dfc1a35c9d2a36ce1ee7b01310a37449c7885088bc60ef97a0f8cdeb5cd397c020b143fe2d8640ea6d0417c6d7ee39f7bf445137c4a46b504a7d9de787f85312fbcae7b989dd7da432d84e6d81eb9310358f787e5b6e55b839589c20889b93412e57e78916b13ce97eb17c49add4752e4330275fe614ccf7709b4a8acbebf99dc157b70a40ecb180b3d1c1ccc0f3263ccfe0156bb2dc6d314fac6f5a418f2b0b588ca64ebe90fa67f408768a91b0ca2fb698dc30106d1f883550a4396b769be4130b7e72ff89977e2790b4f9cf094fae7dbedb2afc9cd5270b78e8273eb0a59ec61df955eca334537c9185a88af09ccbc4de4dde13891f4805d92fa76556b712e5742cf5e9af086f1de9bb7c075848cdc4e214017bf38f85a639ad30efa74449597bbd7a6c439fcd69b14ef9bb3b7213efed041b562cb6c2e4567c9feaca017d0583fd24fdfba99fa4cbfab2445a5892d5239fb92ea0b9a7d5d0e456e35be0e73ac45ca597bca420d551647e296cd05125b0b7b559f5dd01ec40dce33cff5f248876df98c64d6c97d4bee1bb79f3ef5bd0b686bfab49a6382c1782aafe7aef71ac234c0e51a9f9c0545122f375547e422cfd7bc55c241ac0df201c7cfb0b27ed5d0cdb622aea90da0cf0ab39a1a1caa5d3c5456ec75bbb82790882ac3406e176d4554be65b591a56daf68a8f23a378e6ece31fbd0ce2d6ec901c68cd9fd63a8da600e95c18bbc173ca332edbce91c430dbfda720578c49a24f0910046adb8c85e0f63c73d61d3ce552fa28ab93e59d0ddc53eb9463fdce8303910da48aced6f32e688a73876f89b7e9a54ae3896e621cf3ebc2c969887937d7efab36a077ec3853787f3ce3646ed78e86e4f5fa58a5a76f8a4d180686544419a33cc051c02df00269afe53c99e04b060407b3d275f71e69daada43c319db71472a569b4cd05ea26b86f0f9c29edd9117b850396918b250025a1a77ca7613219f172ab8f0896ad9913879276990e99715c6aca50703a6b1d846cc177f6e10075567b76249a3e8cfd8bcf855b79db6f533bd443a05a43b157eac1fec2c98a69034950cc1f4faed0729331dd4e074acbf506a7f97e6a05f1268231f9ca3843f6c36e6c99516a75d83b596fa6aaee0b70320302e00eb9890944bb213910ac45485e3b21665b3883632ad5a9d73798504a14893a9894279a9ad27b469dfca6b88f91184daf3a4180489020e0ab7971f79721936bb38fe845b01b687afb3073ea14103cb6d39c3ea1ff232d05b95ca554bdf6679df8fcc4d41dde07850611f35bc4a182a4f17ed3f3fca167ffaaa0e6d142820f25eac30c5fda0ec6729eaf56d0c3a9f6d2695f7678c5ea5dca396420c837847d709b18605abc5e50c9e088549afad94e40a6c9af95c2e2fd1c320ee38db6bf5712f46a13f60f42834b7bcf02b20886d6e6d3bd8fcbf0d4a4f813a8bc8adfbb253dc6219e91dbceee588e0268c729eb1182a205a65862fe01e45be35b124fe76fa70e3b1b10499e81c8370165708479b5b037e7f0305e5f90a27c922a031f3ee9ca450ad31f70474a93b6ba0e84e0677c57d96ecfb4409bbbd85f58be1a83c2bff31b41ff715c4538403738c31447a13298d68e1b6e26a657db51196d593d0f38e74ab83a4b7d520ec268b72a28574e040b27c7d2b80285687a0c759bab446aeb662d5fe1f0e6e7643168321a1ea8322e45c561af44b3538e0356031e2d5f498eebccc1041ee8503776d0c0b865e1dac13dc15c46505d250d35067a689fa0fee102121cc0ceff9d8fa25964ac9aa22965c0c6c170fd1dc7b293e8a4bcdbc4840cda7c6449b5cc15764c74ba0aefa4d12ed1ccceb74b2bef5581cf271002388655dcd3123f1275e76bc35b51c55b88a663e6cca979a70ed56e0623b0ddd4c4c04ef850912aa28848208e65461d9406688eb5ea95b9a492047928e1bd04d97ae60e76d54473c0dbc3ccb5a2979cb5def12e584586b6d8adb6b4dfea254333474ba312a78f1825b3e2c790ebfd5eb5b778309f43823c9d7653fbe5f90007753de1899c9f4e616c8a7ecb0677b32e2a3c5cb79ba16fe0298106c80faada2ab23f3c9ee2d4ada7605f1bce8934c9ed323e9b0061880a6203411656f0d27514765c4977b9398630632e64aa1347fad52c4023a3d280e60fbd70669d3a433f35ef1db24e4f84d2214a0ce43950433e758085ba567539f2dd0f9f29dfb0b1958341732141c9ea2c2973a97bb8350924c20adb87c6fca583a802f473039ed23fdf7c1bdfb85750df9f89ea9120ead62663e65b9aa621b6e05d1a772d40343721d1fd502ca554d788269472815d072a4a842ec58c69b07b7b9cd6bfdda72799feaaec9c4d993c94619600762e7eece15096c8adfcfbdaf997c076844384442216017df3a04376a917a2ade5c0e6b1a00885e8dcb938620b6e03a20846572b5f35cdb1ecfb50d3dca0e03d6eb947ff486def715371d47471f01ccd07b6f620a3a1222b4277834a1ac256e05650d8bea8fc9e6cc560549f800c3e32e897dfb789e2a51a972c8ad03261d7f6a5d497066d5d5ede214bf713b13416d49e9ae78f54616cd5ca13a522363d11c55fd6a0b0706afa651c355f0325307d8698b7b1bfaf71c46309bc89d8186651a79f83165c027fda82a580a07e19c0ddbd509d25088e9301276a68752286ff95292fed79b5ef411075ce7efd72238ed35183c8022c2f3a4cbdb41b683cc3ba8e12bd2aa003785f5a3292ff3365e50e09a4d5e535a29dbe255a89fbf54c6c243a48bfa5d2e98b40ab07e682562d0b62bb34b15ee9c86fa4e2ffcfea300da67f2fde65d4fbfac3fbeaaca21a54965993798ef3239832258ca136bcf7847b038915cfafcf47e21e0157daa37217c6cd5760cc335136d2bfaf72db4d4efdf4ede279c9b1b49e566bb70ce2774fc72b40128b58fd6de442e097109d1abf2dccc1589476ef6d241c594194ab70ca752d2c994153dcb5c7722685e056ae93ee99895693acea43caf9b9859e0487ac8f09bf2823c20d3cbe599c386ef734f3cf25503a0be9a289ee6847041386e1c0ddae15630e35530f9d2a4a728384960f48e79f4c017dcd3cfe0b51f24528447a170dbf6bbd8285c1c8724258db75124a5784458597f336f5cf0bc800a580f52f1cac2cc93eb175ffd9090b5c3dfb338bd72db632f72eb50f661313f3d3a78c389aac894355eebc0cfb95f86de787f93c57e9f7f093f0bd720f7a82bb544e32b8d27d13c4009a12331469f91f7f4b7ae7e9c0dd6f04458d1a03d6da45984e9586b10962f084810f08dffd8c3868f9ddc722a4cc2050f912446d2dafd008630fef349ebcdd259b2de68dc7be7c6cd622f41590ef827997a3b4746f6fc4f1a5b702326fa5c8897c44c9fb54db5e9f3531117dc16b961fc896a5422bb7fa1690422b068059670eaa83891942c9b3d9dd9a86e314ec27296e0bf3bf0e9445d79fb9f6136d181dd29a347ffbae7d15554ee5cd53307411135c059c1ecbf21cda80f5b3c870452243e7915bfe5e9eca270fe96a52a2abc2f36d9eefb5c94b1bd10c7a31fefbbc89847af6b83b954d5fb087c2f4755e67175513195c1074f452a07a872da23df7009569d5f215ac38a716dd4928043ea14d0dbf40e51d9faaa42665ced115f52399a3b6a376e2727bbc456739c694588891cfe9550b"}}}}}, 0xfca) 1m52.734459087s ago: executing program 7 (id=9160): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) close(0x3) 1m52.715756828s ago: executing program 39 (id=9160): r0 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000100)='-1\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) close(0x3) 1m19.345322844s ago: executing program 2 (id=10097): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r0 = syz_io_uring_setup(0x88d, &(0x7f0000000680)={0x0, 0xf903, 0x80, 0xfff7ffdf, 0x8000206}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b92, 0xf9d0, 0x4, 0x0, 0x0) 1m19.243297563s ago: executing program 2 (id=10100): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200c093, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000006, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1m18.541816104s ago: executing program 2 (id=10127): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) move_mount(0xffffffffffffff9c, 0x0, r0, 0x0, 0x157) 1m18.469064231s ago: executing program 2 (id=10121): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x106200, 0x10004, 0x20da, 0x5, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet_sctp(0x2, 0x5, 0x84) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1b8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='..\x00') mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) 1m18.313510464s ago: executing program 2 (id=10123): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x800c4, 0x142) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r1, &(0x7f0000000440)="6b6b8e97bceaa2f1ae18", 0xa) sendfile(r1, r0, 0x0, 0x3ffff) 1m17.91340858s ago: executing program 2 (id=10139): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) close(0x3) socket(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) 1m17.9033419s ago: executing program 40 (id=10139): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) close(0x3) socket(0x1, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) 28.472184733s ago: executing program 0 (id=11533): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 27.550116944s ago: executing program 0 (id=11550): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 27.525758587s ago: executing program 0 (id=11551): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x206c}}, 0x40010) 27.443942084s ago: executing program 0 (id=11557): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTqhfYCQlUlRMWJQxsSN4pi11Hsiib0kB65V6ISJ+A/4MYBqScO3LjBjUs5IBWoQA0SB6MZT1I3sZNAnbiJfz9pMvPeTP29F/e953mR5wUwtC5ExGZEnImIOxExlecn+RbX2lt63csXDxe2XjxcSKLVuvX3JDuf5kXHv0m9k7/meER8/zsRP0r2xm2sb6zMV6uVtTw93aytTjfWNy4vF/Kc8tzs3MynVz4p962uH9R+/fzbyzd+8NvffOnZHza/+ZO0WJM/PZed66xHP7WrXozJjrzRiLhxFMEGZDT//8PJk7a2z0TEh1n7n4qR7N0EAE6zVmsqWlOdaQDgtEvv/ycjKZTyuYDJKBRKpfYc3vsxUajWG81LU/X79xYjm8M6H8XC3eVqZSafKzwfxSRNz2bHr9Ll19KPK1ci4r2IeDx2NjtfWqhXFwf5wQcAhtg7u8b/f421x/9OxUEVDgA4OuODLgAAcOyM/wAwfIz/ADB8/ofx37cDAeCUcP8PAMPH+A8Aw+fA8f/R8ZQDADgW37t5M91aW+3nX28/qfvyYqWxUqrdXygt1NdWS0v1+lK1UlpotQ56vWq9vjr78U6ysb5xu1a/f695e7k2v1S5XfEsAQAYvPc+ePqndNDfvHo226JjLQdjNZxuhUEXABiYkUEXABgY3+eB4XWIe3zTAHDKdVmity2fIEh6XfDE4q9wUl38vPl/GFZvMv9v7gBOtv9v/v9bfS8HcPyM4TC8Wq3Emv8AMGTM8QM9//6f6/mIkCf9LwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcFJPZlhRK2Vrgm+nPQqkUcS4izkcxubtcrcxExLsR8cex4lianh10oQGAN1T4a5Kv/3Vx6qPJ3WfPJP8ey/YR8eOf3/rZg/lmc202zf/HTn7zSZp/trlWPjOICgAAna7tzcrG73K+77iRf/ni4cL2dpxFfH69vbhoGncr39pnRmM0249HMSIm/pnk6bb088pIH+JvPoqIz23XfzwedESYzOZA2iuf7o6fxj7X9/idv//d8Quv1beQnUv3xex38dnYVTjgQE+vt/vJvO2lTTxvf4W4kO27t//xrId6c2n/lzbXrT39X2Gn/xvZEz/J2vyFnfT+JXn+8e++uyezNdU+9yjiC6Pd4ic78ZPu/W/xo0PW8c9f/PKHvc61fhFxsWv9t1ekrmXd7HSztjrdWN+4vFybX6osVe6Vy3OzczOfXvmkPJ3NUbd//r5bjL9dvfRur/hp/Sd6xB/fv/7xtUPW/5f/ufPDr+wT/xtf7f7+v79P/HRM/Poh489PXOu5fHcaf7FH/Q94/+PSIeM/+8vG4iEvBQCOQWN9Y2W+Wq2sHXCQftY86BoHhz9I7+3fgmJkB7EZ0a8XzCYlIqLrNekn6rejykd1kAws+q/6/YKD7pmAo/aq0Q+6JAAAAAAAAAAAAAAAQC+N9Y2Vse7f1urbwaDrCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOn13wAAAP//KHnENg==") ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, 0x0) syz_clone3(&(0x7f00000000c0)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = open(&(0x7f0000000100)='./file1\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) 27.192079366s ago: executing program 0 (id=11563): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 26.562353921s ago: executing program 0 (id=11581): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 26.520491415s ago: executing program 41 (id=11581): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 13.423264773s ago: executing program 4 (id=11904): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 13.307120593s ago: executing program 4 (id=11906): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) 13.249220448s ago: executing program 4 (id=11910): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_uring_setup(0xf09, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 13.196140933s ago: executing program 4 (id=11911): socket(0x80000000000000a, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) umount2(&(0x7f0000000340)='./file0/../file0\x00', 0x1) 13.166550995s ago: executing program 8 (id=11912): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r1, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040010) 13.086442802s ago: executing program 4 (id=11914): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f0000000440)=0x7, 0x4) 13.065269884s ago: executing program 8 (id=11915): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000480), 0x11, 0x5aa, &(0x7f00000007c0)="$eJzs3U9oHNUfAPDvzGabNs3vlwoKKj0UFSqUbpL+0eqpvYqFQA+CFw2bbSjZZEs20SYETO9F7EFUeqk3PXhUPHgQLx69elE8C8UGhaYHXdnsbrpNd2MSs9ma/XxgkvdmJvN9b2a/LzvDDBNAzzpW/ZFGPBMRY0nEUNOyvqgvPFZbb3VlKX9/ZSmfRKVy6bckkoi4t7KUb6yf1H8fjojliHg6Ir7LRpxI1zd5oFEoLyxOjReLhdl6fXhu+upweWHx5JXp8cnCZGHm9MuvnD135uzoqdHm5t6vNNey2+vrjZ9vvn/jh9du3/z8i6PL+Q/Hkzgfg/Vlzf3YTbV9ko3zG+af6USwLkq63QB2JFPP82oqPRVDkalnfSuV5sGhf0+aB3RQpT+isi4qlWr6V4DekDyU7tIfekfje0D1/Lcx7eX3jzsXaicg1birK0v596IRv692bSIOrp2bDPyePHRmUj3fPLKXDWVfWr4eESN9fY9+/pP652/nRnajgXTUtxdqB+rR45+ujz/RYvwZbFw7/Zca499qffxbbRE/02b8G9tijD/f/OWTtvGv98ezLeMn6/GTFvHTiHh7Q3vaufXG1+faLat8GnE8Wsdv3vYm14eHL18pFkZqP1vG+Ob40Vfb9z9ioE382jXbg2sNae7/gXqb0k363Oyr7798bnmT+C8+v/nxb7X/D0XEB1uM/8S9z15vt+zO9eRu9VvAdo9/Etm4vcX4L50/9lO96KohAAAAAAAAAADsonTtXrYkza2X0zSXqz3D+2QMpMVSee7E5dL8zETtnrcjkU0bd1oN1epJtT5avx+3UT+1oX46Uw+YObRWz+VLxYku9x0AAAAAAAAAAAAAAAAAAAAeF4c3PP//R2bt+f+Nr6sG9qv2r/wG9jv5D73r4fzf7FWOwH7j/z/0rIr8h94l/6F3yX/oXfIfepf8h94l/6F3yX8AAAAAAAAAAAAAAAAAAAAAAAAAAOiIsYsXq1Pl/spSvlqf6FuYnyq9c3KiUJ7KTc/nc/nS7NXcZKk0WSzk8qXpf9peUipdHYmZ+WvDc4Xy3HB5YfGt6dL8TOOdooVsx3sEAAAAAAAAAAAAAAAAAAAA/z2Da1OS5iKytXqa5nIR/4uII0kkl68UCyMR8f+I+DGT7a/WR7vdaAAAAAAAAAAAAAAAAAAAANhnyguLU+PFYmG2c4W+eqgOhth6oW87K0fE8u42o7rFbf9Vtr4Du7zr9kchs5PPYXZsaOBxaPxeFro4KAEAAAAAAAAAAAAAAAAAQI968NDvVv/ir842CAAAAAAAAAAAAAAAAAAAAHpS+msSEdXp+NALgxuXHkhWM2u/I+LdW5c+ujY+Nzc7Wp1/d33+3Mf1+ae60X5gqxp5mkZENY8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAB8oLi1PjxWJhdoeF/i2s0+0+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOzE3wEAAP//C5/FIQ==") mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 12.922236596s ago: executing program 8 (id=11916): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000001540)={0x0, 0x0, 0x0}, 0x0) 12.877604591s ago: executing program 4 (id=11917): unshare(0x22020600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[]) 12.840492654s ago: executing program 42 (id=11917): unshare(0x22020600) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a"], 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000300)={[{@grpquota}, {@quota}, {@quota}, {@stripe={'stripe', 0x3d, 0x3}}, {@jqfmt_vfsold}]}, 0xff, 0x4fa, &(0x7f00000005c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000340)=ANY=[]) 12.790530158s ago: executing program 8 (id=11920): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000380)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 12.747788162s ago: executing program 8 (id=11921): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x3c}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=@newtfilter={0x90, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xd}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_ACT={0x34, 0x7, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_U32_SEL={0x24, 0x5, {0x8, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0x2, 0x20008000, 0x4, 0x1}]}}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0xe}}]}, 0x90}, 0x1, 0x0, 0x0, 0x1}, 0x24040084) 12.552163469s ago: executing program 8 (id=11923): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0xff, 0xf}, 0x2c) 12.520186752s ago: executing program 43 (id=11923): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'wlc\x00', 0x15, 0xff, 0xf}, 0x2c) 2.966306769s ago: executing program 5 (id=12085): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) 2.689036664s ago: executing program 5 (id=12090): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x1a8) close_range(r0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000140001"], 0x14}}, 0x4014) recvmmsg$unix(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{0xfffffffffffffffd}], 0x1}}], 0x2, 0x162, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x4012, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 2.529319508s ago: executing program 5 (id=12096): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000043c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) 1.825595469s ago: executing program 9 (id=12112): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_setup(0x29e, &(0x7f0000000140)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) r1 = socket$unix(0x1, 0x5, 0x0) r2 = eventfd2(0x100004, 0x800) io_submit(r0, 0x1, &(0x7f0000000600)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x7, 0x0, r1, &(0x7f0000000000)='^\x00', 0x2, 0x0, 0x0, 0x971a2bbfb5f4c835, r2}]) 1.713689649s ago: executing program 6 (id=12114): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010003704000000000500000000000000", @ANYRES32=r2, @ANYBLOB="c3040580000000002800128008000100677265001c00028005000a000000000008000700ac1414"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) sendmmsg$inet(r0, &(0x7f0000001580)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @private=0x1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @remote}}}], 0x20}}, {{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000340), 0x0, &(0x7f0000000380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @local}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffa}}], 0x38}}], 0x3, 0x40000) 1.623264977s ago: executing program 6 (id=12116): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x2002, 0x32, 0x43a1bd56, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000000306010400000000000000000700f8010500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x2880}, 0x10) 1.561975073s ago: executing program 5 (id=12117): io_submit(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioperm(0x7, 0x4, 0x7) r0 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, &(0x7f0000000000)={0x0, 0x300}) 1.511787567s ago: executing program 6 (id=12119): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x4, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x4}, 0x8) sendto$inet6(r0, &(0x7f00000003c0)='\x00', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)="89", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)="c9", 0x1}], 0x1}}], 0x2, 0x8001) shutdown(r0, 0x1) 1.422598495s ago: executing program 5 (id=12123): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) 1.404468376s ago: executing program 6 (id=12124): connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @local}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 1.219002343s ago: executing program 9 (id=12127): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.193497975s ago: executing program 1 (id=12128): r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0xef, 0x4) bind$inet(r0, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 1.145463259s ago: executing program 1 (id=12130): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) write$binfmt_misc(r1, &(0x7f0000000040)='\t', 0x27) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1.124113871s ago: executing program 1 (id=12131): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @loopback}, 0x2, 0x4}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x8004745a, &(0x7f0000005280)) 1.107270322s ago: executing program 6 (id=12132): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x16, 0x1}) io_uring_enter(r1, 0xd44, 0x44c1, 0x7, 0x0, 0x0) 1.041407058s ago: executing program 9 (id=12134): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x3}, {0x5, 0xffff}, {0xfff2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20044000) r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a480000000c0a010200000000000000000200000108000440000000000900010073797a31000000000900010073797a30000000000900020073797a3100000000080004400000000194010000160a0102000000000000000001000004080007400000000308000740000000030c000540000000000000000208000500000000010c000540000000000000000504010380a4000380140001007465616d30000000000000000000000014000100636169663000000000000000000000001400010076657468305f746f5f627269646765001400010076657468315f6d6163767461700000001400010074756e6c300000000000000000000000140001006261746164765f736c6176655f3100001400010069703665727370616e300000000000001400010065727370616e3000000000000000000008000140000000000800014000000000080001400000000008000140000000002c00038014000100764c7468305f746f5f627269646765001400010069703665727370616e3000000000000008000140000000000800014000000000340003800800024000000006080002400000000408000240000080010800014000000000080002400000000908000140000000000900020073797a32000000000900020073797a300000000014"], 0x204}, 0x1, 0x0, 0x0, 0x84}, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000000806050000000000000000000a00000005000140"], 0x28}, 0x1, 0x0, 0x0, 0x24004090}, 0x0) 1.031570769s ago: executing program 1 (id=12135): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x0, &(0x7f0000000740)=ANY=[], 0xfd, 0x11fd, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x28011, r1, 0x0) syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) 1.006524681s ago: executing program 3 (id=12136): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0xb, &(0x7f0000000080)={0x0, 0x0, 0x3}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read(r2, &(0x7f0000000740)=""/377, 0x179) 973.546964ms ago: executing program 3 (id=12137): r0 = fsopen(&(0x7f0000000100)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 882.681782ms ago: executing program 6 (id=12138): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, r0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x3) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x3) 882.167922ms ago: executing program 3 (id=12139): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)='F', 0x1}, {0x0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r2}}], 0x20, 0x2400e044}, 0x0) 869.127253ms ago: executing program 9 (id=12140): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x8000000000000001, 0x1) 786.163231ms ago: executing program 3 (id=12141): r0 = timerfd_create(0x0, 0x800) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f00000000c0)={0x0, 0x5edc, 0x1000, 0x1, 0x40000333}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000400)=""/245, 0xf5}], 0x1, 0x18}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 773.387572ms ago: executing program 9 (id=12142): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) unshare(0x42040400) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8841, 0x17d) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 700.385218ms ago: executing program 1 (id=12143): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1_virt_wifi\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={r1, r2, 0x25, 0x4, @val=@tcx}, 0x1c) 666.932401ms ago: executing program 3 (id=12144): socket(0x10, 0x803, 0x0) socket(0x22, 0x2, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000207b8ae8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 545.518462ms ago: executing program 3 (id=12145): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000003c0)=0x5, 0x4) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 291.177734ms ago: executing program 5 (id=12146): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f00000005c0)=ANY=[@ANYBLOB='iocharset=cp1251,utf8,overriderockperm,nojoliet,nojoliet,overriderockperm,dmode=0x0000000000000003,dmode=0x0000000000000002,mode=0x0000000000000080,hide,block=0x0000000000000200,map=acorn,overriderockperm,check=relaxed,gid=', @ANYRESHEX, @ANYBLOB=',wid=', @ANYRESDEC, @ANYRES32], 0x5, 0xa51, &(0x7f0000001cc0)="$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") r1 = open(&(0x7f00000001c0)='./file2\x00', 0x8040, 0x0) dup3(r1, r0, 0x0) io_setup(0x2, &(0x7f0000000400)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 96.694051ms ago: executing program 1 (id=12147): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 75.441153ms ago: executing program 9 (id=12148): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x78948679f3a620db) mount$9p_fd(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000140), 0x800001, &(0x7f0000000680)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) 0s ago: executing program 44 (id=12147): sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}}, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): 7295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28531 comm="syz.6.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d47c629 code=0x7ffc0000 [ 387.063842][ T28] audit: type=1326 audit(2001573030.897:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28531 comm="syz.6.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d47c629 code=0x7ffc0000 [ 387.164447][ T28] audit: type=1326 audit(2001573030.897:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28531 comm="syz.6.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fc87d47c629 code=0x7ffc0000 [ 387.222463][ T28] audit: type=1326 audit(2001573030.907:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28531 comm="syz.6.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d47c629 code=0x7ffc0000 [ 387.270839][ T28] audit: type=1326 audit(2001573030.907:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28531 comm="syz.6.9933" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d47c629 code=0x7ffc0000 [ 388.218271][T28616] __nla_validate_parse: 3 callbacks suppressed [ 388.218447][T28616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9970'. [ 388.272010][ T5465] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 388.272252][T28498] Bluetooth: hci0: command 0x1003 tx timeout [ 388.343105][T28624] dummy0: entered promiscuous mode [ 388.361142][T28624] dummy0: left promiscuous mode [ 388.567187][T28638] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9980'. [ 390.082964][T28735] netlink: 'syz.0.10023': attribute type 64 has an invalid length. [ 390.093820][T28735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10023'. [ 390.112796][T28735] netlink: 'syz.0.10023': attribute type 64 has an invalid length. [ 390.136076][T28735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10023'. [ 390.498670][T28780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10045'. [ 390.520762][T28780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10045'. [ 390.624721][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 390.624809][ T28] audit: type=1400 audit(2001573034.527:1517): avc: denied { create } for pid=28790 comm="syz.3.10052" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=blk_file permissive=1 [ 390.759686][ T3422] kernel write not supported for file bpf-prog (pid: 3422 comm: kworker/1:5) [ 390.864916][T28821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10065'. [ 390.878045][T28821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10065'. [ 391.517853][T28850] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10076'. [ 391.981590][T28886] sctp: [Deprecated]: syz.0.10095 (pid 28886) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.981590][T28886] Use struct sctp_sack_info instead [ 392.115839][T28893] sctp: [Deprecated]: syz.0.10098 (pid 28893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.115839][T28893] Use struct sctp_sack_info instead [ 392.163548][ T28] audit: type=1400 audit(2001573036.067:1518): avc: denied { create } for pid=28896 comm="syz.6.10099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 392.225584][ T28] audit: type=1400 audit(2001573036.087:1519): avc: denied { connect } for pid=28896 comm="syz.6.10099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 392.275163][ T28] audit: type=1400 audit(2001573036.087:1520): avc: denied { getopt } for pid=28896 comm="syz.6.10099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 392.829696][T28925] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10113'. [ 393.127141][ T28] audit: type=1326 audit(2001573037.027:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28947 comm="syz.0.10124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x0 [ 393.494522][T12238] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.585688][T12238] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.657441][T12238] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.758927][T12238] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 393.785984][T12238] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.133290][T12238] bond1 (unregistering): Released all slaves [ 394.194429][T12238] tipc: Disabling bearer [ 394.211142][T12238] tipc: Left network mode [ 394.235753][T12238] veth0_macvtap: left promiscuous mode [ 394.246138][T12238] veth1_vlan: left allmulticast mode [ 394.252369][T12238] veth1_vlan: left promiscuous mode [ 394.257635][T12238] veth0_vlan: left promiscuous mode [ 394.296942][ T28] audit: type=1400 audit(2001573038.197:1522): avc: denied { accept } for pid=29030 comm="syz.3.10151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 394.335789][T12238] pimreg3 (unregistering): left allmulticast mode [ 394.469074][T29053] loop3: detected capacity change from 0 to 1024 [ 394.481356][T29055] tmpfs: Bad value for 'mpol' [ 394.509760][T28982] chnl_net:caif_netlink_parms(): no params data found [ 394.523021][T29053] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 394.545065][T29053] System zones: 0-1, 3-8 [ 394.562438][T29053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 394.577372][T29053] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.619234][T28982] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.625182][T29053] EXT4-fs warning (device loop3): ext4_empty_dir:3097: inode #12: comm syz.3.10156: directory missing '..' [ 394.627027][T28982] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.645638][T28982] bridge_slave_0: entered allmulticast mode [ 394.652273][T28982] bridge_slave_0: entered promiscuous mode [ 394.659623][T28982] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.666867][T28982] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.674343][T28982] bridge_slave_1: entered allmulticast mode [ 394.681122][T28982] bridge_slave_1: entered promiscuous mode [ 394.711421][T28982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.722273][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 394.723812][T28982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.754084][T28982] team0: Port device team_slave_0 added [ 394.762544][T28982] team0: Port device team_slave_1 added [ 394.788457][T28982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.812732][T28982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.861685][T28982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.882578][T28982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.892525][T28982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.935025][T28982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 394.959355][T12238] IPVS: stop unused estimator thread 0... [ 394.974192][T28982] hsr_slave_0: entered promiscuous mode [ 394.980764][T28982] hsr_slave_1: entered promiscuous mode [ 394.989562][T28982] debugfs: 'hsr0' already exists in 'hsr' [ 394.995423][T28982] Cannot create hsr debugfs directory [ 395.040076][T29117] __nla_validate_parse: 1 callbacks suppressed [ 395.040110][T29117] netlink: 35284 bytes leftover after parsing attributes in process `syz.5.10177'. [ 395.063171][T29117] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10177'. [ 395.383209][T29173] netlink: 'syz.5.10188': attribute type 83 has an invalid length. [ 395.423378][T28982] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 395.436107][T28982] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 395.451222][T28982] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 395.469871][T28982] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 395.489068][T28982] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.496289][T28982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.503705][T28982] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.510806][T28982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.552647][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.560641][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.588295][T28982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.613382][T28982] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.634253][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.641336][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.650121][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.657273][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.676907][T28982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.741337][T28982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.891621][T28982] veth0_vlan: entered promiscuous mode [ 395.901504][T28982] veth1_vlan: entered promiscuous mode [ 395.919313][T28982] veth0_macvtap: entered promiscuous mode [ 395.927323][T28982] veth1_macvtap: entered promiscuous mode [ 395.939038][T28982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.953007][T28982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.964919][ T83] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.980494][ T83] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.993781][ T83] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.008887][ T83] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.099536][ C1] vcan0: j1939_tp_rxtimer: 0xffff8881281be400: rx timeout, send abort [ 396.107980][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8881281be400: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 397.950379][ T28] audit: type=1326 audit(2001573041.848:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29383 comm="syz.5.10208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x0 [ 398.027405][ T28] audit: type=1326 audit(2001573041.918:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29387 comm="syz.6.10210" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc87d47c629 code=0x0 [ 398.126774][T29404] loop4: detected capacity change from 0 to 128 [ 398.777395][T29443] SELinux: policydb string does not match my string SE Linux [ 398.795437][T29443] SELinux: failed to load policy [ 398.935218][T29456] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10240'. [ 399.054850][T29468] loop3: detected capacity change from 0 to 512 [ 399.101738][T29468] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.10245: inode has both inline data and extents flags [ 399.158751][T29468] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 399.162486][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 399.178088][ C0] EXT4-fs (loop3): initial error at time 2001573043: ext4_orphan_get:1391: inode 15 [ 399.187520][ C0] EXT4-fs (loop3): last error at time 2001573043: ext4_orphan_get:1391: inode 15 [ 399.197986][T29468] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.10245: couldn't read orphan inode 15 (err -117) [ 399.229700][T29468] loop3: lost filesystem error report for type 5 error -117 [ 399.230520][T29468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.279423][ T28] audit: type=1400 audit(2001573043.178:1525): avc: denied { write } for pid=29478 comm="syz.6.10249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 399.373474][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.496960][T29494] netlink: 'syz.6.10256': attribute type 2 has an invalid length. [ 399.620718][T29502] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10261'. [ 399.638641][ T28] audit: type=1326 audit(2001573043.538:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29513 comm="syz.3.10264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff717fdc629 code=0x7ffc0000 [ 399.664282][ T28] audit: type=1326 audit(2001573043.538:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29513 comm="syz.3.10264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff717fdc629 code=0x7ffc0000 [ 399.692153][T29516] xt_hashlimit: size too large, truncated to 1048576 [ 399.750938][ T28] audit: type=1326 audit(2001573043.538:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29513 comm="syz.3.10264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff717fdc629 code=0x7ffc0000 [ 399.794815][T29526] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10271'. [ 399.819682][ T28] audit: type=1326 audit(2001573043.538:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29513 comm="syz.3.10264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff717fdc629 code=0x7ffc0000 [ 399.847118][T29526] vlan2: entered allmulticast mode [ 399.856539][T29526] dummy0: entered allmulticast mode [ 399.865175][T29526] batman_adv: batadv0: Adding interface: vlan2 [ 399.877177][ T28] audit: type=1326 audit(2001573043.568:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29513 comm="syz.3.10264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff717fdc629 code=0x7ffc0000 [ 399.892661][T29526] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.908235][ T28] audit: type=1326 audit(2001573043.568:1531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29513 comm="syz.3.10264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff717fdc629 code=0x7ffc0000 [ 399.930607][T29526] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 399.992309][T29531] erspan0: entered promiscuous mode [ 399.997751][ T28] audit: type=1326 audit(2001573043.568:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29513 comm="syz.3.10264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff717fdc629 code=0x7ffc0000 [ 400.254032][T29572] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10291'. [ 400.344066][T29589] batadv_slave_0: entered promiscuous mode [ 400.351611][T29588] batadv_slave_0: left promiscuous mode [ 400.398598][T29594] netlink: 68 bytes leftover after parsing attributes in process `syz.5.10301'. [ 400.731024][T29629] netlink: 10 bytes leftover after parsing attributes in process `syz.5.10318'. [ 400.948399][T29640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10323'. [ 401.095710][T29653] loop4: detected capacity change from 0 to 512 [ 401.124023][T29653] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 401.128048][T29658] xt_connbytes: Forcing CT accounting to be enabled [ 401.144172][T29653] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 401.201046][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.332193][T20377] kernel read not supported for file /usbmon6 (pid: 20377 comm: kworker/0:7) [ 401.472580][T29685] sctp: [Deprecated]: syz.0.10339 (pid 29685) Use of struct sctp_assoc_value in delayed_ack socket option. [ 401.472580][T29685] Use struct sctp_sack_info instead [ 401.682615][T29700] ieee802154 phy0 wpan0: encryption failed: -22 [ 402.287121][T29734] netlink: 'syz.0.10361': attribute type 15 has an invalid length. [ 402.743183][T29758] netlink: 'syz.4.10372': attribute type 3 has an invalid length. [ 402.762165][T29758] netlink: 'syz.4.10372': attribute type 4 has an invalid length. [ 402.778375][T29758] netlink: 9067 bytes leftover after parsing attributes in process `syz.4.10372'. [ 402.877424][T29764] loop4: detected capacity change from 0 to 512 [ 402.896130][T29764] EXT4-fs: Ignoring removed nobh option [ 402.911883][T29764] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 402.922704][T29764] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.10374: iget: bad i_size value: 38620345925642 [ 402.923179][T29766] netlink: 'syz.5.10376': attribute type 3 has an invalid length. [ 402.936372][T29764] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 402.946012][T29764] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.10374: couldn't read orphan inode 15 (err -117) [ 402.955191][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 402.955211][ C0] EXT4-fs (loop4): initial error at time 2001573046: ext4_orphan_get:1391: inode 15 [ 402.955245][ C0] EXT4-fs (loop4): last error at time 2001573046: ext4_orphan_get:1391: inode 15 [ 402.983347][T29766] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10376'. [ 402.984543][T29764] loop4: lost filesystem error report for type 5 error -117 [ 403.003573][T29764] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.051856][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 403.051873][ T28] audit: type=1400 audit(2001573046.958:1557): avc: denied { read } for pid=29761 comm="syz.4.10374" path="/32/file1/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 403.090278][T29764] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.10374: bg 0: block 5: invalid block bitmap [ 403.130967][T29764] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 403.169383][T29764] EXT4-fs (loop4): This should not happen!! Data will be lost [ 403.169383][T29764] [ 403.180116][T29764] EXT4-fs (loop4): Total free blocks count 0 [ 403.187152][T29764] EXT4-fs (loop4): Free/Dirty block details [ 403.195465][T29764] EXT4-fs (loop4): free_blocks=0 [ 403.200619][T29764] EXT4-fs (loop4): dirty_blocks=1 [ 403.206215][T29764] EXT4-fs (loop4): Block reservation details [ 403.213832][T29764] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 403.217707][T29778] tipc: Started in network mode [ 403.227434][T29778] tipc: Node identity ac1414aa, cluster identity 4711 [ 403.241441][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.241996][T29778] tipc: Enabled bearer , priority 10 [ 403.445899][T29797] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.10388'. [ 403.473075][T29800] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10390'. [ 403.774474][T29844] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=29844 comm=syz.6.10409 [ 403.823644][T20377] IPVS: starting estimator thread 0... [ 403.890377][T29853] loop4: detected capacity change from 0 to 512 [ 403.934272][T29853] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 403.951948][T29847] IPVS: using max 2640 ests per chain, 132000 per kthread [ 403.955244][T29859] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10415'. [ 403.969297][T29853] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.989394][T29859] netlink: 9 bytes leftover after parsing attributes in process `syz.6.10415'. [ 404.135815][T29869] loop3: detected capacity change from 0 to 512 [ 404.170045][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 404.187771][T29869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.240214][T29869] ext4 filesystem being mounted at /195/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.277353][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.372093][T20377] tipc: Node number set to 2886997162 [ 404.542897][T29912] loop4: detected capacity change from 0 to 1024 [ 404.572777][T29912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 404.597613][T29912] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.610245][T29912] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.10437: lblock 0 mapped to illegal pblock 0 (length 6) [ 404.626311][T29912] EXT4-fs error (device loop4): ext4_ext_remove_space:2956: inode #15: comm syz.4.10437: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 404.645811][T29912] EXT4-fs error (device loop4): ext4_map_blocks:818: inode #15: comm syz.4.10437: lblock 0 mapped to illegal pblock 0 (length 1) [ 404.659947][T29912] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 404.696595][T29912] EXT4-fs (loop4): This should not happen!! Data will be lost [ 404.696595][T29912] [ 404.751461][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 405.397256][T29951] loop3: detected capacity change from 0 to 512 [ 405.416092][T29951] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 405.438922][T29951] EXT4-fs (loop3): orphan cleanup on readonly fs [ 405.454657][T29951] EXT4-fs error (device loop3): __ext4_iget:5378: inode #11: block 8: comm syz.3.10453: invalid block [ 405.486455][T29951] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 405.486731][T29951] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.10453: couldn't read orphan inode 11 (err -117) [ 405.496087][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 405.496110][ C1] EXT4-fs (loop3): initial error at time 2001573049: __ext4_iget:5378: inode 11: block 8 [ 405.496165][ C1] EXT4-fs (loop3): last error at time 2001573049: __ext4_iget:5378: inode 11: block 8 [ 405.535750][T29951] loop3: lost filesystem error report for type 5 error -117 [ 405.536581][T29951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 405.560515][T29951] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (57259!=33349) [ 405.601071][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.673830][T29962] syzkaller1: entered promiscuous mode [ 405.686783][T29962] syzkaller1: entered allmulticast mode [ 405.702120][T29962] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 405.834607][T29973] loop3: detected capacity change from 0 to 128 [ 405.947610][T29976] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 405.948464][ T3408] IPVS: starting estimator thread 0... [ 406.071315][T29985] IPVS: using max 2496 ests per chain, 124800 per kthread [ 406.151481][T30001] loop4: detected capacity change from 0 to 2048 [ 406.195223][T30001] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 406.215000][ T28] audit: type=1400 audit(2001573050.118:1558): avc: denied { getattr } for pid=30012 comm="syz.5.10481" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=98578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 406.303544][ T28] audit: type=1400 audit(2001573050.148:1559): avc: denied { map } for pid=30000 comm="syz.4.10475" path="/55/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 406.328572][ T28] audit: type=1400 audit(2001573050.148:1560): avc: denied { execute } for pid=30000 comm="syz.4.10475" path="/55/bus/bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 406.352441][ T28] audit: type=1400 audit(2001573050.158:1561): avc: denied { nlmsg_write } for pid=30020 comm="syz.3.10484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 406.801871][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.873043][T30089] netlink: 'syz.4.10502': attribute type 1 has an invalid length. [ 406.966507][T30097] __nla_validate_parse: 2 callbacks suppressed [ 406.966611][T30097] netlink: 182 bytes leftover after parsing attributes in process `syz.4.10504'. [ 407.397320][ T3408] kernel write not supported for file /timer_list (pid: 3408 comm: kworker/1:4) [ 407.435335][T30130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10519'. [ 407.445824][T30130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10519'. [ 407.476292][ T28] audit: type=1326 audit(2001573051.378:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30140 comm="syz.5.10522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 407.503460][ T28] audit: type=1326 audit(2001573051.378:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30140 comm="syz.5.10522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 407.537559][ T28] audit: type=1326 audit(2001573051.398:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30140 comm="syz.5.10522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 407.585629][ T28] audit: type=1326 audit(2001573051.398:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30140 comm="syz.5.10522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 407.626031][T30147] SELinux: policydb string does not match my string SE Linux [ 407.634855][T30147] SELinux: failed to load policy [ 407.642737][ T28] audit: type=1326 audit(2001573051.398:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30140 comm="syz.5.10522" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 407.719862][T30159] loop3: detected capacity change from 0 to 512 [ 407.741328][T30159] EXT4-fs: Ignoring removed nobh option [ 407.769035][T30159] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 407.777905][T30163] loop4: detected capacity change from 0 to 256 [ 407.785473][T30163] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 407.817091][T30159] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.10532: iget: bad i_size value: 38620345925642 [ 407.872111][T30163] FAT-fs (loop4): Directory bread(block 64) failed [ 407.878678][T30163] FAT-fs (loop4): Directory bread(block 65) failed [ 407.889135][T30159] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 407.890908][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 407.906533][ C1] EXT4-fs (loop3): initial error at time 2001573051: ext4_orphan_get:1391: inode 15 [ 407.909391][T30163] FAT-fs (loop4): Directory bread(block 66) failed [ 407.916045][ C1] EXT4-fs (loop3): last error at time 2001573051: ext4_orphan_get:1391: inode 15 [ 407.926660][T30159] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.10532: couldn't read orphan inode 15 (err -117) [ 407.944420][T30163] FAT-fs (loop4): Directory bread(block 67) failed [ 407.960523][T30163] FAT-fs (loop4): Directory bread(block 68) failed [ 407.967639][T30163] FAT-fs (loop4): Directory bread(block 69) failed [ 407.974717][T30159] loop3: lost filesystem error report for type 5 error -117 [ 407.975723][T30159] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 407.984976][T30163] FAT-fs (loop4): Directory bread(block 70) failed [ 408.048187][T30163] FAT-fs (loop4): Directory bread(block 71) failed [ 408.060108][T30163] FAT-fs (loop4): Directory bread(block 72) failed [ 408.067777][T30163] FAT-fs (loop4): Directory bread(block 73) failed [ 408.166952][T30189] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10545'. [ 408.176293][T30189] netlink: 'syz.5.10545': attribute type 1 has an invalid length. [ 408.200500][T30159] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.10532: bg 0: block 5: invalid block bitmap [ 408.231502][T30159] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 408.244047][T30159] EXT4-fs (loop3): This should not happen!! Data will be lost [ 408.244047][T30159] [ 408.254175][T30159] EXT4-fs (loop3): Total free blocks count 0 [ 408.260599][T30159] EXT4-fs (loop3): Free/Dirty block details [ 408.267088][T30159] EXT4-fs (loop3): free_blocks=0 [ 408.278604][T30159] EXT4-fs (loop3): dirty_blocks=1 [ 408.283848][T30159] EXT4-fs (loop3): Block reservation details [ 408.292585][T30159] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 408.374270][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.892497][ T61] Bluetooth: hci1: Frame reassembly failed (-84) [ 409.617032][T30285] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10573'. [ 409.658132][ T3408] Process accounting resumed [ 409.689935][T30289] loop4: detected capacity change from 0 to 128 [ 409.705338][T30289] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 409.718325][T30289] ext4 filesystem being mounted at /80/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 409.731139][T30289] EXT4-fs warning (device loop4): ext4_group_extend:1886: will only finish group (8193 blocks, 8129 new) [ 409.742597][T30289] EXT4-fs warning (device loop4): ext4_group_extend:1891: can't read last block, resize aborted [ 409.763568][T28982] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 409.879156][ T12] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.888925][ T12] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.904782][T12240] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.917206][T12240] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.143245][T30341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10599'. [ 410.156083][T30341] netlink: 'syz.5.10599': attribute type 18 has an invalid length. [ 410.165970][T30343] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 410.170773][T30341] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10599'. [ 410.350802][T30268] Bluetooth: hci0: command 0x1003 tx timeout [ 410.350857][ T5465] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 410.910789][ T5465] Bluetooth: hci1: command 0x1003 tx timeout [ 410.910803][T28498] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 410.973862][T30380] loop3: detected capacity change from 0 to 2048 [ 410.993072][T30380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.411184][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.543629][T30431] loop4: detected capacity change from 0 to 512 [ 411.574659][T30431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.591515][T30431] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 411.609256][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 411.609274][ T28] audit: type=1400 audit(2001573055.508:1573): avc: denied { ioctl } for pid=30438 comm="syz.5.10642" path="socket:[99938]" dev="sockfs" ino=99938 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 411.655188][T30431] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 411.688490][T30431] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 411.703111][ T28] audit: type=1400 audit(2001573055.608:1574): avc: denied { append } for pid=30430 comm="syz.4.10639" path="/97/file0/blkio.bfq.avg_queue_size" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 411.742534][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.089560][T30467] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 412.104653][T30467] team0: Port device macvlan2 added [ 412.110602][T30470] loop3: detected capacity change from 0 to 128 [ 412.162035][T30470] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 412.175559][T30470] ext4 filesystem being mounted at /233/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 412.189834][ T28] audit: type=1400 audit(2001573056.088:1575): avc: denied { setattr } for pid=30469 comm="syz.3.10656" name="bus" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 412.220865][T26429] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 413.011166][T30500] batadv_slave_1: entered promiscuous mode [ 413.022863][T30499] batadv_slave_1: left promiscuous mode [ 413.140083][T30511] loop4: detected capacity change from 0 to 4096 [ 413.185459][T30511] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.268305][T30529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10679'. [ 413.292984][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.322349][T30529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10679'. [ 413.354660][T30529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10679'. [ 413.364828][T30529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10679'. [ 413.427987][T30542] loop4: detected capacity change from 0 to 256 [ 413.455651][T30541] loop3: detected capacity change from 0 to 1024 [ 413.477151][T30542] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2097152) [ 413.478644][T30541] EXT4-fs: Ignoring removed orlov option [ 413.506392][T30542] FAT-fs (loop4): Filesystem has been set read-only [ 413.531891][T30541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.648170][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.744018][T30561] loop3: detected capacity change from 0 to 1024 [ 413.766108][T30561] EXT4-fs: Ignoring removed bh option [ 413.812357][T30561] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.124207][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.372100][ T28] audit: type=1400 audit(2001573058.269:1576): avc: denied { search } for pid=30592 comm="syz.3.10706" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 414.405917][ T28] audit: type=1400 audit(2001573058.269:1577): avc: denied { search } for pid=30592 comm="syz.3.10706" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 414.438821][ T28] audit: type=1400 audit(2001573058.269:1578): avc: denied { search } for pid=30592 comm="syz.3.10706" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 414.825678][T30648] pim6reg1: entered promiscuous mode [ 414.831946][T30648] pim6reg1: entered allmulticast mode [ 414.951942][T30664] loop3: detected capacity change from 0 to 164 [ 414.969242][T30664] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 415.046861][T30676] loop4: detected capacity change from 0 to 512 [ 415.061915][T30676] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 415.083965][T30676] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.099479][T30676] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.150401][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.368451][T30707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10755'. [ 415.378501][T30707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10755'. [ 415.391515][T30707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10755'. [ 415.404990][T30707] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10755'. [ 415.836590][T30737] netlink: 'syz.0.10770': attribute type 10 has an invalid length. [ 415.845899][T30737] team0: Port device netdevsim1 added [ 415.985424][T30755] netlink: 399 bytes leftover after parsing attributes in process `syz.0.10778'. [ 415.995961][T30755] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 416.006087][T30755] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 416.119456][T30771] netlink: 'syz.3.10785': attribute type 1 has an invalid length. [ 416.130513][T30771] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10785'. [ 416.266015][T30791] sctp: [Deprecated]: syz.0.10789 (pid 30791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.266015][T30791] Use struct sctp_sack_info instead [ 416.400808][ T28] audit: type=1400 audit(2001573060.309:1579): avc: denied { mounton } for pid=30802 comm="syz.3.10799" path="/263/file0" dev="gadgetfs" ino=3918 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 416.456995][ T28] audit: type=1400 audit(2001573060.349:1580): avc: denied { unmount } for pid=26429 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 417.271284][T30896] program syz.0.10842 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.375146][ T28] audit: type=1326 audit(2001573061.279:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30909 comm="syz.6.10849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d47c629 code=0x7ffc0000 [ 417.416509][ T28] audit: type=1326 audit(2001573061.279:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30909 comm="syz.6.10849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=281 compat=0 ip=0x7fc87d47c629 code=0x7ffc0000 [ 417.441883][ T28] audit: type=1326 audit(2001573061.279:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30909 comm="syz.6.10849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d47c629 code=0x7ffc0000 [ 417.465998][ T28] audit: type=1326 audit(2001573061.279:1584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30909 comm="syz.6.10849" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc87d47c629 code=0x7ffc0000 [ 417.492921][T30918] loop3: detected capacity change from 0 to 256 [ 417.515102][T30918] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 417.528977][ T3408] hid_parser_main: 1 callbacks suppressed [ 417.528996][ T3408] hid-generic 0080:0008:0000.0007: unknown main item tag 0x0 [ 417.531349][T30918] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 417.543226][ T3408] hid-generic 0080:0008:0000.0007: unknown main item tag 0x0 [ 417.578987][ T3408] hid-generic 0080:0008:0000.0007: unknown main item tag 0x0 [ 417.592390][ T3408] hid-generic 0080:0008:0000.0007: unknown main item tag 0x0 [ 417.610715][ T3408] hid-generic 0080:0008:0000.0007: unknown main item tag 0x0 [ 417.618506][ T3408] hid-generic 0080:0008:0000.0007: unknown main item tag 0x6 [ 417.667231][ T3408] hid-generic 0080:0008:0000.0007: unknown main item tag 0x0 [ 417.676810][ T3408] hid-generic 0080:0008:0000.0007: unknown main item tag 0x0 [ 417.679974][ T28] audit: type=1400 audit(2001573061.579:1585): avc: denied { create } for pid=30933 comm="syz.5.10859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 417.685049][ T3408] hid-generic 0080:0008:0000.0007: unknown main item tag 0x0 [ 417.715021][ T3408] hid-generic 0080:0008:0000.0007: unknown main item tag 0x0 [ 417.723890][ T28] audit: type=1400 audit(2001573061.619:1586): avc: denied { read } for pid=30933 comm="syz.5.10859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 417.749439][T30936] netlink: 'syz.0.10860': attribute type 3 has an invalid length. [ 417.757546][ T3408] hid-generic 0080:0008:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 417.804061][T30937] fido_id[30937]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 417.994789][T30957] ip6tnl1: entered allmulticast mode [ 418.066113][ T28] audit: type=1400 audit(2001573061.969:1587): avc: denied { getopt } for pid=30962 comm="syz.4.10872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 418.114227][T30966] loop4: detected capacity change from 0 to 512 [ 418.129074][T30966] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 418.144707][T30966] EXT4-fs error (device loop4): xattr_find_entry:337: inode #15: comm syz.4.10873: corrupted xattr entries [ 418.167455][T30966] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 418.167661][T30966] EXT4-fs (loop4): 1 orphan inode deleted [ 418.176860][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 418.176881][ C0] EXT4-fs (loop4): initial error at time 2001573062: xattr_find_entry:337: inode 15 [ 418.176923][ C0] EXT4-fs (loop4): last error at time 2001573062: xattr_find_entry:337: inode 15 [ 418.209817][T30966] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.235714][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.820703][T30993] netlink: 'syz.6.10882': attribute type 6 has an invalid length. [ 418.842443][ T28] audit: type=1326 audit(2001573062.749:1588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30978 comm="syz.4.10877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f613e21c629 code=0x7ffc0000 [ 418.889263][ T28] audit: type=1326 audit(2001573062.749:1589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30978 comm="syz.4.10877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f613e1bda19 code=0x7ffc0000 [ 418.917526][ T28] audit: type=1326 audit(2001573062.749:1590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30978 comm="syz.4.10877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f613e1bda19 code=0x7ffc0000 [ 419.074860][T31012] __nla_validate_parse: 4 callbacks suppressed [ 419.074888][T31012] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10890'. [ 419.484524][T31060] loop4: detected capacity change from 0 to 128 [ 419.500769][T31060] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 419.529903][T31060] FAT-fs (loop4): Filesystem has been set read-only [ 419.673200][T31074] loop3: detected capacity change from 0 to 512 [ 419.705153][T31078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10920'. [ 419.715750][T31078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10920'. [ 419.715787][T31074] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 419.748845][T31074] EXT4-fs (loop3): 1 truncate cleaned up [ 419.760781][T31074] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.817415][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.347858][T31117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.357890][T31117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.049679][T31155] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10951'. [ 421.058940][T31155] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10951'. [ 421.068430][T31155] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10951'. [ 421.078256][T31155] netlink: 2 bytes leftover after parsing attributes in process `syz.4.10951'. [ 421.678493][T31202] xt_hashlimit: size too large, truncated to 1048576 [ 422.057185][T31221] RDS: rds_bind could not find a transport for ::3:0:20:0, load rds_tcp or rds_rdma? [ 422.284641][T31234] loop3: detected capacity change from 0 to 512 [ 422.350929][T31234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 422.369203][T31230] loop4: detected capacity change from 0 to 8192 [ 422.375895][T31234] ext4 filesystem being mounted at /296/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 422.438107][T31230] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 422.472048][T31230] FAT-fs (loop4): Filesystem has been set read-only [ 422.478798][T31230] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 2068) [ 422.512953][T31230] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 2068) [ 422.900807][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.985314][ T28] kauditd_printk_skb: 558 callbacks suppressed [ 422.985333][ T28] audit: type=1400 audit(2001573066.889:2149): avc: denied { write } for pid=31277 comm="syz.3.11000" path="socket:[102325]" dev="sockfs" ino=102325 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 423.051601][T31280] loop3: detected capacity change from 0 to 256 [ 423.066602][T31280] FAT-fs (loop3): error, clusters badly computed (0 != 128) [ 423.160054][T31280] FAT-fs (loop3): Filesystem has been set read-only [ 423.166739][T31280] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 423.624582][ T3401] kernel write not supported for file bpf-prog (pid: 3401 comm: kworker/1:3) [ 424.640701][ T9001] kernel write not supported for file bpf-prog (pid: 9001 comm: kworker/1:6) [ 424.937360][T31369] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 424.971776][T28982] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 424.988678][T28982] CPU: 1 UID: 0 PID: 28982 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 424.988717][T28982] Tainted: [W]=WARN [ 424.988725][T28982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 424.988809][T28982] Call Trace: [ 424.988817][T28982] [ 424.988878][T28982] __dump_stack+0x1d/0x30 [ 424.988908][T28982] dump_stack_lvl+0x95/0xd0 [ 424.988991][T28982] dump_stack+0x15/0x1b [ 424.989015][T28982] dump_header+0x80/0x240 [ 424.989040][T28982] oom_kill_process+0x295/0x350 [ 424.989064][T28982] out_of_memory+0x97d/0xb80 [ 424.989154][T28982] try_charge_memcg+0x62e/0xa10 [ 424.989302][T28982] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 424.989336][T28982] __swap_cache_prepare_and_add+0x386/0x530 [ 424.989400][T28982] swap_cache_alloc_folio+0xa2/0x120 [ 424.989431][T28982] swap_cluster_readahead+0x26e/0x3d0 [ 424.989467][T28982] swapin_readahead+0xde/0x840 [ 424.989595][T28982] ? __rcu_read_unlock+0x4e/0x70 [ 424.989620][T28982] ? __perf_event_task_sched_in+0xa65/0xad0 [ 424.989645][T28982] ? __list_add_valid_or_report+0x38/0xe0 [ 424.989729][T28982] ? __rcu_read_unlock+0x4e/0x70 [ 424.989752][T28982] ? swap_cache_get_folio+0x26f/0x280 [ 424.989785][T28982] do_swap_page+0x309/0x2210 [ 424.989815][T28982] ? __schedule+0x85a/0xd40 [ 424.989908][T28982] ? __rcu_read_lock+0x36/0x50 [ 424.989930][T28982] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 424.989962][T28982] handle_mm_fault+0xb40/0x3020 [ 424.990073][T28982] ? vma_start_read+0x1c7/0x2c0 [ 424.990180][T28982] do_user_addr_fault+0x62f/0x1050 [ 424.990242][T28982] ? trace_page_fault_user+0x1f/0xe0 [ 424.990347][T28982] exc_page_fault+0x62/0xa0 [ 424.990399][T28982] asm_exc_page_fault+0x26/0x30 [ 424.990421][T28982] RIP: 0033:0x7f613e1d7817 [ 424.990441][T28982] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 424.990481][T28982] RSP: 002b:00007fff0c12ca20 EFLAGS: 00010202 [ 424.990501][T28982] RAX: 0000000000000000 RBX: 00005555729ea500 RCX: 00007f613e1d7817 [ 424.990515][T28982] RDX: 00007fff0c12ca60 RSI: 0000000000000000 RDI: 0000000000000000 [ 424.990677][T28982] RBP: 00007fff0c12cacc R08: 0000000000000000 R09: 0000000000000000 [ 424.990692][T28982] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 424.990707][T28982] R13: 00000000000927c0 R14: 000000000006797c R15: 00007fff0c12cb20 [ 424.990730][T28982] [ 425.250808][T28982] memory: usage 307200kB, limit 307200kB, failcnt 678 [ 425.257624][T28982] memory+swap: usage 318960kB, limit 9007199254740988kB, failcnt 0 [ 425.299928][T28982] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 425.309975][T28982] Memory cgroup stats for /syz4: [ 425.310299][T28982] cache 0 [ 425.333683][ T28] audit: type=1326 audit(2001573069.239:2150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31381 comm="syz.0.11043" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff93838c629 code=0x0 [ 425.334145][T28982] rss 0 [ 425.385365][T28982] shmem 0 [ 425.388433][T28982] mapped_file 0 [ 425.393047][T28982] dirty 0 [ 425.396255][T28982] writeback 0 [ 425.399644][T28982] workingset_refault_anon 99 [ 425.404679][T28982] workingset_refault_file 0 [ 425.409479][T28982] swap 12042240 [ 425.413265][T28982] swapcached 18329600 [ 425.417399][T28982] pgpgin 116261 [ 425.421884][T28982] pgpgout 116259 [ 425.425592][T28982] pgfault 148282 [ 425.429209][T28982] pgmajfault 61 [ 425.432985][T28982] inactive_anon 0 [ 425.436821][T28982] active_anon 0 [ 425.440561][T28982] inactive_file 0 [ 425.444249][T28982] active_file 8192 [ 425.457075][T28982] unevictable 0 [ 425.475566][T28982] hierarchical_memory_limit 314572800 [ 425.482065][T28982] hierarchical_memsw_limit 9223372036854771712 [ 425.488333][T28982] total_cache 0 [ 425.492169][T28982] total_rss 0 [ 425.496078][T28982] total_shmem 0 [ 425.500149][T28982] total_mapped_file 0 [ 425.504408][T28982] total_dirty 0 [ 425.529394][T28982] total_writeback 0 [ 425.533705][T28982] total_workingset_refault_anon 99 [ 425.539435][T28982] total_workingset_refault_file 0 [ 425.545385][T28982] total_swap 12042240 [ 425.549705][T28982] total_swapcached 18329600 [ 425.557727][T28982] total_pgpgin 116281 [ 425.562364][T28982] total_pgpgout 116279 [ 425.566536][T28982] total_pgfault 148307 [ 425.571756][T28982] total_pgmajfault 61 [ 425.596396][T28982] total_inactive_anon 0 [ 425.601577][T28982] total_active_anon 0 [ 425.606269][T28982] total_inactive_file 0 [ 425.610731][T28982] total_active_file 8192 [ 425.615081][T28982] total_unevictable 0 [ 425.619128][T28982] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.11019,pid=31321,uid=0 [ 425.645428][T31393] loop3: detected capacity change from 0 to 2048 [ 425.670522][T28982] Memory cgroup out of memory: Killed process 31321 (syz.4.11019) total-vm:96208kB, anon-rss:1228kB, file-rss:22348kB, shmem-rss:0kB, UID:0 pgtables:152kB oom_score_adj:1000 [ 425.706079][T31393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 425.718574][T31393] ext4 filesystem being mounted at /311/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.242268][ T28] audit: type=1326 audit(2001573070.149:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31434 comm="syz.0.11066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 426.321488][ T28] audit: type=1326 audit(2001573070.149:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31434 comm="syz.0.11066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 426.399763][ T28] audit: type=1326 audit(2001573070.149:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31434 comm="syz.0.11066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 426.469843][ T28] audit: type=1326 audit(2001573070.149:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31434 comm="syz.0.11066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 426.508520][T31442] random: crng reseeded on system resumption [ 426.520888][ T28] audit: type=1326 audit(2001573070.179:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31434 comm="syz.0.11066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 426.533216][ T38] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:2: bg 0: block 345: padding at end of block bitmap is not set [ 426.581637][ T28] audit: type=1326 audit(2001573070.179:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31434 comm="syz.0.11066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 426.606756][ T28] audit: type=1326 audit(2001573070.179:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31434 comm="syz.0.11066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 426.641264][ T28] audit: type=1326 audit(2001573070.179:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31434 comm="syz.0.11066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 426.675947][ T38] EXT4-fs (loop3): Remounting filesystem read-only [ 426.768983][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.002723][T31469] bond0: option arp_validate: invalid value (18446744072759227714) [ 427.440108][T31493] block device autoloading is deprecated and will be removed. [ 427.543155][T31500] netlink: 'syz.4.11093': attribute type 4 has an invalid length. [ 427.656824][T31512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11096'. [ 427.688252][T31512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11096'. [ 427.743082][T31520] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11099'. [ 427.781403][T31520] netlink: 'syz.6.11099': attribute type 30 has an invalid length. [ 427.821007][T31528] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11099'. [ 427.823263][ T38] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.836020][T31528] netlink: 'syz.6.11099': attribute type 30 has an invalid length. [ 427.841372][ T38] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.853451][T31530] sctp: [Deprecated]: syz.5.11104 (pid 31530) Use of int in maxseg socket option. [ 427.853451][T31530] Use struct sctp_assoc_value instead [ 427.874692][ T38] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.888411][ T38] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 427.944855][T31534] netlink: 'syz.5.11106': attribute type 6 has an invalid length. [ 427.956107][ T883] hid_parser_main: 24 callbacks suppressed [ 427.956142][ T883] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 427.981766][ T883] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 428.667623][ T3392] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 428.698481][T31588] 9pnet: p9_errstr2errno: server reported unknown error 00000 [ 428.717568][ T3392] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 429.148363][T31625] loop0: detected capacity change from 0 to 128 [ 429.760582][T31664] loop0: detected capacity change from 0 to 2048 [ 429.800866][T31664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 429.827434][T31664] ext4 filesystem being mounted at /526/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 429.933249][T31675] tipc: Started in network mode [ 429.952861][T31675] tipc: Node identity ac14140f, cluster identity 4711 [ 429.973873][T31675] tipc: Enabled bearer , priority 10 [ 430.424722][ T12] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 345: padding at end of block bitmap is not set [ 430.440832][ T12] EXT4-fs (loop0): Remounting filesystem read-only [ 430.489040][T24681] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.833354][T31720] loop4: detected capacity change from 0 to 128 [ 430.843578][T31720] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.859201][T31720] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 430.920799][T28982] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.094902][T31739] loop4: detected capacity change from 0 to 2048 [ 431.102466][ T883] tipc: Node number set to 2886997007 [ 431.180507][T31739] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.203497][T31739] ext4 filesystem being mounted at /235/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.241862][T31757] lo: entered allmulticast mode [ 431.279985][T31757] lo: left allmulticast mode [ 431.411262][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 431.411280][ T28] audit: type=1326 audit(2001573075.309:2184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31770 comm="syz.5.11205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 431.446594][ T28] audit: type=1326 audit(2001573075.309:2185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31770 comm="syz.5.11205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 431.474315][ T28] audit: type=1326 audit(2001573075.319:2186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31770 comm="syz.5.11205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 431.498321][ T28] audit: type=1326 audit(2001573075.319:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31770 comm="syz.5.11205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 431.522367][ T28] audit: type=1326 audit(2001573075.319:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31770 comm="syz.5.11205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 431.546393][ T28] audit: type=1326 audit(2001573075.349:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31770 comm="syz.5.11205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 431.571426][ T28] audit: type=1326 audit(2001573075.349:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31770 comm="syz.5.11205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 431.613914][T31779] loop3: detected capacity change from 0 to 512 [ 431.620450][ T28] audit: type=1326 audit(2001573075.349:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31770 comm="syz.5.11205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 431.697334][T31779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.715562][ T28] audit: type=1326 audit(2001573075.349:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31770 comm="syz.5.11205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 431.739805][ T28] audit: type=1326 audit(2001573075.349:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31770 comm="syz.5.11205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 431.769745][T31779] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 431.897849][T31800] loop0: detected capacity change from 0 to 256 [ 431.991319][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.007455][ T2140] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 345: padding at end of block bitmap is not set [ 432.035420][T31806] team0: Port device syz_tun added [ 432.052628][ T2140] EXT4-fs (loop4): Remounting filesystem read-only [ 432.063675][T31806] team0: Port device syz_tun removed [ 432.092800][T31806] bridge_slave_1: left allmulticast mode [ 432.098557][T31806] bridge_slave_1: left promiscuous mode [ 432.105685][T31806] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.129996][T31806] team0: Port device team_slave_0 removed [ 432.140438][T31806] team0: Port device team_slave_1 removed [ 432.150204][T31806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.159796][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.169686][T31806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.177535][T31806] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 432.207826][T31814] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 432.223130][T31814] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 432.301541][T31827] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11231'. [ 432.601180][T31853] netlink: 'syz.4.11243': attribute type 6 has an invalid length. [ 432.897267][T31874] delete_channel: no stack [ 433.009282][T31889] loop7: detected capacity change from 0 to 7 [ 433.077920][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800800 phys_seg 1 prio class 2 [ 433.088037][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 433.172375][T31910] all (unregistering): Released all slaves [ 433.210351][T31914] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11270'. [ 433.220015][T31919] loop4: detected capacity change from 0 to 2048 [ 433.231304][T31920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11270'. [ 433.249208][T31919] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.261580][T31920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11270'. [ 433.274359][T31920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11270'. [ 433.285447][T31920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11270'. [ 433.296456][T31920] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11270'. [ 433.307093][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.518737][T31942] loop0: detected capacity change from 0 to 8192 [ 433.554726][T31942] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 433.573781][T31942] FAT-fs (loop0): Filesystem has been set read-only [ 434.051506][T31991] loop3: detected capacity change from 0 to 512 [ 434.058192][T31991] EXT4-fs: Ignoring removed nobh option [ 434.065135][T31991] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 434.076859][T31991] EXT4-fs (loop3): 1 truncate cleaned up [ 434.083349][T31991] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.099809][T31991] EXT4-fs (loop3): shut down requested (1) [ 434.116118][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.191048][T31998] loop0: detected capacity change from 0 to 2048 [ 434.246523][T32009] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11310'. [ 434.369729][T32021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11316'. [ 434.574323][T32031] loop3: detected capacity change from 0 to 1024 [ 434.616314][T32031] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 434.634807][T32031] System zones: 0-1, 3-36 [ 434.654529][T32031] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.11320: bad orphan inode 134217728 [ 434.671281][T32031] loop3: lost filesystem error report for type 5 error -117 [ 434.671804][T32031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.725108][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.837540][T32037] team0: Port device syz_tun added [ 434.897139][T32037] team0: Port device syz_tun removed [ 434.935434][T32037] bridge_slave_0: left allmulticast mode [ 434.961627][T32037] bridge_slave_0: left promiscuous mode [ 434.977746][T32037] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.999659][T32037] bridge_slave_1: left allmulticast mode [ 435.018332][T32037] bridge_slave_1: left promiscuous mode [ 435.031674][T32037] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.052921][T32037] bond0: (slave bond_slave_0): Releasing backup interface [ 435.083742][T32037] bond0: (slave bond_slave_1): Releasing backup interface [ 435.120944][T32037] team0: Port device team_slave_0 removed [ 435.140968][T32037] team0: Port device team_slave_1 removed [ 435.158198][T32037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 435.189264][T32037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.221516][T32037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 435.229015][T32037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.271843][T32037] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 435.516317][T32056] loop3: detected capacity change from 0 to 128 [ 435.537888][T32056] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 435.567860][T32056] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 435.583328][T32025] loop4: detected capacity change from 0 to 1024 [ 435.648466][ T2140] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 435.766789][T32074] loop4: detected capacity change from 0 to 1024 [ 435.785330][T32074] ext4: Bad value for 'journal' [ 435.868252][T32083] netlink: 104 bytes leftover after parsing attributes in process `syz.3.11343'. [ 435.958724][T32092] loop3: detected capacity change from 0 to 8192 [ 435.991292][T32092] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 2068) [ 436.000266][T32092] FAT-fs (loop3): Filesystem has been set read-only [ 436.082104][T32114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.093136][T32114] netlink: 'syz.5.11355': attribute type 10 has an invalid length. [ 436.284177][T32134] netlink: 'syz.5.11364': attribute type 9 has an invalid length. [ 436.673762][T32147] netlink: 68 bytes leftover after parsing attributes in process `syz.4.11369'. [ 436.818478][T32158] loop0: detected capacity change from 0 to 8192 [ 437.214423][T32180] geneve2: entered promiscuous mode [ 437.267576][T32184] netlink: 'syz.6.11384': attribute type 1 has an invalid length. [ 438.013298][T32238] netlink: 'syz.0.11409': attribute type 2 has an invalid length. [ 438.094930][T32247] tun0: tun_chr_ioctl cmd 1074025675 [ 438.109192][T32247] tun0: persist enabled [ 438.133015][T32247] tun0: tun_chr_ioctl cmd 1074025675 [ 438.138567][T32247] tun0: persist disabled [ 438.213227][T32252] loop0: detected capacity change from 0 to 512 [ 438.226688][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 438.226705][ T28] audit: type=1400 audit(2001573082.130:2213): avc: denied { listen } for pid=32249 comm="syz.5.11414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 438.300218][T32252] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.344041][T32252] ext4 filesystem being mounted at /573/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 438.458064][T24681] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.600564][T32278] netlink: 'syz.6.11425': attribute type 29 has an invalid length. [ 438.648344][T32278] netlink: 'syz.6.11425': attribute type 29 has an invalid length. [ 438.680412][T32278] __nla_validate_parse: 9 callbacks suppressed [ 438.680427][T32278] netlink: 500 bytes leftover after parsing attributes in process `syz.6.11425'. [ 438.950693][ T28] audit: type=1326 audit(2001573082.860:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32300 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 438.977475][ T28] audit: type=1326 audit(2001573082.860:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32300 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 439.002040][ T28] audit: type=1326 audit(2001573082.880:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32300 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 439.078720][ T28] audit: type=1326 audit(2001573082.880:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32300 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 439.142907][ T28] audit: type=1326 audit(2001573082.880:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32300 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 439.191643][ T28] audit: type=1326 audit(2001573082.880:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32300 comm="syz.0.11435" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x0 [ 439.240926][ T28] audit: type=1326 audit(2001573082.930:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32300 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 439.289228][ T28] audit: type=1326 audit(2001573082.930:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32300 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 439.338358][ T28] audit: type=1326 audit(2001573082.980:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32300 comm="syz.0.11435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff93838c629 code=0x7ffc0000 [ 439.955649][T32335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11448'. [ 439.969745][T32335] macsec1: entered promiscuous mode [ 439.975170][T32335] hsr0: entered promiscuous mode [ 439.980570][T32335] macsec1: entered allmulticast mode [ 439.985931][T32335] hsr0: entered allmulticast mode [ 439.991817][T32335] hsr_slave_0: entered allmulticast mode [ 439.997656][T32335] hsr_slave_1: entered allmulticast mode [ 440.004549][T32335] hsr0: left allmulticast mode [ 440.009678][T32335] hsr_slave_0: left allmulticast mode [ 440.015149][T32335] hsr_slave_1: left allmulticast mode [ 440.021416][T32335] hsr0: left promiscuous mode [ 440.379584][T32361] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 440.448202][T32369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11463'. [ 440.458462][T32369] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11463'. [ 440.490582][T32371] macvlan0: entered allmulticast mode [ 440.497323][T32371] macvlan0 (unregistering): left allmulticast mode [ 440.638273][T32378] SELinux: failed to load policy [ 440.874351][T32399] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿÿ [ 440.975303][T32416] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32416 comm=syz.5.11484 [ 440.995915][T32418] xt_hashlimit: size too large, truncated to 1048576 [ 442.109962][T32479] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11511'. [ 442.139613][T32479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11511'. [ 442.217103][T32490] loop0: detected capacity change from 0 to 1024 [ 442.234264][T32490] EXT4-fs: inline encryption not supported [ 442.249145][T32490] EXT4-fs: Ignoring removed bh option [ 442.286177][T32490] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.365295][T24681] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.413857][T32500] ip6erspan1: entered allmulticast mode [ 442.465830][T32504] xt_hashlimit: size too large, truncated to 1048576 [ 442.534040][T32497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.555581][T32497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.704368][T32517] loop0: detected capacity change from 0 to 512 [ 442.739321][T32517] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.11526: Directory hole found for htree index block 0 [ 442.770030][T32517] loop0: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 442.776496][T32517] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 442.785687][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 442.785710][ C1] EXT4-fs (loop0): initial error at time 2001573086: dx_probe:791: inode 2 [ 442.785745][ C1] EXT4-fs (loop0): last error at time 2001573086: dx_probe:791: inode 2 [ 442.818701][T32517] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.833086][T32517] EXT4-fs (loop0): shut down requested (1) [ 442.871602][T24681] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.000438][T32536] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 443.147241][T32548] loop3: detected capacity change from 0 to 512 [ 443.173160][T32548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.243395][T32548] ext4 filesystem being mounted at /406/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.435135][T32557] loop4: detected capacity change from 0 to 512 [ 443.455994][T32557] EXT4-fs: Ignoring removed nobh option [ 443.482650][T32557] EXT4-fs (loop4): orphan cleanup on readonly fs [ 443.492889][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.501914][T32557] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.11543: EA inode hash validation failed [ 443.517479][T32557] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 443.534545][T32557] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.11543: corrupted inode contents [ 443.551646][T32557] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 443.556655][T32557] EXT4-fs error (device loop4): ext4_dirty_inode:6450: inode #15: comm syz.4.11543: mark_inode_dirty error [ 443.566562][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 443.566585][ C1] EXT4-fs (loop4): initial error at time 2001573087: ext4_do_update_inode:5569: inode 15 [ 443.566637][ C1] EXT4-fs (loop4): last error at time 2001573087: ext4_do_update_inode:5569: inode 15 [ 443.624816][T32557] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 443.632327][T32557] EXT4-fs error (device loop4): ext4_do_update_inode:5569: inode #15: comm syz.4.11543: corrupted inode contents [ 443.696745][T32557] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 443.701541][T32557] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3001: inode #15: comm syz.4.11543: mark_inode_dirty error [ 443.731601][T32557] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 443.734127][T32557] EXT4-fs error (device loop4): ext4_xattr_delete_inode:3004: inode #15: comm syz.4.11543: mark inode dirty (error -117) [ 443.758457][T32557] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 443.779251][T32557] EXT4-fs warning (device loop4): ext4_evict_inode:275: xattr delete (err -117) [ 443.840571][T32557] EXT4-fs (loop4): 1 orphan inode deleted [ 443.867536][T32557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 443.989172][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.027482][T32590] loop0: detected capacity change from 0 to 512 [ 444.084563][T32590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.098087][T32594] loop3: detected capacity change from 0 to 1764 [ 444.122809][T32594] ISOFS: Unable to identify CD-ROM format. [ 444.142440][T32590] ext4 filesystem being mounted at /610/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 444.178258][T32609] loop4: detected capacity change from 0 to 128 [ 444.186151][T32609] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 444.203149][T32609] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 444.255876][T24681] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 444.273894][T24681] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 444.285540][ T83] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 444.295584][T24681] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 444.306655][T24681] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 444.343282][T24681] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 444.387791][T32623] team0: Port device vlan3 added [ 444.393764][T24681] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 444.419131][T24681] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 444.446287][T24681] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 444.469254][T24681] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 444.502255][T24681] EXT4-fs error (device loop0): ext4_empty_dir:3075: inode #12: comm syz-executor: invalid size [ 444.700545][T32642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11575'. [ 444.710377][T27935] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.722225][T32642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11575'. [ 444.741452][T32644] loop3: detected capacity change from 0 to 256 [ 444.750091][T32642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11575'. [ 444.825912][T32649] loop4: detected capacity change from 0 to 1024 [ 444.837864][T32653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11579'. [ 444.847492][T32649] EXT4-fs: Ignoring removed orlov option [ 444.853779][T32649] EXT4-fs: Ignoring removed nobh option [ 444.887188][T32649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.950990][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.293124][T32662] chnl_net:caif_netlink_parms(): no params data found [ 445.471374][T32683] loop3: detected capacity change from 0 to 512 [ 445.483418][T32662] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.507238][T32683] EXT4-fs: Ignoring removed nobh option [ 445.528415][T32662] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.528640][T32662] bridge_slave_0: entered allmulticast mode [ 445.529441][T32662] bridge_slave_0: entered promiscuous mode [ 445.578076][T32662] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.588657][T32683] EXT4-fs (loop3): orphan cleanup on readonly fs [ 445.610908][T32662] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.634149][T32662] bridge_slave_1: entered allmulticast mode [ 445.654152][T32662] bridge_slave_1: entered promiscuous mode [ 445.661478][T32683] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.11587: EA inode hash validation failed [ 445.719610][T32662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.734704][T32683] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.11587: corrupted inode contents [ 445.774302][T32662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.783828][T32683] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 445.784829][T32683] EXT4-fs error (device loop3): ext4_dirty_inode:6450: inode #15: comm syz.3.11587: mark_inode_dirty error [ 445.794469][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 445.794557][ C1] EXT4-fs (loop3): initial error at time 2001573089: ext4_do_update_inode:5569: inode 15 [ 445.794987][ C1] EXT4-fs (loop3): last error at time 2001573089: ext4_do_update_inode:5569: inode 15 [ 445.860671][T32662] team0: Port device team_slave_0 added [ 445.867620][T32662] team0: Port device team_slave_1 added [ 445.887296][T32683] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 445.898091][T32662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.914359][T32662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.943678][T32683] EXT4-fs error (device loop3): ext4_do_update_inode:5569: inode #15: comm syz.3.11587: corrupted inode contents [ 445.961104][T32683] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 445.961338][T32662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.984679][T32683] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3001: inode #15: comm syz.3.11587: mark_inode_dirty error [ 446.009482][T32662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.016513][T32662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.043274][T32683] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 446.046975][T32683] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3004: inode #15: comm syz.3.11587: mark inode dirty (error -117) [ 446.111322][T32662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.128906][T32683] EXT4-fs warning (device loop3): ext4_evict_inode:275: xattr delete (err -117) [ 446.159042][T32683] EXT4-fs (loop3): 1 orphan inode deleted [ 446.191673][T32662] hsr_slave_0: entered promiscuous mode [ 446.197869][T32662] hsr_slave_1: entered promiscuous mode [ 446.203923][T32683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 446.217356][T32662] debugfs: 'hsr0' already exists in 'hsr' [ 446.229872][T32662] Cannot create hsr debugfs directory [ 446.252664][T32721] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32721 comm=syz.4.11603 [ 446.296481][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.340375][ T28] kauditd_printk_skb: 404 callbacks suppressed [ 446.340393][ T28] audit: type=1400 audit(2001573090.250:2627): avc: denied { ioctl } for pid=32725 comm="syz.4.11606" path="socket:[106734]" dev="sockfs" ino=106734 ioctlcmd=0x8940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 446.682112][T32662] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 446.695521][ T301] xt_recent: hitcount (67108870) is larger than allowed maximum (65535) [ 446.714822][T32662] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 446.748542][T32662] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 446.772149][T32662] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 446.908925][T32662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.956454][T32662] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.993200][ T2140] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.000469][ T2140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.039873][ T2140] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.047012][ T2140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.078728][T32662] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 447.183886][ T357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 447.218214][T32662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.466553][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.562421][T32662] veth0_vlan: entered promiscuous mode [ 447.581419][T32662] veth1_vlan: entered promiscuous mode [ 447.638417][T32662] veth0_macvtap: entered promiscuous mode [ 447.681100][T32662] veth1_macvtap: entered promiscuous mode [ 447.704615][T32662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.718208][T32662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.766860][ T2140] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.796319][ T2140] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.810092][ T2140] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.830531][ T2140] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.513850][T12250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.670493][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.801645][ T517] io-wq is not configured for unbound workers [ 448.814770][ T520] set_capacity_and_notify: 1 callbacks suppressed [ 448.814791][ T520] loop8: detected capacity change from 0 to 128 [ 448.834051][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 448.873401][ T520] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 448.911897][ T520] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 448.965414][T32662] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 448.991057][T12240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.033035][T12240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.205284][ T553] loop4: detected capacity change from 0 to 512 [ 449.249897][ T553] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 449.282950][ T553] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 449.296417][ T553] EXT4-fs (loop4): 1 truncate cleaned up [ 449.303175][ T553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.397181][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.440998][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 449.528689][ T575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.589850][ T575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.599800][ T575] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 449.635405][ T581] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11674'. [ 449.868913][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.155539][ T635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.700334][ T677] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11698'. [ 450.728042][ T677] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11698'. [ 450.829145][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 450.909320][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.223604][ T691] netlink: 56 bytes leftover after parsing attributes in process `syz.3.11706'. [ 451.293789][ T697] loop3: detected capacity change from 0 to 256 [ 451.340251][ T697] FAT-fs (loop3): bogus number of FAT sectors [ 451.356545][ T697] FAT-fs (loop3): Can't find a valid FAT filesystem [ 451.372356][ T28] audit: type=1400 audit(2001573095.281:2628): avc: denied { associate } for pid=698 comm="syz.4.11708" name="aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 451.432593][ T701] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11709'. [ 451.447672][ T701] bond1: Invalid ad_actor_system MAC address. [ 451.453969][ T701] bond1: option ad_actor_system: invalid value (4294967295) [ 451.484986][ T701] bond1 (unregistering): Released all slaves [ 451.604907][ T694] loop8: detected capacity change from 0 to 512 [ 451.627725][ T694] EXT4-fs: Ignoring removed nobh option [ 451.657265][ T694] EXT4-fs (loop8): orphan cleanup on readonly fs [ 451.681925][ T694] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.11705: EA inode hash validation failed [ 451.695436][ T694] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 451.715121][ T694] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.11705: corrupted inode contents [ 451.729694][ T694] fserror_report: 1 callbacks suppressed [ 451.729796][ T694] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 451.738497][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 451.756416][ C1] EXT4-fs (loop8): initial error at time 2001573095: ext4_do_update_inode:5569: inode 15 [ 451.768685][ C1] EXT4-fs (loop8): last error at time 2001573095: ext4_do_update_inode:5569: inode 15 [ 451.785786][ T694] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #15: comm syz.8.11705: mark_inode_dirty error [ 451.799829][ T694] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 451.803431][ T694] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.11705: corrupted inode contents [ 451.829905][ T694] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 451.849881][ T694] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.11705: mark_inode_dirty error [ 451.890437][ T694] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 451.895154][ T694] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.11705: mark inode dirty (error -117) [ 451.975395][ T694] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 451.980754][ T694] EXT4-fs warning (device loop8): ext4_evict_inode:275: xattr delete (err -117) [ 452.080573][ T694] EXT4-fs (loop8): 1 orphan inode deleted [ 452.110641][ T694] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 452.147637][ T28] audit: type=1326 audit(2001573096.051:2629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=747 comm="syz.5.11731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 452.178042][ T28] audit: type=1326 audit(2001573096.051:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=747 comm="syz.5.11731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 452.216653][ T28] audit: type=1326 audit(2001573096.051:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=747 comm="syz.5.11731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 452.246291][T32662] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 452.256290][ T28] audit: type=1326 audit(2001573096.051:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=747 comm="syz.5.11731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 452.290702][ T28] audit: type=1326 audit(2001573096.051:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=747 comm="syz.5.11731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 452.328790][ T752] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11734'. [ 452.337972][ T28] audit: type=1326 audit(2001573096.051:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=747 comm="syz.5.11731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 452.364991][ T28] audit: type=1326 audit(2001573096.051:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=747 comm="syz.5.11731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 452.430628][ T28] audit: type=1326 audit(2001573096.051:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=747 comm="syz.5.11731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 452.463474][ T28] audit: type=1326 audit(2001573096.051:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=747 comm="syz.5.11731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff14644c629 code=0x7ffc0000 [ 452.490411][ T766] loop3: detected capacity change from 0 to 256 [ 452.503826][ T766] loop3: detected capacity change from 0 to 256 [ 452.589259][ T777] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11744'. [ 452.625689][ T777] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11744'. [ 452.657481][ T782] netlink: 52 bytes leftover after parsing attributes in process `syz.8.11744'. [ 452.681466][ T777] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11744'. [ 452.709147][ T791] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 452.721182][ T791] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 453.034913][ T821] loop4: detected capacity change from 0 to 1024 [ 453.042338][ T821] EXT4-fs: Ignoring removed nomblk_io_submit option [ 453.050231][ T821] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 453.060304][ T821] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 453.069079][ T821] System zones: 0-1, 3-36 [ 453.079005][ T821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.123185][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.217470][ T838] vlan2: entered allmulticast mode [ 453.222738][ T838] geneve0: entered allmulticast mode [ 453.229021][ T838] bridge0: port 3(vlan2) entered blocking state [ 453.235529][ T838] bridge0: port 3(vlan2) entered disabled state [ 453.242936][ T838] vlan2: entered promiscuous mode [ 453.247994][ T838] geneve0: entered promiscuous mode [ 453.283316][ T843] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11772'. [ 453.604743][ T862] batadv_slave_1: entered promiscuous mode [ 453.631184][ T861] batadv_slave_1: left promiscuous mode [ 453.778377][ T868] loop8: detected capacity change from 0 to 8192 [ 453.784082][ T872] bond3: Invalid ad_actor_system MAC address. [ 453.798934][ T883] net_ratelimit: 6 callbacks suppressed [ 453.798977][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 453.804282][ T872] bond3: option ad_actor_system: invalid value (4294967295) [ 453.849589][ T872] bond3 (unregistering): Released all slaves [ 453.936744][ T888] loop3: detected capacity change from 0 to 1024 [ 453.958818][ T888] EXT4-fs: Ignoring removed orlov option [ 454.010471][ T888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 454.109122][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.109425][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.364969][ T915] loop4: detected capacity change from 0 to 512 [ 454.394161][ T915] EXT4-fs: Ignoring removed bh option [ 454.418444][ T915] EXT4-fs: inline encryption not supported [ 454.431039][ T9001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.483791][ T915] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 454.563890][ T915] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1142: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 454.615160][ T915] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11801: bg 0: block 248: padding at end of block bitmap is not set [ 454.695373][ T915] loop4: lost filesystem error report for type 5 error -117 [ 454.695638][ T915] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.11801: Failed to acquire dquot type 1 [ 454.703237][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 454.703274][ C1] EXT4-fs (loop4): last error at time 2001573098: ext4_validate_block_bitmap:441 [ 454.785147][ T915] loop4: lost filesystem error report for type 5 error -117 [ 454.798318][ T915] EXT4-fs (loop4): 1 truncate cleaned up [ 454.812090][ T915] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 454.884155][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 454.898356][ T83] EXT4-fs error (device loop4): ext4_release_dquot:7039: comm kworker/u8:5: Failed to release dquot type 1 [ 454.912903][ T925] loop3: detected capacity change from 0 to 1024 [ 454.919584][ T83] loop4: lost filesystem error report for type 5 error -117 [ 454.921954][ T925] ext4: Unknown parameter 'nouser_xattr' [ 455.041934][ T935] loop8: detected capacity change from 0 to 1024 [ 455.058469][ T935] EXT4-fs: Ignoring removed orlov option [ 455.094490][ T935] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.110078][ T942] loop4: detected capacity change from 0 to 1024 [ 455.136002][ T942] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 455.163339][ T942] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 455.173448][ T942] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 455.185484][ T942] EXT4-fs error (device loop4): ext4_get_journal_inode:5865: inode #5: comm syz.4.11811: unexpected bad inode w/o EXT4_IGET_BAD [ 455.199230][ T942] loop4: lost file I/O error report for ino 5 type 5 pos 0x0 len 0x0 error -117 [ 455.199671][ T942] EXT4-fs (loop4): no journal found [ 455.208749][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 455.208768][ C1] EXT4-fs (loop4): initial error at time 2001573099: ext4_get_journal_inode:5865: inode 5 [ 455.208816][ C1] EXT4-fs (loop4): last error at time 2001573099: ext4_get_journal_inode:5865: inode 5 [ 455.226586][ T949] loop3: detected capacity change from 0 to 512 [ 455.233484][ T942] EXT4-fs (loop4): can't get journal size [ 455.268836][ T949] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 455.300219][ T949] EXT4-fs (loop3): 1 truncate cleaned up [ 455.313030][ T942] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 455.317074][ T949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.388984][T28982] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.423781][T32662] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.458638][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.471027][ T9001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.470476][ T1021] loop8: detected capacity change from 0 to 512 [ 456.494619][ T1021] EXT4-fs: Ignoring removed nobh option [ 456.515815][ T9001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.539669][ T1021] EXT4-fs (loop8): orphan cleanup on readonly fs [ 456.563957][ T1021] EXT4-fs warning (device loop8): ext4_xattr_inode_get:560: inode #11: comm syz.8.11840: EA inode hash validation failed [ 456.585671][ T1021] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.11840: corrupted inode contents [ 456.610040][ T1021] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 456.617623][ T1021] EXT4-fs error (device loop8): ext4_dirty_inode:6450: inode #15: comm syz.8.11840: mark_inode_dirty error [ 456.618349][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 456.618597][ C1] EXT4-fs (loop8): initial error at time 2001573100: ext4_do_update_inode:5569: inode 15 [ 456.619267][ C1] EXT4-fs (loop8): last error at time 2001573100: ext4_do_update_inode:5569: inode 15 [ 456.675298][ T1021] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 456.688693][ T1021] EXT4-fs error (device loop8): ext4_do_update_inode:5569: inode #15: comm syz.8.11840: corrupted inode contents [ 456.748477][ T1021] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 456.750731][ T1021] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3001: inode #15: comm syz.8.11840: mark_inode_dirty error [ 456.798376][ T1021] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 456.800066][ T1021] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3004: inode #15: comm syz.8.11840: mark inode dirty (error -117) [ 456.825340][ T1021] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 456.834668][ T1021] EXT4-fs warning (device loop8): ext4_evict_inode:275: xattr delete (err -117) [ 456.856720][ T1021] EXT4-fs (loop8): 1 orphan inode deleted [ 456.880759][ T1021] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 456.915113][ T883] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.929544][T32662] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.153454][ T1093] loop3: detected capacity change from 0 to 512 [ 457.208138][ T1093] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.236520][ T1093] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.392497][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.561988][ T3401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.931792][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.940098][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.973099][ T1155] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 458.311081][ T1186] __nla_validate_parse: 4 callbacks suppressed [ 458.311098][ T1186] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11912'. [ 458.396387][ T1189] loop8: detected capacity change from 0 to 1024 [ 458.438992][ T1189] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 458.464867][ T1189] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.523974][T32662] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 458.579782][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.605125][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11916'. [ 458.672798][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.732493][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.782232][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.946058][ T1216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11926'. [ 458.964005][ T61] vlan2: left promiscuous mode [ 458.971432][ T61] geneve0: left promiscuous mode [ 458.976921][ T61] bridge0: port 3(vlan2) entered disabled state [ 458.987616][ T61] bridge_slave_1: left allmulticast mode [ 458.993627][ T61] bridge_slave_1: left promiscuous mode [ 458.999804][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.008374][ T61] bridge_slave_0: left allmulticast mode [ 459.014698][ T61] bridge_slave_0: left promiscuous mode [ 459.021100][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.046437][ T1225] loop3: detected capacity change from 0 to 1024 [ 459.062426][ T1225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 459.083039][ T1225] EXT4-fs error (device loop3): ext4_xattr_inode_iget:441: comm syz.3.11928: inode #778331508: comm syz.3.11928: iget: illegal inode # [ 459.104314][ T1225] EXT4-fs error (device loop3): ext4_xattr_inode_iget:446: comm syz.3.11928: error while reading EA inode 778331508 err=-117 [ 459.132808][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.200193][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.211099][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.221029][ T61] bond0 (unregistering): Released all slaves [ 459.245611][ T1238] netlink: 48 bytes leftover after parsing attributes in process `syz.3.11931'. [ 459.409047][ T61] tipc: Disabling bearer [ 459.414640][ T61] tipc: Left network mode [ 459.457368][ T61] hsr_slave_0: left promiscuous mode [ 459.511032][ T61] hsr_slave_1: left promiscuous mode [ 459.521315][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.538768][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.546453][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.553973][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.581151][ T61] veth1_macvtap: left promiscuous mode [ 459.586751][ T61] veth0_macvtap: left promiscuous mode [ 459.603723][ T61] veth1_vlan: left promiscuous mode [ 459.619794][ T61] veth0_vlan: left promiscuous mode [ 459.675641][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 459.675662][ T28] audit: type=1400 audit(2001573359.571:2653): avc: denied { read open } for pid=1291 comm="syz.6.11942" path="/" dev="configfs" ino=42 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 459.880087][ T61] team0 (unregistering): Port device team_slave_1 removed [ 459.910145][ T61] team0 (unregistering): Port device team_slave_0 removed [ 459.982072][ T1196] chnl_net:caif_netlink_parms(): no params data found [ 460.166326][ T1196] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.178671][ T1196] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.194068][ T1196] bridge_slave_0: entered allmulticast mode [ 460.203814][ T1196] bridge_slave_0: entered promiscuous mode [ 460.219171][ T1219] chnl_net:caif_netlink_parms(): no params data found [ 460.233387][ T1196] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.242729][ T1196] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.250706][ T1196] bridge_slave_1: entered allmulticast mode [ 460.257517][ T1196] bridge_slave_1: entered promiscuous mode [ 460.314446][ T1196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.330093][ T61] IPVS: stop unused estimator thread 0... [ 460.331928][ T1196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.383288][ T1196] team0: Port device team_slave_0 added [ 460.390554][ T1196] team0: Port device team_slave_1 added [ 460.402945][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.410575][ T1219] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.418178][ T1219] bridge_slave_0: entered allmulticast mode [ 460.424808][ T1219] bridge_slave_0: entered promiscuous mode [ 460.440801][ T1219] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.448694][ T1219] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.456038][ T1219] bridge_slave_1: entered allmulticast mode [ 460.463842][ T1219] bridge_slave_1: entered promiscuous mode [ 460.485255][ T61] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.504123][ T1196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.512497][ T1196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.539499][ T1196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.552827][ T1219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.577740][ T1219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.601743][ T1196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.609203][ T1196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.635955][ T1196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.667292][ T61] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.700676][ T1219] team0: Port device team_slave_0 added [ 460.724049][ T1219] team0: Port device team_slave_1 added [ 460.773895][ T61] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.798936][ T1196] hsr_slave_0: entered promiscuous mode [ 460.839203][ T1196] hsr_slave_1: entered promiscuous mode [ 460.845435][ T1196] debugfs: 'hsr0' already exists in 'hsr' [ 460.851343][ T1196] Cannot create hsr debugfs directory [ 460.857427][ T1219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.867245][ T1219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.914547][ T1219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.926550][ T1219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.933714][ T1219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 460.961076][ T1219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.976167][ T61] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.014901][ T1219] hsr_slave_0: entered promiscuous mode [ 461.022491][ T1219] hsr_slave_1: entered promiscuous mode [ 461.029002][ T1219] debugfs: 'hsr0' already exists in 'hsr' [ 461.034739][ T1219] Cannot create hsr debugfs directory [ 461.162374][ T61] bridge_slave_1: left allmulticast mode [ 461.169005][ T61] bridge_slave_1: left promiscuous mode [ 461.174761][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.182880][ T61] bridge_slave_0: left allmulticast mode [ 461.188747][ T61] bridge_slave_0: left promiscuous mode [ 461.194405][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.290292][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.300176][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.310573][ T61] bond0 (unregistering): Released all slaves [ 461.362957][ T61] hsr_slave_0: left promiscuous mode [ 461.369041][ T61] hsr_slave_1: left promiscuous mode [ 461.374734][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.382399][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.390351][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.397854][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.409121][ T61] veth1_macvtap: left promiscuous mode [ 461.414624][ T61] veth0_macvtap: left promiscuous mode [ 461.420946][ T61] veth1_vlan: left promiscuous mode [ 461.426242][ T61] veth0_vlan: left promiscuous mode [ 461.500724][ T61] team0 (unregistering): Port device team_slave_1 removed [ 461.510556][ T61] team0 (unregistering): Port device team_slave_0 removed [ 462.700427][ T1196] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 462.718564][ T1196] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 462.727717][ T1196] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 462.739691][ T1196] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 462.762953][ T1219] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 462.771559][ T1219] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 462.781004][ T1219] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 462.799003][ T1219] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 462.842805][ T1196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.865858][ T1196] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.882551][ T2140] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.889747][ T2140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.911110][ T2140] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.918229][ T2140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.940909][ T1219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.966343][ T1219] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.976324][T12240] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.983511][T12240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.010395][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.017614][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.036615][ T1196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.112590][ T1219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.219810][ T1219] veth0_vlan: entered promiscuous mode [ 463.235205][ T1219] veth1_vlan: entered promiscuous mode [ 463.265782][ T1196] veth0_vlan: entered promiscuous mode [ 463.273005][ T1219] veth0_macvtap: entered promiscuous mode [ 463.284045][ T1196] veth1_vlan: entered promiscuous mode [ 463.292844][ T1219] veth1_macvtap: entered promiscuous mode [ 463.315873][ T1196] veth0_macvtap: entered promiscuous mode [ 463.325440][ T1219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.336386][ T1196] veth1_macvtap: entered promiscuous mode [ 463.346740][ T1219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.362108][ T1196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.375465][T12250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.388435][T12250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.401130][ T1196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.408903][T12250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.418106][T12250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.431786][T12240] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.441716][T12240] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.452548][T12240] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.464720][T12240] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.559687][ T1662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11925'. [ 463.569537][ T1663] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11972'. [ 464.118203][ T1727] loop3: detected capacity change from 0 to 1024 [ 464.133040][ T1727] EXT4-fs: Ignoring removed orlov option [ 464.216226][ T1727] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.291358][T26429] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.052441][ T1834] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12006'. [ 465.180051][ T28] audit: type=1326 audit(2001573365.081:2654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1744 comm="syz.3.11986" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff717fdc629 code=0x7fc00000 [ 465.297643][ T1880] netlink: 104 bytes leftover after parsing attributes in process `syz.5.12016'. [ 465.466853][ T1900] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12022'. [ 465.493264][ T1904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12021'. [ 465.518734][ T1900] netlink: 24 bytes leftover after parsing attributes in process `syz.6.12022'. [ 465.871199][ T1939] net_ratelimit: 3 callbacks suppressed [ 465.871220][ T1939] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 465.896653][ T1941] netlink: 'syz.1.12035': attribute type 8 has an invalid length. [ 465.917842][ T1941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12035'. [ 465.944314][ T1941] bond0: entered promiscuous mode [ 465.966776][ T1941] bond_slave_0: entered promiscuous mode [ 465.985432][ T1941] bond_slave_1: entered promiscuous mode [ 466.008111][ T1941] gretap0: entered promiscuous mode [ 466.026544][ T1941] hsr1: entered promiscuous mode [ 467.183811][ T28] audit: type=1400 audit(2001573367.081:2655): avc: denied { prog_load } for pid=2033 comm="syz.9.12048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 467.224817][ T2039] loop1: detected capacity change from 0 to 512 [ 467.258137][ T28] audit: type=1400 audit(2001573367.111:2656): avc: denied { prog_run } for pid=2033 comm="syz.9.12048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 467.266148][ T2045] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2045 comm=syz.9.12050 [ 467.311386][ T2039] ieee802154 phy0 wpan0: encryption failed: -22 [ 467.904045][ T2101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12070'. [ 467.923862][ T2101] netlink: 'syz.3.12070': attribute type 7 has an invalid length. [ 467.953549][ T2101] netlink: 'syz.3.12070': attribute type 8 has an invalid length. [ 467.961883][ T2101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12070'. [ 468.519136][ T28] audit: type=1400 audit(2001573368.421:2657): avc: denied { mounton } for pid=2143 comm="syz.9.12086" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 468.600300][ T28] audit: type=1400 audit(2001573368.461:2658): avc: denied { map_create } for pid=2147 comm="syz.9.12087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 468.688057][ T28] audit: type=1400 audit(2001573368.461:2659): avc: denied { map_read map_write } for pid=2147 comm="syz.9.12087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 468.837027][ T2161] netlink: 'syz.3.12092': attribute type 1 has an invalid length. [ 468.913931][ T3401] Process accounting resumed [ 469.748247][ T2226] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12114'. [ 470.184861][ T28] audit: type=1400 audit(2001573370.081:2660): avc: denied { node_bind } for pid=2249 comm="syz.3.12126" saddr=::ffff:172.20.20.187 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 470.374282][ T2267] netlink: 'syz.9.12134': attribute type 5 has an invalid length. [ 470.476875][ T28] audit: type=1400 audit(2001573370.371:2661): avc: denied { read open } for pid=2274 comm="syz.3.12137" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 470.539132][ T2267] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12134'. [ 470.610239][ T2271] loop1: detected capacity change from 0 to 8192 [ 470.618069][ T2271] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 470.683118][ T2289] loop9: detected capacity change from 0 to 128 [ 470.732082][ T1219] FAT-fs (loop1): error, fat_free_clusters: deleting FAT entry beyond EOF [ 470.744664][ T2289] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 470.768419][ T1219] FAT-fs (loop1): Filesystem has been set read-only [ 470.820246][ T2289] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 471.058665][ T28] audit: type=1400 audit(2001573370.941:2662): avc: denied { ioctl } for pid=2287 comm="syz.9.12142" path="/24/mnt/file1" dev="loop9" ino=12 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 471.322844][ T38] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.375794][ T1196] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 471.453120][ T38] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.521552][ C1] ================================================================== [ 471.529698][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 471.536922][ C1] [ 471.539257][ C1] read-write to 0xffff88810016dec0 of 4 bytes by interrupt on cpu 0: [ 471.547345][ C1] can_can_gw_rcv+0x863/0x870 [ 471.552061][ C1] can_rcv_filter+0xc7/0x4f0 [ 471.556691][ C1] can_receive+0x13e/0x190 [ 471.561130][ C1] can_rcv+0x17d/0x1f0 [ 471.565229][ C1] process_backlog+0x363/0x670 [ 471.570014][ C1] __napi_poll+0x61/0x330 [ 471.574457][ C1] net_rx_action+0x452/0x930 [ 471.579076][ C1] handle_softirqs+0xb9/0x2a0 [ 471.583871][ C1] __irq_exit_rcu+0x39/0xc0 [ 471.588386][ C1] sysvec_apic_timer_interrupt+0x74/0x80 [ 471.594040][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 471.600029][ C1] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 471.605674][ C1] __mod_timer+0x6fc/0x9d0 [ 471.610100][ C1] add_timer+0x3c/0x60 [ 471.614182][ C1] schedule_timeout+0xc5/0x180 [ 471.618954][ C1] ip_vs_estimation_kthread+0x1580/0x19e0 [ 471.624702][ C1] kthread+0x22a/0x280 [ 471.628776][ C1] ret_from_fork+0x150/0x360 [ 471.633414][ C1] ret_from_fork_asm+0x1a/0x30 [ 471.638195][ C1] [ 471.640571][ C1] read-write to 0xffff88810016dec0 of 4 bytes by interrupt on cpu 1: [ 471.648647][ C1] can_can_gw_rcv+0x863/0x870 [ 471.653344][ C1] can_rcv_filter+0xc7/0x4f0 [ 471.657945][ C1] can_receive+0x13e/0x190 [ 471.662370][ C1] can_rcv+0x17d/0x1f0 [ 471.666450][ C1] process_backlog+0x363/0x670 [ 471.671228][ C1] __napi_poll+0x61/0x330 [ 471.675573][ C1] net_rx_action+0x452/0x930 [ 471.680185][ C1] handle_softirqs+0xb9/0x2a0 [ 471.684884][ C1] run_ksoftirqd+0x1c/0x30 [ 471.689314][ C1] smpboot_thread_fn+0x32a/0x510 [ 471.694271][ C1] kthread+0x22a/0x280 [ 471.698348][ C1] ret_from_fork+0x150/0x360 [ 471.702971][ C1] ret_from_fork_asm+0x1a/0x30 [ 471.707763][ C1] [ 471.710089][ C1] value changed: 0x0000832e -> 0x0000832f [ 471.715806][ C1] [ 471.718136][ C1] Reported by Kernel Concurrency Sanitizer on: [ 471.724302][ C1] CPU: 1 UID: 0 PID: 22 Comm: ksoftirqd/1 Tainted: G W syzkaller #0 PREEMPT(full) [ 471.735070][ C1] Tainted: [W]=WARN [ 471.738874][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.749029][ C1] ================================================================== [ 471.840242][ C0] ================================================================== [ 471.848540][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 471.855800][ C0] [ 471.858146][ C0] read-write to 0xffff888100ac41f8 of 8 bytes by interrupt on cpu 1: [ 471.866236][ C0] can_rcv_filter+0xd9/0x4f0 [ 471.870944][ C0] can_receive+0x13e/0x190 [ 471.875474][ C0] can_rcv+0x17d/0x1f0 [ 471.879571][ C0] process_backlog+0x363/0x670 [ 471.884385][ C0] __napi_poll+0x61/0x330 [ 471.888741][ C0] net_rx_action+0x452/0x930 [ 471.893362][ C0] handle_softirqs+0xb9/0x2a0 [ 471.898144][ C0] do_softirq+0x45/0x60 [ 471.902317][ C0] __local_bh_enable_ip+0x70/0x80 [ 471.907474][ C0] __alloc_skb+0x2b6/0x690 [ 471.912088][ C0] inet6_ifmcaddr_notify+0xd6/0x190 [ 471.917309][ C0] __ipv6_dev_mc_inc+0x4e4/0x5b0 [ 471.922290][ C0] ipv6_dev_mc_inc+0x1f/0x30 [ 471.926911][ C0] ipv6_add_dev+0x955/0xac0 [ 471.931449][ C0] addrconf_notify+0x4a5/0x8f0 [ 471.936246][ C0] raw_notifier_call_chain+0x83/0x1c0 [ 471.941640][ C0] call_netdevice_notifiers+0xb5/0x110 [ 471.947220][ C0] register_netdevice+0xe30/0x1000 [ 471.952350][ C0] tun_set_iff+0x5f1/0x8a0 [ 471.956795][ C0] __tun_chr_ioctl+0x65e/0x14d0 [ 471.961667][ C0] tun_chr_ioctl+0x27/0x40 [ 471.966195][ C0] __se_sys_ioctl+0xce/0x140 [ 471.970811][ C0] __x64_sys_ioctl+0x43/0x50 [ 471.975424][ C0] x64_sys_call+0x1563/0x3020 [ 471.980126][ C0] do_syscall_64+0x12c/0x370 [ 471.984745][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.990666][ C0] [ 471.993004][ C0] read-write to 0xffff888100ac41f8 of 8 bytes by interrupt on cpu 0: [ 472.001088][ C0] can_rcv_filter+0xd9/0x4f0 [ 472.005704][ C0] can_receive+0x13e/0x190 [ 472.010145][ C0] can_rcv+0x17d/0x1f0 [ 472.014239][ C0] process_backlog+0x363/0x670 [ 472.019035][ C0] __napi_poll+0x61/0x330 [ 472.023392][ C0] net_rx_action+0x452/0x930 [ 472.028012][ C0] handle_softirqs+0xb9/0x2a0 [ 472.032710][ C0] run_ksoftirqd+0x1c/0x30 [ 472.037147][ C0] smpboot_thread_fn+0x32a/0x510 [ 472.042113][ C0] kthread+0x22a/0x280 [ 472.046202][ C0] ret_from_fork+0x150/0x360 [ 472.050835][ C0] ret_from_fork_asm+0x1a/0x30 [ 472.055626][ C0] [ 472.057956][ C0] value changed: 0x000000000000a9b7 -> 0x000000000000a9b8 [ 472.065071][ C0] [ 472.067412][ C0] Reported by Kernel Concurrency Sanitizer on: [ 472.073567][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 PREEMPT(full) [ 472.084429][ C0] Tainted: [W]=WARN [ 472.088235][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 472.098305][ C0] ================================================================== [ 472.281959][ C0] ================================================================== [ 472.290190][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 472.297430][ C0] [ 472.299771][ C0] read-write to 0xffff8881715ccb58 of 8 bytes by interrupt on cpu 1: [ 472.307945][ C0] can_rcv_filter+0x242/0x4f0 [ 472.312655][ C0] can_receive+0x13e/0x190 [ 472.317102][ C0] can_rcv+0x17d/0x1f0 [ 472.321206][ C0] process_backlog+0x363/0x670 [ 472.326142][ C0] __napi_poll+0x61/0x330 [ 472.330511][ C0] net_rx_action+0x452/0x930 [ 472.335137][ C0] handle_softirqs+0xb9/0x2a0 [ 472.339832][ C0] do_softirq+0x45/0x60 [ 472.344004][ C0] __local_bh_enable_ip+0x70/0x80 [ 472.349146][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 472.354108][ C0] nsim_dev_trap_report_work+0x52b/0x630 [ 472.359771][ C0] process_scheduled_works+0x4de/0x9e0 [ 472.365254][ C0] worker_thread+0x581/0x770 [ 472.369861][ C0] kthread+0x22a/0x280 [ 472.373940][ C0] ret_from_fork+0x150/0x360 [ 472.378737][ C0] ret_from_fork_asm+0x1a/0x30 [ 472.379265][ T2304] 9p: Bad value for 'rfdno' [ 472.383592][ C0] [ 472.383602][ C0] read-write to 0xffff8881715ccb58 of 8 bytes by interrupt on cpu 0: [ 472.398734][ C0] can_rcv_filter+0x242/0x4f0 [ 472.403442][ C0] can_receive+0x13e/0x190 [ 472.407880][ C0] can_rcv+0x17d/0x1f0 [ 472.411975][ C0] process_backlog+0x363/0x670 [ 472.416770][ C0] __napi_poll+0x61/0x330 [ 472.421126][ C0] net_rx_action+0x452/0x930 [ 472.425744][ C0] handle_softirqs+0xb9/0x2a0 [ 472.430441][ C0] do_softirq+0x45/0x60 [ 472.434614][ C0] __local_bh_enable_ip+0x70/0x80 [ 472.439658][ C0] __alloc_skb+0x658/0x690 [ 472.444096][ C0] alloc_skb_with_frags+0x7d/0x470 [ 472.449222][ C0] sock_alloc_send_pskb+0x44d/0x500 [ 472.454444][ C0] unix_dgram_sendmsg+0x391/0x1060 [ 472.459575][ C0] unix_seqpacket_sendmsg+0xd1/0x110 [ 472.464894][ C0] sock_write_iter+0x32a/0x360 [ 472.469686][ C0] do_iter_readv_writev+0x4fd/0x5a0 [ 472.474907][ C0] vfs_writev+0x2e1/0x900 [ 472.479278][ C0] do_writev+0xe9/0x210 [ 472.483546][ C0] __x64_sys_writev+0x45/0x50 [ 472.488238][ C0] x64_sys_call+0x1c0c/0x3020 [ 472.492947][ C0] do_syscall_64+0x12c/0x370 [ 472.497566][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.503487][ C0] [ 472.505826][ C0] value changed: 0x0000000000010c57 -> 0x0000000000010c58 [ 472.512951][ C0] [ 472.515290][ C0] Reported by Kernel Concurrency Sanitizer on: [ 472.521475][ C0] CPU: 0 UID: 101 PID: 3039 Comm: dhcpcd Tainted: G W syzkaller #0 PREEMPT(full) [ 472.532180][ C0] Tainted: [W]=WARN [ 472.536041][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 472.546113][ C0] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 472.659174][ T28] audit: type=1400 audit(2001573372.051:2663): avc: denied { write } for pid=3301 comm="syz-executor" path="pipe:[598]" dev="pipefs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 474.533100][ C1] ================================================================== [ 474.541240][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 474.548461][ C1] [ 474.550798][ C1] read-write to 0xffff88810016dec0 of 4 bytes by interrupt on cpu 0: [ 474.558881][ C1] can_can_gw_rcv+0x863/0x870 [ 474.563609][ C1] can_rcv_filter+0xc7/0x4f0 [ 474.568229][ C1] can_receive+0x13e/0x190 [ 474.572677][ C1] can_rcv+0x17d/0x1f0 [ 474.576776][ C1] process_backlog+0x363/0x670 [ 474.581573][ C1] __napi_poll+0x61/0x330 [ 474.585934][ C1] net_rx_action+0x452/0x930 [ 474.590553][ C1] handle_softirqs+0xb9/0x2a0 [ 474.595261][ C1] do_softirq+0x45/0x60 [ 474.599440][ C1] __local_bh_enable_ip+0x70/0x80 [ 474.604489][ C1] __alloc_skb+0x2b6/0x690 [ 474.608921][ C1] nsim_dev_trap_report_work+0x18a/0x630 [ 474.614582][ C1] process_scheduled_works+0x4de/0x9e0 [ 474.620085][ C1] worker_thread+0x581/0x770 [ 474.624790][ C1] kthread+0x22a/0x280 [ 474.628961][ C1] ret_from_fork+0x150/0x360 [ 474.633682][ C1] ret_from_fork_asm+0x1a/0x30 [ 474.638470][ C1] [ 474.640806][ C1] read-write to 0xffff88810016dec0 of 4 bytes by interrupt on cpu 1: [ 474.648971][ C1] can_can_gw_rcv+0x863/0x870 [ 474.653817][ C1] can_rcv_filter+0xc7/0x4f0 [ 474.658434][ C1] can_receive+0x13e/0x190 [ 474.662873][ C1] can_rcv+0x17d/0x1f0 [ 474.667131][ C1] process_backlog+0x363/0x670 [ 474.671909][ C1] __napi_poll+0x61/0x330 [ 474.676342][ C1] net_rx_action+0x452/0x930 [ 474.680949][ C1] handle_softirqs+0xb9/0x2a0 [ 474.685815][ C1] __irq_exit_rcu+0x39/0xc0 [ 474.690415][ C1] sysvec_apic_timer_interrupt+0x74/0x80 [ 474.696065][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 474.702069][ C1] _raw_spin_unlock_irqrestore+0x1a/0x30 [ 474.707726][ C1] hrtimer_start_range_ns+0xd3b/0x10f0 [ 474.713278][ C1] j1939_tp_schedule_txtimer+0x68/0xa0 [ 474.718839][ C1] j1939_sk_sendmsg+0x8b2/0xc00 [ 474.723713][ C1] ____sys_sendmsg+0x5af/0x600 [ 474.728485][ C1] ___sys_sendmsg+0x195/0x1e0 [ 474.733180][ C1] __sys_sendmmsg+0x185/0x320 [ 474.737862][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 474.742721][ C1] x64_sys_call+0x27aa/0x3020 [ 474.747412][ C1] do_syscall_64+0x12c/0x370 [ 474.752109][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.758096][ C1] [ 474.760424][ C1] value changed: 0x00039f7d -> 0x00039f7e [ 474.766314][ C1] [ 474.768722][ C1] Reported by Kernel Concurrency Sanitizer on: [ 474.774880][ C1] CPU: 1 UID: 0 PID: 2296 Comm: syz.3.12145 Tainted: G W syzkaller #0 PREEMPT(full) [ 474.785819][ C1] Tainted: [W]=WARN [ 474.789639][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 474.799711][ C1] ================================================================== [ 474.870187][ C1] ================================================================== [ 474.878321][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 474.885612][ C1] [ 474.887942][ C1] read-write to 0xffff888100ac41f8 of 8 bytes by interrupt on cpu 0: [ 474.896022][ C1] can_rcv_filter+0xd9/0x4f0 [ 474.900619][ C1] can_receive+0x13e/0x190 [ 474.905048][ C1] can_rcv+0x17d/0x1f0 [ 474.909127][ C1] process_backlog+0x363/0x670 [ 474.913919][ C1] __napi_poll+0x61/0x330 [ 474.918349][ C1] net_rx_action+0x452/0x930 [ 474.922960][ C1] handle_softirqs+0xb9/0x2a0 [ 474.927643][ C1] do_softirq+0x45/0x60 [ 474.931803][ C1] __local_bh_enable_ip+0x70/0x80 [ 474.936828][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 474.941767][ C1] nsim_dev_trap_report_work+0x52b/0x630 [ 474.947417][ C1] process_scheduled_works+0x4de/0x9e0 [ 474.952884][ C1] worker_thread+0x581/0x770 [ 474.957486][ C1] kthread+0x22a/0x280 [ 474.961557][ C1] ret_from_fork+0x150/0x360 [ 474.966160][ C1] ret_from_fork_asm+0x1a/0x30 [ 474.970941][ C1] [ 474.973347][ C1] read-write to 0xffff888100ac41f8 of 8 bytes by interrupt on cpu 1: [ 474.981415][ C1] can_rcv_filter+0xd9/0x4f0 [ 474.986106][ C1] can_receive+0x13e/0x190 [ 474.990584][ C1] can_rcv+0x17d/0x1f0 [ 474.994678][ C1] process_backlog+0x363/0x670 [ 474.999462][ C1] __napi_poll+0x61/0x330 [ 475.003883][ C1] net_rx_action+0x452/0x930 [ 475.008598][ C1] handle_softirqs+0xb9/0x2a0 [ 475.013288][ C1] do_softirq+0x45/0x60 [ 475.017447][ C1] __local_bh_enable_ip+0x70/0x80 [ 475.022473][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 475.027416][ C1] release_sock+0x116/0x150 [ 475.031921][ C1] sockopt_release_sock+0x41/0x50 [ 475.036948][ C1] do_ip_getsockopt+0xbe3/0x10c0 [ 475.041905][ C1] ip_getsockopt+0x5c/0x180 [ 475.046408][ C1] tcp_getsockopt+0xad/0xe0 [ 475.050919][ C1] sock_common_getsockopt+0x60/0x70 [ 475.056142][ C1] do_sock_getsockopt+0x1c4/0x210 [ 475.061266][ C1] __x64_sys_getsockopt+0x11d/0x1a0 [ 475.066470][ C1] x64_sys_call+0x2dcf/0x3020 [ 475.071153][ C1] do_syscall_64+0x12c/0x370 [ 475.075760][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.081839][ C1] [ 475.084160][ C1] value changed: 0x000000000003b337 -> 0x000000000003b338 [ 475.091262][ C1] [ 475.093585][ C1] Reported by Kernel Concurrency Sanitizer on: [ 475.099735][ C1] CPU: 1 UID: 0 PID: 4857 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 475.110773][ C1] Tainted: [W]=WARN [ 475.114577][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 475.124727][ C1] ================================================================== [ 475.309747][ C0] ================================================================== [ 475.317977][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 475.325248][ C0] [ 475.327659][ C0] read-write to 0xffff8881715ccb58 of 8 bytes by interrupt on cpu 1: [ 475.335746][ C0] can_rcv_filter+0x242/0x4f0 [ 475.340461][ C0] can_receive+0x13e/0x190 [ 475.344912][ C0] can_rcv+0x17d/0x1f0 [ 475.349003][ C0] process_backlog+0x363/0x670 [ 475.353807][ C0] __napi_poll+0x61/0x330 [ 475.358173][ C0] net_rx_action+0x452/0x930 [ 475.362798][ C0] handle_softirqs+0xb9/0x2a0 [ 475.367603][ C0] do_softirq+0x45/0x60 [ 475.371759][ C0] __local_bh_enable_ip+0x70/0x80 [ 475.376873][ C0] __alloc_skb+0x658/0x690 [ 475.381619][ C0] nsim_dev_trap_report_work+0x18a/0x630 [ 475.387446][ C0] process_scheduled_works+0x4de/0x9e0 [ 475.392918][ C0] worker_thread+0x581/0x770 [ 475.397690][ C0] kthread+0x22a/0x280 [ 475.401858][ C0] ret_from_fork+0x150/0x360 [ 475.406462][ C0] ret_from_fork_asm+0x1a/0x30 [ 475.411240][ C0] [ 475.413568][ C0] read-write to 0xffff8881715ccb58 of 8 bytes by interrupt on cpu 0: [ 475.421721][ C0] can_rcv_filter+0x242/0x4f0 [ 475.426596][ C0] can_receive+0x13e/0x190 [ 475.431017][ C0] can_rcv+0x17d/0x1f0 [ 475.435180][ C0] process_backlog+0x363/0x670 [ 475.440127][ C0] __napi_poll+0x61/0x330 [ 475.444468][ C0] net_rx_action+0x452/0x930 [ 475.449073][ C0] handle_softirqs+0xb9/0x2a0 [ 475.453767][ C0] run_ksoftirqd+0x1c/0x30 [ 475.458188][ C0] smpboot_thread_fn+0x32a/0x510 [ 475.463148][ C0] kthread+0x22a/0x280 [ 475.467304][ C0] ret_from_fork+0x150/0x360 [ 475.471904][ C0] ret_from_fork_asm+0x1a/0x30 [ 475.476676][ C0] [ 475.479009][ C0] value changed: 0x000000000003f3ef -> 0x000000000003f3f0 [ 475.486122][ C0] [ 475.488446][ C0] Reported by Kernel Concurrency Sanitizer on: [ 475.494605][ C0] CPU: 0 UID: 0 PID: 14 Comm: ksoftirqd/0 Tainted: G W syzkaller #0 PREEMPT(full) [ 475.505375][ C0] Tainted: [W]=WARN [ 475.509263][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 475.519350][ C0] ================================================================== [ 477.539795][ C1] ================================================================== [ 477.548020][ C1] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 477.555253][ C1] [ 477.557619][ C1] read-write to 0xffff88810016dec0 of 4 bytes by interrupt on cpu 0: [ 477.565793][ C1] can_can_gw_rcv+0x863/0x870 [ 477.570573][ C1] can_rcv_filter+0xc7/0x4f0 [ 477.575172][ C1] can_receive+0x13e/0x190 [ 477.579595][ C1] can_rcv+0x17d/0x1f0 [ 477.583675][ C1] process_backlog+0x363/0x670 [ 477.588454][ C1] __napi_poll+0x61/0x330 [ 477.593064][ C1] net_rx_action+0x452/0x930 [ 477.597678][ C1] handle_softirqs+0xb9/0x2a0 [ 477.602366][ C1] do_softirq+0x45/0x60 [ 477.606594][ C1] __local_bh_enable_ip+0x70/0x80 [ 477.611880][ C1] __alloc_skb+0x658/0x690 [ 477.616389][ C1] nsim_dev_trap_report_work+0x18a/0x630 [ 477.622053][ C1] process_scheduled_works+0x4de/0x9e0 [ 477.627628][ C1] worker_thread+0x581/0x770 [ 477.632330][ C1] kthread+0x22a/0x280 [ 477.636412][ C1] ret_from_fork+0x150/0x360 [ 477.641014][ C1] ret_from_fork_asm+0x1a/0x30 [ 477.645797][ C1] [ 477.648121][ C1] read-write to 0xffff88810016dec0 of 4 bytes by interrupt on cpu 1: [ 477.656205][ C1] can_can_gw_rcv+0x863/0x870 [ 477.660890][ C1] can_rcv_filter+0xc7/0x4f0 [ 477.665485][ C1] can_receive+0x13e/0x190 [ 477.669914][ C1] can_rcv+0x17d/0x1f0 [ 477.674338][ C1] process_backlog+0x363/0x670 [ 477.679201][ C1] __napi_poll+0x61/0x330 [ 477.683593][ C1] net_rx_action+0x452/0x930 [ 477.688456][ C1] handle_softirqs+0xb9/0x2a0 [ 477.693147][ C1] do_softirq+0x45/0x60 [ 477.697313][ C1] __local_bh_enable_ip+0x70/0x80 [ 477.702375][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 477.707329][ C1] lock_sock_nested+0x132/0x160 [ 477.712200][ C1] inet_stream_connect+0x32/0x70 [ 477.717148][ C1] kernel_connect+0x9f/0xf0 [ 477.721664][ C1] rds_tcp_conn_path_connect+0x50d/0x5f0 [ 477.727301][ C1] rds_connect_worker+0x12f/0x1b0 [ 477.732341][ C1] process_scheduled_works+0x4de/0x9e0 [ 477.737808][ C1] worker_thread+0x581/0x770 [ 477.742419][ C1] kthread+0x22a/0x280 [ 477.746499][ C1] ret_from_fork+0x150/0x360 [ 477.751099][ C1] ret_from_fork_asm+0x1a/0x30 [ 477.755874][ C1] [ 477.758197][ C1] value changed: 0x0006c177 -> 0x0006c178 [ 477.763930][ C1] [ 477.766253][ C1] Reported by Kernel Concurrency Sanitizer on: [ 477.772415][ C1] CPU: 1 UID: 0 PID: 2313 Comm: kworker/u8:9 Tainted: G W syzkaller #0 PREEMPT(full) [ 477.783444][ C1] Tainted: [W]=WARN [ 477.787263][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.797405][ C1] Workqueue: krds_cp_wq#23/0 rds_connect_worker [ 477.803760][ C1] ================================================================== [ 477.959059][ C0] ================================================================== [ 477.967205][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 477.974439][ C0] [ 477.976771][ C0] read-write to 0xffff888100ac41f8 of 8 bytes by interrupt on cpu 1: [ 477.984863][ C0] can_rcv_filter+0xd9/0x4f0 [ 477.989479][ C0] can_receive+0x13e/0x190 [ 477.993923][ C0] can_rcv+0x17d/0x1f0 [ 477.998014][ C0] process_backlog+0x363/0x670 [ 478.002809][ C0] __napi_poll+0x61/0x330 [ 478.007167][ C0] net_rx_action+0x452/0x930 [ 478.011804][ C0] handle_softirqs+0xb9/0x2a0 [ 478.016609][ C0] do_softirq+0x45/0x60 [ 478.020796][ C0] __local_bh_enable_ip+0x70/0x80 [ 478.025842][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 478.030809][ C0] wg_packet_encrypt_worker+0x169/0xde0 [ 478.036485][ C0] process_scheduled_works+0x4de/0x9e0 [ 478.041983][ C0] worker_thread+0x581/0x770 [ 478.046598][ C0] kthread+0x22a/0x280 [ 478.050809][ C0] ret_from_fork+0x150/0x360 [ 478.055435][ C0] ret_from_fork_asm+0x1a/0x30 [ 478.060224][ C0] [ 478.062561][ C0] read-write to 0xffff888100ac41f8 of 8 bytes by interrupt on cpu 0: [ 478.070676][ C0] can_rcv_filter+0xd9/0x4f0 [ 478.075300][ C0] can_receive+0x13e/0x190 [ 478.079744][ C0] can_rcv+0x17d/0x1f0 [ 478.083838][ C0] process_backlog+0x363/0x670 [ 478.088635][ C0] __napi_poll+0x61/0x330 [ 478.092991][ C0] net_rx_action+0x452/0x930 [ 478.097608][ C0] handle_softirqs+0xb9/0x2a0 [ 478.102298][ C0] do_softirq+0x45/0x60 [ 478.106469][ C0] __local_bh_enable_ip+0x70/0x80 [ 478.111516][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 478.116479][ C0] wg_packet_encrypt_worker+0x169/0xde0 [ 478.122059][ C0] process_scheduled_works+0x4de/0x9e0 [ 478.127553][ C0] worker_thread+0x581/0x770 [ 478.132171][ C0] kthread+0x22a/0x280 [ 478.136261][ C0] ret_from_fork+0x150/0x360 [ 478.140880][ C0] ret_from_fork_asm+0x1a/0x30 [ 478.145669][ C0] [ 478.148002][ C0] value changed: 0x000000000006f3a2 -> 0x000000000006f3a3 [ 478.155152][ C0] [ 478.157587][ C0] Reported by Kernel Concurrency Sanitizer on: [ 478.163749][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Tainted: G W syzkaller #0 PREEMPT(full) [ 478.174457][ C0] Tainted: [W]=WARN [ 478.178272][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.188430][ C0] Workqueue: wg-crypt-wg2 wg_packet_encrypt_worker [ 478.194966][ C0] ================================================================== [ 478.324027][ C1] ================================================================== [ 478.332171][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 478.339501][ C1] [ 478.341842][ C1] read-write to 0xffff8881715ccb58 of 8 bytes by interrupt on cpu 0: [ 478.349921][ C1] can_rcv_filter+0x242/0x4f0 [ 478.354638][ C1] can_receive+0x13e/0x190 [ 478.359076][ C1] can_rcv+0x17d/0x1f0 [ 478.363179][ C1] process_backlog+0x363/0x670 [ 478.368059][ C1] __napi_poll+0x61/0x330 [ 478.372418][ C1] net_rx_action+0x452/0x930 [ 478.377123][ C1] handle_softirqs+0xb9/0x2a0 [ 478.381814][ C1] do_softirq+0x45/0x60 [ 478.385995][ C1] __local_bh_enable_ip+0x70/0x80 [ 478.391121][ C1] __alloc_skb+0x658/0x690 [ 478.395639][ C1] nsim_dev_trap_report_work+0x18a/0x630 [ 478.401305][ C1] process_scheduled_works+0x4de/0x9e0 [ 478.406888][ C1] worker_thread+0x581/0x770 [ 478.411634][ C1] kthread+0x22a/0x280 [ 478.415723][ C1] ret_from_fork+0x150/0x360 [ 478.420434][ C1] ret_from_fork_asm+0x1a/0x30 [ 478.425222][ C1] [ 478.427554][ C1] read-write to 0xffff8881715ccb58 of 8 bytes by interrupt on cpu 1: [ 478.435639][ C1] can_rcv_filter+0x242/0x4f0 [ 478.440350][ C1] can_receive+0x13e/0x190 [ 478.444803][ C1] can_rcv+0x17d/0x1f0 [ 478.448894][ C1] process_backlog+0x363/0x670 [ 478.453691][ C1] __napi_poll+0x61/0x330 [ 478.458051][ C1] net_rx_action+0x452/0x930 [ 478.462771][ C1] handle_softirqs+0xb9/0x2a0 [ 478.467598][ C1] do_softirq+0x45/0x60 [ 478.471765][ C1] __local_bh_enable_ip+0x70/0x80 [ 478.476891][ C1] __alloc_skb+0x658/0x690 [ 478.481321][ C1] nsim_dev_trap_report_work+0x18a/0x630 [ 478.487054][ C1] process_scheduled_works+0x4de/0x9e0 [ 478.492521][ C1] worker_thread+0x581/0x770 [ 478.497130][ C1] kthread+0x22a/0x280 [ 478.501200][ C1] ret_from_fork+0x150/0x360 [ 478.505888][ C1] ret_from_fork_asm+0x1a/0x30 [ 478.510748][ C1] [ 478.513089][ C1] value changed: 0x00000000000750f4 -> 0x00000000000750f5 [ 478.520207][ C1] [ 478.522539][ C1] Reported by Kernel Concurrency Sanitizer on: [ 478.528778][ C1] CPU: 1 UID: 0 PID: 2646 Comm: kworker/u8:8 Tainted: G W syzkaller #0 PREEMPT(full) [ 478.539835][ C1] Tainted: [W]=WARN [ 478.543642][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 478.553699][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 478.560488][ C1] ================================================================== [ 480.651817][ C0] ================================================================== [ 480.659956][ C0] BUG: KCSAN: data-race in can_can_gw_rcv / can_can_gw_rcv [ 480.667180][ C0] [ 480.669515][ C0] read-write to 0xffff88810016dec0 of 4 bytes by interrupt on cpu 1: [ 480.677596][ C0] can_can_gw_rcv+0x863/0x870 [ 480.682294][ C0] can_rcv_filter+0xc7/0x4f0 [ 480.687031][ C0] can_receive+0x13e/0x190 [ 480.691483][ C0] can_rcv+0x17d/0x1f0 [ 480.695664][ C0] process_backlog+0x363/0x670 [ 480.700459][ C0] __napi_poll+0x61/0x330 [ 480.704818][ C0] net_rx_action+0x452/0x930 [ 480.709525][ C0] handle_softirqs+0xb9/0x2a0 [ 480.714220][ C0] do_softirq+0x45/0x60 [ 480.718392][ C0] __local_bh_enable_ip+0x70/0x80 [ 480.723437][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 480.728400][ C0] nsim_dev_trap_report_work+0x52b/0x630 [ 480.734163][ C0] process_scheduled_works+0x4de/0x9e0 [ 480.739828][ C0] worker_thread+0x581/0x770 [ 480.744446][ C0] kthread+0x22a/0x280 [ 480.748619][ C0] ret_from_fork+0x150/0x360 [ 480.753363][ C0] ret_from_fork_asm+0x1a/0x30 [ 480.758246][ C0] [ 480.760584][ C0] read-write to 0xffff88810016dec0 of 4 bytes by interrupt on cpu 0: [ 480.768801][ C0] can_can_gw_rcv+0x863/0x870 [ 480.773503][ C0] can_rcv_filter+0xc7/0x4f0 [ 480.778119][ C0] can_receive+0x13e/0x190 [ 480.782569][ C0] can_rcv+0x17d/0x1f0 [ 480.786679][ C0] process_backlog+0x363/0x670 [ 480.791478][ C0] __napi_poll+0x61/0x330 [ 480.795972][ C0] net_rx_action+0x452/0x930 [ 480.800607][ C0] handle_softirqs+0xb9/0x2a0 [ 480.805311][ C0] do_softirq+0x45/0x60 [ 480.809497][ C0] __local_bh_enable_ip+0x70/0x80 [ 480.814553][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 480.819523][ C0] batadv_tt_local_purge+0x1a8/0x1f0 [ 480.824831][ C0] batadv_tt_purge+0x2b/0x610 [ 480.829878][ C0] process_scheduled_works+0x4de/0x9e0 [ 480.835362][ C0] worker_thread+0x581/0x770 [ 480.839977][ C0] kthread+0x22a/0x280 [ 480.844065][ C0] ret_from_fork+0x150/0x360 [ 480.848682][ C0] ret_from_fork_asm+0x1a/0x30 [ 480.853471][ C0] [ 480.855810][ C0] value changed: 0x000a52d7 -> 0x000a52d8 [ 480.861629][ C0] [ 480.863977][ C0] Reported by Kernel Concurrency Sanitizer on: [ 480.870142][ C0] CPU: 0 UID: 0 PID: 2140 Comm: kworker/u8:7 Tainted: G W syzkaller #0 PREEMPT(full) [ 480.881484][ C0] Tainted: [W]=WARN [ 480.885296][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 480.895457][ C0] Workqueue: bat_events batadv_tt_purge [ 480.901114][ C0] ================================================================== [ 481.003857][ C1] ================================================================== [ 481.012181][ C1] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 481.019506][ C1] [ 481.021859][ C1] read-write to 0xffff888100ac41f8 of 8 bytes by interrupt on cpu 0: [ 481.030028][ C1] can_rcv_filter+0xd9/0x4f0 [ 481.034653][ C1] can_receive+0x13e/0x190 [ 481.039087][ C1] can_rcv+0x17d/0x1f0 [ 481.043178][ C1] process_backlog+0x363/0x670 [ 481.047957][ C1] __napi_poll+0x61/0x330 [ 481.052312][ C1] net_rx_action+0x452/0x930 [ 481.056931][ C1] handle_softirqs+0xb9/0x2a0 [ 481.061631][ C1] do_softirq+0x45/0x60 [ 481.065809][ C1] __local_bh_enable_ip+0x70/0x80 [ 481.070851][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 481.075808][ C1] wg_packet_encrypt_worker+0xd9c/0xde0 [ 481.081386][ C1] process_scheduled_works+0x4de/0x9e0 [ 481.086948][ C1] worker_thread+0x581/0x770 [ 481.091564][ C1] kthread+0x22a/0x280 [ 481.095649][ C1] ret_from_fork+0x150/0x360 [ 481.100355][ C1] ret_from_fork_asm+0x1a/0x30 [ 481.105147][ C1] [ 481.107481][ C1] read-write to 0xffff888100ac41f8 of 8 bytes by interrupt on cpu 1: [ 481.115737][ C1] can_rcv_filter+0xd9/0x4f0 [ 481.120362][ C1] can_receive+0x13e/0x190 [ 481.124797][ C1] can_rcv+0x17d/0x1f0 [ 481.128887][ C1] process_backlog+0x363/0x670 [ 481.133692][ C1] __napi_poll+0x61/0x330 [ 481.138049][ C1] net_rx_action+0x452/0x930 [ 481.142666][ C1] handle_softirqs+0xb9/0x2a0 [ 481.147446][ C1] do_softirq+0x45/0x60 [ 481.151622][ C1] __local_bh_enable_ip+0x70/0x80 [ 481.156761][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 481.161814][ C1] release_sock+0x116/0x150 [ 481.166338][ C1] j1939_sk_sendmsg+0xac4/0xc00 [ 481.171215][ C1] ____sys_sendmsg+0x5af/0x600 [ 481.175999][ C1] ___sys_sendmsg+0x195/0x1e0 [ 481.180710][ C1] __sys_sendmmsg+0x185/0x320 [ 481.185503][ C1] __x64_sys_sendmmsg+0x57/0x70 [ 481.190386][ C1] x64_sys_call+0x27aa/0x3020 [ 481.195089][ C1] do_syscall_64+0x12c/0x370 [ 481.199711][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.205617][ C1] [ 481.207948][ C1] value changed: 0x00000000000a7320 -> 0x00000000000a7321 [ 481.215068][ C1] [ 481.217401][ C1] Reported by Kernel Concurrency Sanitizer on: [ 481.223605][ C1] CPU: 1 UID: 0 PID: 2296 Comm: syz.3.12145 Tainted: G W syzkaller #0 PREEMPT(full) [ 481.234581][ C1] Tainted: [W]=WARN [ 481.238405][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 481.248651][ C1] ================================================================== [ 481.357134][ C0] ================================================================== [ 481.365282][ C0] BUG: KCSAN: data-race in can_rcv_filter / can_rcv_filter [ 481.372520][ C0] [ 481.374857][ C0] read-write to 0xffff8881715ccb58 of 8 bytes by interrupt on cpu 1: [ 481.382938][ C0] can_rcv_filter+0x242/0x4f0 [ 481.387647][ C0] can_receive+0x13e/0x190 [ 481.392088][ C0] can_rcv+0x17d/0x1f0 [ 481.396183][ C0] process_backlog+0x363/0x670 [ 481.400970][ C0] __napi_poll+0x61/0x330 [ 481.405323][ C0] net_rx_action+0x452/0x930 [ 481.409944][ C0] handle_softirqs+0xb9/0x2a0 [ 481.414641][ C0] run_ksoftirqd+0x1c/0x30 [ 481.419079][ C0] smpboot_thread_fn+0x32a/0x510 [ 481.424042][ C0] kthread+0x22a/0x280 [ 481.428123][ C0] ret_from_fork+0x150/0x360 [ 481.432742][ C0] ret_from_fork_asm+0x1a/0x30 [ 481.437528][ C0] [ 481.439865][ C0] read-write to 0xffff8881715ccb58 of 8 bytes by interrupt on cpu 0: [ 481.447937][ C0] can_rcv_filter+0x242/0x4f0 [ 481.452642][ C0] can_receive+0x13e/0x190 [ 481.457085][ C0] can_rcv+0x17d/0x1f0 [ 481.461180][ C0] process_backlog+0x363/0x670 [ 481.465973][ C0] __napi_poll+0x61/0x330 [ 481.470334][ C0] net_rx_action+0x452/0x930 [ 481.474952][ C0] handle_softirqs+0xb9/0x2a0 [ 481.479646][ C0] do_softirq+0x45/0x60 [ 481.483808][ C0] __local_bh_enable_ip+0x70/0x80 [ 481.488848][ C0] _raw_spin_unlock_bh+0x18/0x20 [ 481.493808][ C0] addrconf_ifdown+0x3bb/0xf90 [ 481.498605][ C0] addrconf_notify+0x222/0x8f0 [ 481.503384][ C0] raw_notifier_call_chain+0x83/0x1c0 [ 481.508778][ C0] unregister_netdevice_many_notify+0xedb/0x1710 [ 481.515133][ C0] unregister_netdevice_queue+0x1cd/0x200 [ 481.520878][ C0] __tun_detach+0x82c/0xb30 [ 481.525399][ C0] tun_chr_close+0x5a/0x100 [ 481.529922][ C0] __fput+0x29b/0x650 [ 481.534068][ C0] ____fput+0x1c/0x30 [ 481.538261][ C0] task_work_run+0x130/0x1a0 [ 481.542877][ C0] exit_to_user_mode_loop+0x1f4/0x6f0 [ 481.548281][ C0] do_syscall_64+0x249/0x370