last executing test programs: 1.385138346s ago: executing program 4 (id=157): perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140), 0xa}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000001040)='ext4\x00', &(0x7f0000001080)='./file1\x00', 0x1a00404, &(0x7f00000010c0), 0x1, 0xbac, &(0x7f0000001100)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001cc0)='./sys\x00', 0x1ff) mount$bind(0x0, &(0x7f0000001d00)='.\x00', 0x0, 0x21, 0x0) 1.209606521s ago: executing program 1 (id=161): r0 = syz_open_dev$loop(&(0x7f0000000500), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000740)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bind$can_j1939(r0, &(0x7f00000003c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000740)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000000780), 0x3fffffffffffe3d, 0xf5) 603.065345ms ago: executing program 4 (id=173): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, r1, 0x1, 0x70bd27, 0x0, {0x54}}, 0x14}}, 0xc084) close_range(r0, 0xffffffffffffffff, 0x0) 568.935726ms ago: executing program 0 (id=175): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffe}, 0x50) setitimer(0x1, &(0x7f00000026c0)={{0x100, 0x5}, {0xb, 0x4}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'netdevsim0\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setitimer(0x1, &(0x7f0000000000)={{0x0, 0x2710}, {0x77359400}}, 0x0) 566.494156ms ago: executing program 3 (id=176): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000080)=0x9, 0x8, 0x0) mbind(&(0x7f000058a000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x8006, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x0, 0x1) 546.334987ms ago: executing program 1 (id=177): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3008000, &(0x7f0000000480), 0x1, 0x506, &(0x7f0000001d00)="$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") mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000001c0)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x1, 0x1, 0x25, 0x3}) fcntl$lock(r0, 0x7, &(0x7f0000000300)={0x1, 0x2, 0x8, 0x73e9}) 545.018407ms ago: executing program 3 (id=178): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x8b}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 528.221977ms ago: executing program 4 (id=179): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54f, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc3, 0x4, @perf_bp={0x0, 0x7}, 0x1020, 0x0, 0xfffffffd, 0x5, 0x3, 0x1, 0x1, 0x0, 0x0, 0x0, 0x4000000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = add_key(&(0x7f00000009c0)='keyring\x00', &(0x7f0000000a00)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000a40)='asymmetric\x00', 0x0, &(0x7f0000000a80)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001000)={r1, 0x86}, 0x0, &(0x7f0000001040)="cb4403fa0c2c2a3a518de9000000c11a536275a1d846d65e2988ef1a4992f9a2675b2853d82c107d0fd00990b531004a27f0395fdbcb1d85878c1cbdb120730ded7b4d10b0612763631dd3db62ddf74fc08db9f741b76996bf785368bc3b2081647102254e6e9e7a9c19da1095090000000000000039b2c1210500ffeafb477423d888ac47c5", 0x0) 518.795637ms ago: executing program 0 (id=180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000740)={0xa, 0x4e22}, 0x1c) listen(r0, 0x81010040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000780)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000007c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x3d, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 496.387728ms ago: executing program 1 (id=181): setresgid(0x0, 0xee01, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) capset(&(0x7f000000cac0)={0x20080522}, &(0x7f000000cb00)={0x7, 0x7, 0x0, 0x81, 0xfffffffb, 0xfffffffc}) write$tcp_mem(r0, 0x0, 0x0) 467.656199ms ago: executing program 0 (id=182): r0 = epoll_create1(0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xc000200f}) epoll_pwait(r0, &(0x7f00000002c0)=[{}], 0x1, 0xfffffffb, 0x0, 0x0) 400.79126ms ago: executing program 1 (id=183): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001080)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000d295"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x11, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001140)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r3, r1, 0x4, r0}, 0x10) 375.787831ms ago: executing program 3 (id=184): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 374.130161ms ago: executing program 1 (id=185): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000003c0)={0x1d, r1, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r0, &(0x7f0000000740)={0x1d, r1, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r0, &(0x7f0000000780), 0x3fffffffffffe3d, 0xf5) 367.812661ms ago: executing program 3 (id=186): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040), 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x800) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) 298.764203ms ago: executing program 3 (id=187): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 298.618083ms ago: executing program 3 (id=188): r0 = syz_open_dev$loop(&(0x7f0000000500), 0x75f, 0xa8182) r1 = memfd_create(&(0x7f0000000740)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000940)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x103a, &(0x7f0000000980)=ANY=[], 0x0) 228.934594ms ago: executing program 0 (id=190): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000002c0)=0x9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000e80)=""/19, 0x13}], 0x1}, 0xf1a2}, {{0x0, 0x0, 0x0}, 0x40}], 0x2, 0x0, 0x0) 218.885525ms ago: executing program 4 (id=191): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) getsockname$packet(r1, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x24008810}, 0x8010) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r2, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20048001}, 0x42) 177.685206ms ago: executing program 1 (id=192): r0 = gettid() timer_create(0x2, &(0x7f0000000680)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000006c0)=0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) timer_settime(r1, 0x0, &(0x7f00000007c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000800)={0x0, 0x989680}, 0x0) unshare(0x6a040000) 166.275556ms ago: executing program 2 (id=193): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000001c0)=0x1, 0x4) bind$can_j1939(r0, &(0x7f00000002c0)={0x1d, r1, 0x102030405060708, {}, 0x20}, 0x18) connect$can_j1939(r0, &(0x7f00000005c0)={0x1d, r1, 0x0, {0x0, 0xee}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)="0807060504030201", 0x8}, 0x1, 0x0, 0x0, 0x8000814}, 0x0) 163.663066ms ago: executing program 4 (id=194): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x2000000, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x2bc, &(0x7f0000000340)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x101042, 0x15) unshare(0x22020600) truncate(&(0x7f0000003d00)='./file1\x00', 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) truncate(&(0x7f0000000640)='./file1\x00', 0x1000700) 103.047188ms ago: executing program 2 (id=195): socket$nl_rdma(0x10, 0x3, 0x14) setns(0xc9, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c0e8, 0x2, 0x0, 0x9, 0x8, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, r1, 0x309, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 75.383548ms ago: executing program 2 (id=196): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) write(r0, &(0x7f0000000040)="4c9839556f45be95", 0x8) 51.336419ms ago: executing program 2 (id=197): r0 = syz_create_resource$futex(&(0x7f0000000380)=0x1) r1 = syz_create_resource$futex(&(0x7f00000003c0)) futex(r0, 0xb, 0x1, 0x0, r1, 0x0) futex(r0, 0xb, 0x1, 0x0, r1, 0x1) futex(r1, 0xd, 0x2, 0x0, r0, 0x0) futex(r0, 0xc, 0x1, &(0x7f0000000440)={0x0, 0x3938700}, r1, 0x1) 0s ago: executing program 4 (id=198): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6b, 0x2, @perf_config_ext={0x4, 0x8}, 0x11c1e8, 0x2, 0x0, 0x9, 0xffff, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): .359246][ T29] audit: type=1400 audit(1792422370.067:110): avc: denied { write } for pid=3259 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 21.388667][ T29] audit: type=1400 audit(1792422370.077:111): avc: denied { write } for pid=3270 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.039264][ T29] audit: type=1400 audit(1792422370.747:112): avc: denied { transition } for pid=3276 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.039358][ T29] audit: type=1400 audit(1792422370.747:113): avc: denied { noatsecure } for pid=3276 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 22.039703][ T29] audit: type=1400 audit(1792422370.747:114): avc: denied { write } for pid=3276 comm="sh" path="pipe:[2340]" dev="pipefs" ino=2340 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 22.039730][ T29] audit: type=1400 audit(1792422370.747:115): avc: denied { rlimitinh } for pid=3276 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. [ 29.485193][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 29.485208][ T29] audit: type=1400 audit(1792422378.187:117): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.485417][ T29] audit: type=1400 audit(1792422378.187:118): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.486062][ T3293] cgroup: Unknown subsys name 'net' [ 29.491751][ T29] audit: type=1400 audit(1792422378.197:119): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.636334][ T3293] cgroup: Unknown subsys name 'cpuset' [ 29.636910][ T3293] cgroup: Unknown subsys name 'rlimit' [ 29.761255][ T29] audit: type=1400 audit(1792422378.467:120): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.762299][ T29] audit: type=1400 audit(1792422378.467:121): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.762408][ T29] audit: type=1400 audit(1792422378.467:122): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.762617][ T29] audit: type=1400 audit(1792422378.467:123): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.774014][ T29] audit: type=1400 audit(1792422378.477:124): avc: denied { read } for pid=3028 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 29.775856][ T29] audit: type=1400 audit(1792422378.477:125): avc: denied { search } for pid=3028 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.775882][ T29] audit: type=1400 audit(1792422378.477:126): avc: denied { search } for pid=3028 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 29.837333][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.929650][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.878191][ T3303] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.878481][ T3303] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.878668][ T3303] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.902117][ T3310] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.926672][ T3304] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 30.971210][ T3303] infiniband rxe0: set active [ 30.971225][ T3303] infiniband rxe0: added rxe_eth0 [ 30.972566][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 30.984603][ T3303] RDS/IB: rxe0: added [ 30.984619][ T3303] smc: adding ib device rxe0 with port count 1 [ 30.984632][ T3303] smc: ib device rxe0 port 1 has no pnetid [ 31.011688][ T3308] rxe0: rxe_newlink: already configured on rxe_eth0 [ 31.013875][ T3303] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.015502][ T9] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.071818][ T3303] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.124475][ T3309] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.166536][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.166559][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.166649][ T3310] bridge_slave_0: entered allmulticast mode [ 31.166977][ T3310] bridge_slave_0: entered promiscuous mode [ 31.174091][ T3308] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.183261][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.183291][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.183447][ T3310] bridge_slave_1: entered allmulticast mode [ 31.183802][ T3310] bridge_slave_1: entered promiscuous mode [ 31.224471][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.224503][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.224592][ T3304] bridge_slave_0: entered allmulticast mode [ 31.226207][ T3304] bridge_slave_0: entered promiscuous mode [ 31.245691][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.247030][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.247438][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.247466][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.247549][ T3304] bridge_slave_1: entered allmulticast mode [ 31.247959][ T3304] bridge_slave_1: entered promiscuous mode [ 31.284856][ T3310] team0: Port device team_slave_0 added [ 31.288746][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.293027][ T3310] team0: Port device team_slave_1 added [ 31.298936][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.311052][ T3303] rxe_eth0 speed is unknown, defaulting to 1000 [ 31.332844][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.332856][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.332904][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.356094][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.356157][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.356184][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.362800][ T3304] team0: Port device team_slave_0 added [ 31.376104][ T3304] team0: Port device team_slave_1 added [ 31.426161][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.426175][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.426202][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.439040][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.439053][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.439081][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.447624][ T3310] hsr_slave_0: entered promiscuous mode [ 31.447994][ T3310] hsr_slave_1: entered promiscuous mode [ 31.505911][ T3304] hsr_slave_0: entered promiscuous mode [ 31.506378][ T3304] hsr_slave_1: entered promiscuous mode [ 31.506669][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 31.506688][ T3304] Cannot create hsr debugfs directory [ 31.608571][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.608602][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.608651][ T3308] bridge_slave_0: entered allmulticast mode [ 31.609126][ T3308] bridge_slave_0: entered promiscuous mode [ 31.623215][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.623246][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.623335][ T3308] bridge_slave_1: entered allmulticast mode [ 31.623765][ T3308] bridge_slave_1: entered promiscuous mode [ 31.653001][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.653034][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.653142][ T3309] bridge_slave_0: entered allmulticast mode [ 31.653619][ T3309] bridge_slave_0: entered promiscuous mode [ 31.658460][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.659545][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.670842][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.670873][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.670968][ T3309] bridge_slave_1: entered allmulticast mode [ 31.671399][ T3309] bridge_slave_1: entered promiscuous mode [ 31.690510][ T3308] team0: Port device team_slave_0 added [ 31.702788][ T3308] team0: Port device team_slave_1 added [ 31.706471][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.707588][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.724593][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.730482][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.730983][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.737647][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.753395][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.756551][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.757410][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.757422][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.757450][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.758078][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.758089][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.758115][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.769943][ T3309] team0: Port device team_slave_0 added [ 31.770034][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.772159][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.782441][ T3309] team0: Port device team_slave_1 added [ 31.835490][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.839483][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.842186][ T3308] hsr_slave_0: entered promiscuous mode [ 31.842672][ T3308] hsr_slave_1: entered promiscuous mode [ 31.842936][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 31.842949][ T3308] Cannot create hsr debugfs directory [ 31.845280][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.845297][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.845324][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.845469][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.845497][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.845634][ T3303] bridge_slave_0: entered allmulticast mode [ 31.846218][ T3303] bridge_slave_0: entered promiscuous mode [ 31.849339][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.849368][ T3310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.849445][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.849496][ T3310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.851899][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.851911][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.851938][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.862625][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.862654][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.862773][ T3303] bridge_slave_1: entered allmulticast mode [ 31.863270][ T3303] bridge_slave_1: entered promiscuous mode [ 31.869303][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.883058][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.896222][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.899006][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.918173][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.924743][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.928610][ T3309] hsr_slave_0: entered promiscuous mode [ 31.929031][ T3309] hsr_slave_1: entered promiscuous mode [ 31.929195][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 31.929207][ T3309] Cannot create hsr debugfs directory [ 31.936855][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.937875][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.965368][ T3303] team0: Port device team_slave_0 added [ 31.966998][ T3303] team0: Port device team_slave_1 added [ 31.982176][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.982208][ T3304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.982312][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.982405][ T3304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.989964][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.998837][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.998849][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.998876][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.999452][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.999463][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.999490][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.010482][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.017414][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.029595][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.043411][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.283531][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.336156][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.336192][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.353394][ T3303] hsr_slave_0: entered promiscuous mode [ 32.353822][ T3303] hsr_slave_1: entered promiscuous mode [ 32.354051][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 32.354064][ T3303] Cannot create hsr debugfs directory [ 32.357688][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.357718][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.443683][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.444388][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 32.446513][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.464666][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.467278][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.467305][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.468988][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 32.477075][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.489310][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 32.498748][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.513874][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.513907][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.515000][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 32.518406][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.554228][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 32.557921][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.570983][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 32.573356][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.582808][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 32.591330][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.602549][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 32.604950][ T3309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.639325][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 32.642368][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.650109][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 32.656562][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.661538][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 32.671277][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.675543][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 32.689466][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.725335][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.745264][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.752585][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.767153][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.771555][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.771583][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.783178][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.783288][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.788337][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.823776][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.823808][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.843407][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.843438][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.847596][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.866497][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.899653][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.905130][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.905182][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.914282][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.914313][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.994988][ T3310] veth0_vlan: entered promiscuous mode [ 33.009885][ T3310] veth1_vlan: entered promiscuous mode [ 33.034342][ T3310] veth0_macvtap: entered promiscuous mode [ 33.036598][ T3310] veth1_macvtap: entered promiscuous mode [ 33.041027][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.044791][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.063114][ T102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.063312][ T102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.063401][ T102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.063623][ T102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.169255][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.170848][ T3310] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.184947][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.272931][ T3304] veth0_vlan: entered promiscuous mode [ 33.281223][ T3304] veth1_vlan: entered promiscuous mode [ 33.298562][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.321424][ T3304] veth0_macvtap: entered promiscuous mode [ 33.341390][ T3304] veth1_macvtap: entered promiscuous mode [ 33.346741][ T3309] veth0_vlan: entered promiscuous mode [ 33.354318][ T3309] veth1_vlan: entered promiscuous mode [ 33.356011][ T3308] veth0_vlan: entered promiscuous mode [ 33.362178][ T3308] veth1_vlan: entered promiscuous mode [ 33.364284][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.374061][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.403561][ T3308] veth0_macvtap: entered promiscuous mode [ 33.409278][ T3309] veth0_macvtap: entered promiscuous mode [ 33.413839][ T3308] veth1_macvtap: entered promiscuous mode [ 33.418977][ T3309] veth1_macvtap: entered promiscuous mode [ 33.439678][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.448692][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.449320][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.454998][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.496312][ T102] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.496390][ T363] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.523326][ T102] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.523459][ T102] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.523736][ T102] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.523843][ T102] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.523880][ T102] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.523916][ T102] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.523956][ T102] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.523993][ T102] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.524047][ T102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.524128][ T102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.646778][ T3303] veth0_vlan: entered promiscuous mode [ 33.652261][ T3303] veth1_vlan: entered promiscuous mode [ 33.687747][ T3303] veth0_macvtap: entered promiscuous mode [ 33.693485][ T3303] veth1_macvtap: entered promiscuous mode [ 33.715432][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.726997][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.729311][ T3527] dummy0: entered allmulticast mode [ 33.762898][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.763151][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.763268][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.763372][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.807878][ T3526] dummy0: left allmulticast mode [ 33.885584][ T3545] sctp: [Deprecated]: syz.4.13 (pid 3545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 33.885584][ T3545] Use struct sctp_sack_info instead [ 34.010979][ T3554] loop0: detected capacity change from 0 to 512 [ 34.036071][ T3561] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.20'. [ 34.065773][ T3554] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.15: iget: bad extended attribute block 134217728 [ 34.065895][ T3554] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.066781][ T3554] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.15: couldn't read orphan inode 15 (err -117) [ 34.066913][ T3554] loop0: lost filesystem error report for type 5 error -117 [ 34.074254][ T3554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.184785][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.253192][ T3571] loop2: detected capacity change from 0 to 512 [ 34.302370][ T3583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28'. [ 34.302394][ T3583] netlink: 16 bytes leftover after parsing attributes in process `syz.3.28'. [ 34.346922][ T3571] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.347281][ T3571] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.396805][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.420507][ T3593] loop4: detected capacity change from 0 to 128 [ 34.434608][ T3593] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 34.434875][ T3593] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.469345][ T3599] loop2: detected capacity change from 0 to 512 [ 34.471195][ T3599] EXT4-fs: quotafile must be on filesystem root [ 34.491139][ T29] kauditd_printk_skb: 73 callbacks suppressed [ 34.491153][ T29] audit: type=1400 audit(1792422383.197:200): avc: denied { allowed } for pid=3600 comm="syz.3.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 34.491917][ T29] audit: type=1400 audit(1792422383.197:201): avc: denied { create } for pid=3600 comm="syz.3.36" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.542904][ T29] audit: type=1400 audit(1792422383.247:202): avc: denied { setattr } for pid=3592 comm="syz.4.34" path="/9/file1/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.594417][ T3606] loop3: detected capacity change from 0 to 512 [ 34.603850][ T3606] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 34.605119][ T3606] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #15: comm syz.3.38: corrupted in-inode xattr: e_value size too large [ 34.605202][ T3606] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 34.613674][ T3606] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.38: couldn't read orphan inode 15 (err -117) [ 34.613703][ T3606] loop3: lost filesystem error report for type 5 error -117 [ 34.628897][ C1] EXT4-fs (loop3): error count since last fsck: 2 [ 34.628920][ C1] EXT4-fs (loop3): initial error at time 1792422383: ext4_iget_extra_inode:5210: inode 15 [ 34.628956][ C1] EXT4-fs (loop3): last error at time 1792422383: ext4_orphan_get:1408 [ 34.637510][ T3606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.638839][ T3304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.649518][ T29] audit: type=1400 audit(1792422383.357:203): avc: denied { map } for pid=3605 comm="syz.3.38" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.649550][ T29] audit: type=1400 audit(1792422383.357:204): avc: denied { read write } for pid=3605 comm="syz.3.38" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5339 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.660964][ T29] audit: type=1400 audit(1792422383.367:205): avc: denied { mmap_zero } for pid=3605 comm="syz.3.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 34.673769][ T29] audit: type=1400 audit(1792422383.377:206): avc: denied { write } for pid=3605 comm="syz.3.38" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.673795][ T29] audit: type=1400 audit(1792422383.377:207): avc: denied { create } for pid=3605 comm="syz.3.38" name=01 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 34.688813][ T3610] loop4: detected capacity change from 0 to 1024 [ 34.692130][ T3610] ======================================================= [ 34.692130][ T3610] WARNING: The mand mount option has been deprecated and [ 34.692130][ T3610] and is ignored by this kernel. Remove the mand [ 34.692130][ T3610] option from the mount to silence this warning. [ 34.692130][ T3610] ======================================================= [ 34.692234][ T3610] EXT4-fs: Ignoring removed oldalloc option [ 34.701438][ T3610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 34.701529][ T3610] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.719377][ T29] audit: type=1400 audit(1792422383.427:208): avc: denied { write } for pid=3609 comm="syz.4.40" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 34.719405][ T29] audit: type=1400 audit(1792422383.427:209): avc: denied { read write } for pid=3609 comm="syz.4.40" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.732521][ T3610] EXT4-fs error (device loop4): ext4_validate_block_bitmap:445: comm syz.4.40: bg 0: block 112: padding at end of block bitmap is not set [ 34.734453][ T3610] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 34.734490][ T3610] EXT4-fs (loop4): This should not happen!! Data will be lost [ 34.734490][ T3610] [ 34.734503][ T3610] EXT4-fs (loop4): Total free blocks count 0 [ 34.734517][ T3610] EXT4-fs (loop4): Free/Dirty block details [ 34.734528][ T3610] EXT4-fs (loop4): free_blocks=0 [ 34.734557][ T3610] EXT4-fs (loop4): dirty_blocks=64 [ 34.734570][ T3610] EXT4-fs (loop4): Block reservation details [ 34.734581][ T3610] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 34.758763][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.772287][ T3610] syz.4.40 (3610) used greatest stack depth: 10272 bytes left [ 34.775375][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 34.840981][ T3619] loop3: detected capacity change from 0 to 2048 [ 34.863992][ T3619] EXT4-fs error (device loop3): ext4_orphan_get:1429: comm syz.3.42: bad orphan inode 214 [ 34.864018][ T3619] loop3: lost filesystem error report for type 5 error -117 [ 34.865590][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 34.865608][ C0] EXT4-fs (loop3): initial error at time 1792422383: ext4_orphan_get:1429 [ 34.865631][ C0] EXT4-fs (loop3): last error at time 1792422383: ext4_orphan_get:1429 [ 34.868117][ T3619] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.946898][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.065839][ T3629] veth1_to_bond: entered promiscuous mode [ 35.087239][ T3629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.45'. [ 35.097393][ T3629] veth1_to_bond (unregistering): left promiscuous mode [ 35.110439][ T3629] bond0: (slave bond_slave_1): Releasing backup interface [ 35.210185][ T3639] FAULT_INJECTION: forcing a failure. [ 35.210185][ T3639] name failslab, interval 1, probability 0, space 0, times 1 [ 35.210225][ T3639] CPU: 0 UID: 0 PID: 3639 Comm: syz.4.50 Not tainted syzkaller #0 PREEMPT(lazy) [ 35.210249][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.210270][ T3639] Call Trace: [ 35.210333][ T3639] [ 35.210341][ T3639] __dump_stack+0x1d/0x30 [ 35.210378][ T3639] dump_stack_lvl+0x95/0xd0 [ 35.210404][ T3639] dump_stack+0x15/0x1b [ 35.210480][ T3639] should_fail_ex+0x262/0x280 [ 35.210509][ T3639] ? __register_sysctl_table+0x52/0xbe0 [ 35.210538][ T3639] should_failslab+0x8c/0xb0 [ 35.210653][ T3639] __kmalloc_noprof+0xd0/0x4d0 [ 35.210684][ T3639] ? __register_sysctl_table+0x52/0xbe0 [ 35.210713][ T3639] __register_sysctl_table+0x52/0xbe0 [ 35.210745][ T3639] register_pidns_sysctls+0xd9/0x130 [ 35.210816][ T3639] copy_pid_ns+0x396/0x640 [ 35.210853][ T3639] ? kmem_cache_alloc_noprof+0x1f5/0x3f0 [ 35.210917][ T3639] ? create_new_namespaces+0x38/0x420 [ 35.210982][ T3639] create_new_namespaces+0x168/0x420 [ 35.211020][ T3639] unshare_nsproxy_namespaces+0x115/0x150 [ 35.211085][ T3639] ksys_unshare+0x3fd/0x6f0 [ 35.211117][ T3639] __x64_sys_unshare+0x1f/0x30 [ 35.211198][ T3639] x64_sys_call+0x1e33/0x2550 [ 35.211233][ T3639] do_syscall_64+0x112/0x360 [ 35.211264][ T3639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.211290][ T3639] RIP: 0033:0x7fa07f5be559 [ 35.211308][ T3639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.211395][ T3639] RSP: 002b:00007fa07e017028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 35.211418][ T3639] RAX: ffffffffffffffda RBX: 00007fa07f845fa0 RCX: 00007fa07f5be559 [ 35.211434][ T3639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 35.211446][ T3639] RBP: 00007fa07f655ad8 R08: 0000000000000000 R09: 0000000000000000 [ 35.211459][ T3639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.211474][ T3639] R13: 00007fa07f846038 R14: 00007fa07f845fa0 R15: 00007ffc346b06d8 [ 35.211559][ T3639] [ 35.469036][ T3652] loop0: detected capacity change from 0 to 512 [ 35.497564][ T3652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.497673][ T3652] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.519633][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.599769][ T3659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.58'. [ 35.600289][ T3659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.58'. [ 35.600389][ T3659] Zero length message leads to an empty skb [ 35.748178][ T9] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 35.749580][ T9] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 35.815093][ T3674] fido_id[3674]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.137727][ T12] IPVS: starting estimator thread 0... [ 36.188618][ T3706] Illegal XDP return value 4294965632 on prog (id 11) dev syz_tun, expect packet loss! [ 36.225664][ T3698] IPVS: using max 2544 ests per chain, 127200 per kthread [ 36.370795][ T3724] syz.3.87 uses obsolete (PF_INET,SOCK_PACKET) [ 36.410211][ T3732] netlink: 36 bytes leftover after parsing attributes in process `syz.4.91'. [ 36.410949][ T3732] netlink: 36 bytes leftover after parsing attributes in process `syz.4.91'. [ 36.541809][ T3745] can0: slcan on ptm0. [ 36.568094][ T3747] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 36.568179][ T3747] SELinux: failed to load policy [ 36.615762][ T3745] can0 (unregistered): slcan off ptm0. [ 36.646689][ T102] IPVS: starting estimator thread 0... [ 36.736419][ T3758] IPVS: using max 2400 ests per chain, 120000 per kthread [ 36.757176][ T3771] loop2: detected capacity change from 0 to 8192 [ 36.880087][ T3778] loop4: detected capacity change from 0 to 8192 [ 36.884653][ T3778] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 36.901685][ T3783] xt_connbytes: Forcing CT accounting to be enabled [ 36.902507][ T3783] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 36.918600][ T3310] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 36.918680][ T3310] FAT-fs (loop2): Filesystem has been set read-only [ 37.127634][ T3820] EXT4-fs: Ignoring removed mblk_io_submit option [ 37.127744][ T3820] ext4: Bad value for 'debug_want_extra_isize' [ 37.308282][ T3831] syz.2.122 (3831) used greatest stack depth: 9992 bytes left [ 37.356735][ T3841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.356826][ T3841] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.363539][ T3841] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 37.363751][ T3841] EXT4-fs (loop2): Remounting filesystem read-only [ 37.419470][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.445290][ T3850] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 37.459128][ T3852] netlink: 'syz.4.130': attribute type 12 has an invalid length. [ 37.459146][ T3852] netlink: 'syz.4.130': attribute type 29 has an invalid length. [ 37.459156][ T3852] netlink: 148 bytes leftover after parsing attributes in process `syz.4.130'. [ 37.459166][ T3852] netlink: 'syz.4.130': attribute type 1 has an invalid length. [ 37.459172][ T3852] netlink: 'syz.4.130': attribute type 2 has an invalid length. [ 37.459179][ T3852] netlink: 11 bytes leftover after parsing attributes in process `syz.4.130'. [ 37.505735][ T3857] bond0: (slave ip6tnl1): refused to change device type [ 37.958071][ T3902] can0: slcan on ptm0. [ 37.981741][ T3906] bond1: entered allmulticast mode [ 37.981919][ T3906] 8021q: adding VLAN 0 to HW filter on device bond1 [ 37.986436][ T3902] can0 (unregistered): slcan off ptm0. [ 38.082368][ T3919] process 'syz.1.159' launched './file1' with NULL argv: empty string added [ 38.155528][ T3921] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.183488][ T3921] EXT4-fs error (device loop1): ext4_acquire_dquot:7079: comm syz.1.160: Failed to acquire dquot type 0 [ 38.210366][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.370968][ T3932] 9p: Bad value for 'rfdno' [ 38.459957][ T3936] syz.3.167 (3936) used greatest stack depth: 9736 bytes left [ 38.699971][ T3914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.819412][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.897666][ T3980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.897783][ T3980] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.973180][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.196764][ T4009] netlink: 'syz.4.191': attribute type 1 has an invalid length. [ 39.202949][ T4009] 8021q: adding VLAN 0 to HW filter on device bond2 [ 39.252996][ T4015] set_capacity_and_notify: 7 callbacks suppressed [ 39.253012][ T4015] loop4: detected capacity change from 0 to 256 [ 39.271485][ T4015] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.279786][ T4015] FAT-fs (loop4): error, corrupted file size (i_pos 196, 2048) [ 39.279814][ T4015] FAT-fs (loop4): Filesystem has been set read-only [ 39.279879][ T4015] FAT-fs (loop4): error, invalid FAT chain (i_pos 196, last_block 8200) [ 39.321316][ T4019] rxe_eth0 speed is unknown, defaulting to 1000 [ 39.441414][ T4002] ================================================================== [ 39.441452][ T4002] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 39.441491][ T4002] [ 39.441495][ T4002] read-write to 0xffff88811b06f470 of 8 bytes by interrupt on cpu 1: [ 39.441511][ T4002] __xa_clear_mark+0xf5/0x1e0 [ 39.441539][ T4002] __folio_end_writeback+0xe7/0x530 [ 39.441571][ T4002] folio_end_writeback_no_dropbehind+0x6d/0x200 [ 39.441595][ T4002] folio_end_writeback+0x1c/0x70 [ 39.441615][ T4002] bh_end_async_write+0x1a6/0x250 [ 39.441641][ T4002] bio_endio+0x390/0x570 [ 39.441667][ T4002] blk_update_request+0x33a/0x710 [ 39.441696][ T4002] blk_mq_end_request+0x26/0x50 [ 39.441723][ T4002] lo_complete_rq+0x98/0x130 [ 39.441746][ T4002] blk_done_softirq+0x77/0xb0 [ 39.441771][ T4002] handle_softirqs+0xcc/0x2a0 [ 39.441790][ T4002] __irq_exit_rcu+0x44/0xe0 [ 39.441807][ T4002] sysvec_call_function_single+0x6b/0x80 [ 39.441829][ T4002] asm_sysvec_call_function_single+0x1a/0x20 [ 39.441860][ T4002] __tsan_read8+0x12/0x190 [ 39.441884][ T4002] copy_folio_from_iter_atomic+0x659/0x10a0 [ 39.441915][ T4002] generic_perform_write+0x2c4/0x490 [ 39.441941][ T4002] shmem_file_write_iter+0xc5/0xf0 [ 39.441963][ T4002] lo_rw_aio+0x6ab/0x760 [ 39.441982][ T4002] loop_process_work+0x569/0xad0 [ 39.442004][ T4002] loop_workfn+0x31/0x40 [ 39.442026][ T4002] process_scheduled_works+0x56a/0xa50 [ 39.442055][ T4002] worker_thread+0x569/0x750 [ 39.442086][ T4002] kthread+0x223/0x270 [ 39.442105][ T4002] ret_from_fork+0x146/0x330 [ 39.442136][ T4002] ret_from_fork_asm+0x1a/0x30 [ 39.442162][ T4002] [ 39.442168][ T4002] read to 0xffff88811b06f470 of 8 bytes by task 4002 on cpu 0: [ 39.442182][ T4002] xas_find_marked+0x211/0x650 [ 39.442210][ T4002] filemap_get_folios_tag+0xf7/0x400 [ 39.442236][ T4002] filemap_write_and_wait_range+0x1f5/0x370 [ 39.442256][ T4002] bdev_release+0xd4/0x3d0 [ 39.442273][ T4002] blkdev_release+0x15/0x20 [ 39.442293][ T4002] __fput+0x29e/0x630 [ 39.442315][ T4002] ____fput+0x1c/0x30 [ 39.442336][ T4002] task_work_run+0x130/0x1a0 [ 39.442359][ T4002] exit_to_user_mode_loop+0x1e4/0x8c0 [ 39.442395][ T4002] do_syscall_64+0x212/0x360 [ 39.442421][ T4002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.442439][ T4002] [ 39.442443][ T4002] value changed: 0xfffffffff0000000 -> 0xffffffc000000000 [ 39.442455][ T4002] [ 39.442459][ T4002] Reported by Kernel Concurrency Sanitizer on: [ 39.442470][ T4002] CPU: 0 UID: 0 PID: 4002 Comm: syz.3.188 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.442497][ T4002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.442511][ T4002] ================================================================== [ 42.693613][ T881] rxe_eth0 speed is unknown, defaulting to 1000 [ 42.736711][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 42.736725][ T29] audit: type=1400 audit(1792422391.447:318): avc: denied { write } for pid=4033 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.778869][ T29] audit: type=1400 audit(1792422391.487:319): avc: denied { write } for pid=4044 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1