last executing test programs: 2.394293295s ago: executing program 0 (id=1): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000080)=0x6e) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000110001002dbd7000f9dbdf2500000000", @ANYRES32=r6], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.361130415s ago: executing program 4 (id=5): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f00000001c0)='./bus\x00', 0x4c27e, 0x2) fcntl$setstatus(r0, 0x4, 0x6c00) 2.235417547s ago: executing program 3 (id=7): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000001fc0)=""/4106, 0x100a}], 0x2}}], 0x1, 0x2040000, 0x0) 2.235217518s ago: executing program 4 (id=8): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r1, r0, 0x0, 0xfffa83) lsetxattr$trusted_overlay_opaque(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x1) 2.235054487s ago: executing program 3 (id=9): r0 = memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00\x00\x00', 0x0) fallocate(r0, 0x0, 0x800657, 0x40000b7) lseek(r0, 0x828, 0x4) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x6, 0x0) 2.153323179s ago: executing program 0 (id=11): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x400000000010, 0x3, 0x0) mkdir(0x0, 0x22) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r3, 0x0, 0xc) 1.425723113s ago: executing program 4 (id=14): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x3, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r2, &(0x7f00000000c0), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)) 1.255763266s ago: executing program 0 (id=18): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000400)='ns\x00') readlinkat(r0, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000540)=0x2eaab88c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) syslog(0x3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) r7 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="6220912a3a2a20726d"], 0x9) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) 1.024718571s ago: executing program 2 (id=20): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000200000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) 883.241393ms ago: executing program 2 (id=21): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000100)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x2d}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r1) 787.196585ms ago: executing program 3 (id=22): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000380)=r0, 0x4) sendmsg$sock(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="67f1", 0xfdef}], 0x1}, 0x40840) 736.806796ms ago: executing program 4 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xffffffffffffff95, 0x2, {0x1, 0x5}}}]}, 0x3c}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 734.662136ms ago: executing program 2 (id=24): r0 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x10000000000000) mkdir(&(0x7f0000000040)='./control\x00', 0x19d) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) open(&(0x7f0000000080)='./control\x00', 0x48800, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 637.327378ms ago: executing program 3 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x30000000}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)=0x2, 0x4) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(r3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x383, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x4}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000)={0x0, 0x6}, 0x8) fcntl$notify(r0, 0x402, 0x8000001f) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) 629.586968ms ago: executing program 2 (id=26): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xf, @empty, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff1, @empty, 0x2}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xa, @empty, 0x9f}, 0x1c) 560.22401ms ago: executing program 2 (id=27): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000", @ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x2, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x3, 0x0, 0x5, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 560.100359ms ago: executing program 3 (id=28): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x32, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) 554.66563ms ago: executing program 2 (id=30): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80200, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 472.412721ms ago: executing program 3 (id=32): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000400)='.\x00', 0xa4000021) close(r0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) socket(0x11, 0x3, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000080)=0x4) recvmmsg(r4, &(0x7f0000007900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f7}) socket$inet(0x2, 0x80001, 0x84) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4000845) sendfile(r2, r1, 0x0, 0xfffa83) 472.234021ms ago: executing program 1 (id=33): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001200010100000000000000001e000400000000000000030000000000000000000000000000fff600"/56, @ANYRES32=0x0, @ANYBLOB="00000000fdffffff0004"], 0x4c}, 0x1, 0x0, 0x0, 0x20004400}, 0x800) 471.771341ms ago: executing program 1 (id=34): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000000)='GPL\x00', 0xa}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x100c3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x3, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001c00), 0x400000000000159, 0x40840) write(r2, &(0x7f00000000c0), 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)) 368.321153ms ago: executing program 0 (id=35): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 129.752608ms ago: executing program 1 (id=36): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x47f2, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0) msgget(0x3, 0x405) 112.232948ms ago: executing program 1 (id=37): sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e27, @loopback}, 0x10) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140), &(0x7f0000000200)=0x8) 8.76368ms ago: executing program 1 (id=38): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, &(0x7f0000001fc0)=[{0xfffffffffffffffc}], 0x1, 0x4d0, 0x0, 0x2, 0x0, 0x2}) 8.3554ms ago: executing program 1 (id=39): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$netlink(0x10, 0x3, 0x80000000004) write(r1, &(0x7f0000000000)="29000000140005b7ff000000040860eb01ff00159f02c26ed638eeb738256e06a40e07fff0797ed9fa", 0x29) io_setup(0x5, &(0x7f0000000000)=0x0) r3 = eventfd(0x0) io_submit(r2, 0x2, &(0x7f0000000040)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r3, &(0x7f0000000180)="0000fd60d24b6c82", 0x8, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x40, r3, 0x0, 0x0, 0xfffffffffffff28d, 0x0, 0x2}]) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 0s ago: executing program 0 (id=40): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x32) write(r2, &(0x7f00000001c0)="49bda8f11851b8436bebb25ac5f8202ffbcc3d0b6c01901fba8fd68870427bf89509b9bd6d0982b17d7c28e9f251e95abefe60", 0x33) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts. [ 24.524740][ T29] audit: type=1400 audit(1758545730.535:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.525614][ T3294] cgroup: Unknown subsys name 'net' [ 24.547554][ T29] audit: type=1400 audit(1758545730.535:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.574938][ T29] audit: type=1400 audit(1758545730.565:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.741624][ T3294] cgroup: Unknown subsys name 'cpuset' [ 24.747806][ T3294] cgroup: Unknown subsys name 'rlimit' [ 24.856678][ T29] audit: type=1400 audit(1758545730.865:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.880280][ T29] audit: type=1400 audit(1758545730.865:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.900836][ T29] audit: type=1400 audit(1758545730.865:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.908163][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.921560][ T29] audit: type=1400 audit(1758545730.865:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.950510][ T29] audit: type=1400 audit(1758545730.865:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.975504][ T29] audit: type=1400 audit(1758545730.865:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.999235][ T29] audit: type=1400 audit(1758545730.935:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.035766][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.807611][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 26.853455][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 26.909575][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.916787][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.924391][ T3304] bridge_slave_0: entered allmulticast mode [ 26.930929][ T3304] bridge_slave_0: entered promiscuous mode [ 26.937693][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 26.960083][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.967201][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.974428][ T3304] bridge_slave_1: entered allmulticast mode [ 26.980745][ T3304] bridge_slave_1: entered promiscuous mode [ 27.024248][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.033517][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.050699][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.057842][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.065185][ T3314] bridge_slave_0: entered allmulticast mode [ 27.071862][ T3314] bridge_slave_0: entered promiscuous mode [ 27.078972][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.099459][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.106867][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.114035][ T3314] bridge_slave_1: entered allmulticast mode [ 27.120465][ T3314] bridge_slave_1: entered promiscuous mode [ 27.149226][ T3304] team0: Port device team_slave_0 added [ 27.155779][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 27.175959][ T3304] team0: Port device team_slave_1 added [ 27.190539][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.197731][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.204945][ T3312] bridge_slave_0: entered allmulticast mode [ 27.211330][ T3312] bridge_slave_0: entered promiscuous mode [ 27.218785][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.227965][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.235053][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.242171][ T3312] bridge_slave_1: entered allmulticast mode [ 27.248779][ T3312] bridge_slave_1: entered promiscuous mode [ 27.272212][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.290226][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.297267][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.323153][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.334402][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.341366][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.367410][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.378246][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.385349][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.392556][ T3311] bridge_slave_0: entered allmulticast mode [ 27.398950][ T3311] bridge_slave_0: entered promiscuous mode [ 27.417606][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.424690][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.431889][ T3311] bridge_slave_1: entered allmulticast mode [ 27.438237][ T3311] bridge_slave_1: entered promiscuous mode [ 27.457365][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.472719][ T3314] team0: Port device team_slave_0 added [ 27.485197][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.499915][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.510234][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.519965][ T3314] team0: Port device team_slave_1 added [ 27.544557][ T3304] hsr_slave_0: entered promiscuous mode [ 27.550679][ T3304] hsr_slave_1: entered promiscuous mode [ 27.570373][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.577465][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.584698][ T3309] bridge_slave_0: entered allmulticast mode [ 27.591173][ T3309] bridge_slave_0: entered promiscuous mode [ 27.603948][ T3312] team0: Port device team_slave_0 added [ 27.610510][ T3311] team0: Port device team_slave_0 added [ 27.616494][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.623600][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.649940][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.661023][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.668070][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.675370][ T3309] bridge_slave_1: entered allmulticast mode [ 27.681752][ T3309] bridge_slave_1: entered promiscuous mode [ 27.688307][ T3312] team0: Port device team_slave_1 added [ 27.694854][ T3311] team0: Port device team_slave_1 added [ 27.705599][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.712619][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.738558][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.778826][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.797972][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.805046][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.831004][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.845287][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.858783][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.865815][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.891715][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.907556][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.914653][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.940597][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.970996][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.977950][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.003894][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.024313][ T3309] team0: Port device team_slave_0 added [ 28.035584][ T3314] hsr_slave_0: entered promiscuous mode [ 28.041563][ T3314] hsr_slave_1: entered promiscuous mode [ 28.047490][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 28.053269][ T3314] Cannot create hsr debugfs directory [ 28.070274][ T3309] team0: Port device team_slave_1 added [ 28.093808][ T3311] hsr_slave_0: entered promiscuous mode [ 28.099894][ T3311] hsr_slave_1: entered promiscuous mode [ 28.105801][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 28.111585][ T3311] Cannot create hsr debugfs directory [ 28.134519][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.141552][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.167457][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.196408][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.203602][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.229643][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.242304][ T3312] hsr_slave_0: entered promiscuous mode [ 28.248253][ T3312] hsr_slave_1: entered promiscuous mode [ 28.254249][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 28.259963][ T3312] Cannot create hsr debugfs directory [ 28.327467][ T3309] hsr_slave_0: entered promiscuous mode [ 28.333784][ T3309] hsr_slave_1: entered promiscuous mode [ 28.339733][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 28.345512][ T3309] Cannot create hsr debugfs directory [ 28.386236][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.407214][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.424707][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.446691][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.488530][ T3314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.500347][ T3314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.509198][ T3314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.517934][ T3314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.543203][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.551800][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.572790][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.584774][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.593642][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.628698][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.637494][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.649139][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.657688][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.666075][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.680904][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.688078][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.699187][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.706320][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.739311][ T3312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.754224][ T3312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.765247][ T3312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.782235][ T3312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.795776][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.806892][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.817376][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.833537][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.857554][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.864654][ T404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.888361][ T404] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.895463][ T404] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.927362][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.944490][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.955841][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.976322][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.985401][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.992554][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.004907][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.014412][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.021707][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.033839][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.041027][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.069276][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.078919][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.096255][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.103344][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.114813][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.140100][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.151889][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.159005][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.178852][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.185975][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.204090][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.281810][ T3304] veth0_vlan: entered promiscuous mode [ 29.294527][ T3304] veth1_vlan: entered promiscuous mode [ 29.325670][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.340656][ T3304] veth0_macvtap: entered promiscuous mode [ 29.363410][ T3304] veth1_macvtap: entered promiscuous mode [ 29.377808][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.414134][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.452177][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.469071][ T3314] veth0_vlan: entered promiscuous mode [ 29.478584][ T3311] veth0_vlan: entered promiscuous mode [ 29.489884][ T3314] veth1_vlan: entered promiscuous mode [ 29.502433][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.518087][ T3311] veth1_vlan: entered promiscuous mode [ 29.527649][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.541320][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.550272][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.566471][ T3312] veth0_vlan: entered promiscuous mode [ 29.572644][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 29.572654][ T29] audit: type=1400 audit(1758545735.585:81): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.c1Aeqe/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.577369][ T3312] veth1_vlan: entered promiscuous mode [ 29.578679][ T29] audit: type=1400 audit(1758545735.585:82): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.578700][ T29] audit: type=1400 audit(1758545735.585:83): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.c1Aeqe/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.590659][ T29] audit: type=1400 audit(1758545735.585:84): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.612239][ T3311] veth0_macvtap: entered promiscuous mode [ 29.630347][ T29] audit: type=1400 audit(1758545735.585:85): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.c1Aeqe/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.659901][ T3311] veth1_macvtap: entered promiscuous mode [ 29.677135][ T29] audit: type=1400 audit(1758545735.585:86): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/root/syzkaller.c1Aeqe/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4385 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.694854][ T3314] veth0_macvtap: entered promiscuous mode [ 29.709344][ T29] audit: type=1400 audit(1758545735.585:87): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.719118][ T3309] veth0_vlan: entered promiscuous mode [ 29.744344][ T29] audit: type=1400 audit(1758545735.615:88): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.796273][ T29] audit: type=1400 audit(1758545735.615:89): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="gadgetfs" ino=4392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 29.818244][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.820760][ T3304] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.826979][ T3314] veth1_macvtap: entered promiscuous mode [ 29.854550][ T29] audit: type=1400 audit(1758545735.865:90): avc: denied { read write } for pid=3304 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.868556][ T3312] veth0_macvtap: entered promiscuous mode [ 29.892991][ T3309] veth1_vlan: entered promiscuous mode [ 29.904178][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.915667][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.925029][ T3312] veth1_macvtap: entered promiscuous mode [ 29.937740][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.949394][ T3309] veth0_macvtap: entered promiscuous mode [ 29.957653][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.971269][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.985485][ T31] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.010989][ T3309] veth1_macvtap: entered promiscuous mode [ 30.017740][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.045000][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.062853][ T31] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.083134][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.099900][ T3445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.122764][ T3445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.158644][ T3482] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 30.163672][ T3445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.190952][ T3445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.231874][ T3445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.250927][ T3445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.282918][ T3445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.302704][ T3445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.332931][ T3445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.359429][ T3445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.391245][ T3445] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.411210][ T3445] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.500298][ T3445] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.168803][ C1] hrtimer: interrupt took 37571 ns [ 31.209041][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.216231][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.245633][ T3519] Zero length message leads to an empty skb [ 31.313616][ T3522] loop1: detected capacity change from 0 to 128 [ 31.334411][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 31.408535][ T3517] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 31.592615][ T3445] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.615403][ T3517] syz.4.14 (3517) used greatest stack depth: 10752 bytes left [ 31.732343][ T3445] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.764646][ T3445] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.774155][ T3445] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 31.795697][ T3539] syzkaller0: entered promiscuous mode [ 31.801223][ T3539] syzkaller0: entered allmulticast mode [ 31.808657][ T3539] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 31.824473][ T3539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.23'. [ 31.835458][ T3529] syz.1.17: attempt to access beyond end of device [ 31.835458][ T3529] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 31.848822][ T3529] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 31.862543][ T3522] syz.1.17: attempt to access beyond end of device [ 31.862543][ T3522] loop1: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 31.875947][ T3522] Buffer I/O error on dev loop1, logical block 128, lost async page write [ 31.905662][ T3542] syz.3.25 (3542) used greatest stack depth: 10536 bytes left [ 31.960198][ T3553] syzkaller0: entered promiscuous mode [ 31.965757][ T3553] syzkaller0: entered allmulticast mode [ 32.055755][ T3561] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.062946][ T3561] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.223251][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 32.243853][ T3561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 32.297043][ T404] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.312009][ T404] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.326341][ T404] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.353432][ T404] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 32.507195][ T3576] loop0: detected capacity change from 0 to 128 [ 32.582966][ T3576] ================================================================== [ 32.591068][ T3576] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 32.598987][ T3576] [ 32.601305][ T3576] write to 0xffff8881077d9414 of 4 bytes by task 3580 on cpu 1: [ 32.609359][ T3576] xas_set_mark+0x12b/0x140 [ 32.613902][ T3576] __folio_start_writeback+0x1dd/0x440 [ 32.619381][ T3576] __block_write_full_folio+0x53a/0x8f0 [ 32.624935][ T3576] block_write_full_folio+0x2c2/0x2e0 [ 32.630315][ T3576] mpage_writepages+0x6cf/0x1250 [ 32.635298][ T3576] fat_writepages+0x24/0x30 [ 32.639814][ T3576] do_writepages+0x1c3/0x310 [ 32.644411][ T3576] file_write_and_wait_range+0x156/0x2c0 [ 32.650135][ T3576] __generic_file_fsync+0x46/0x140 [ 32.655244][ T3576] fat_file_fsync+0x49/0x100 [ 32.659842][ T3576] vfs_fsync_range+0x10a/0x130 [ 32.664620][ T3576] generic_file_write_iter+0x1b8/0x2f0 [ 32.670094][ T3576] iter_file_splice_write+0x666/0xa60 [ 32.675466][ T3576] direct_splice_actor+0x156/0x2a0 [ 32.680576][ T3576] splice_direct_to_actor+0x312/0x680 [ 32.685949][ T3576] do_splice_direct+0xda/0x150 [ 32.690708][ T3576] do_sendfile+0x380/0x650 [ 32.695137][ T3576] __x64_sys_sendfile64+0x105/0x150 [ 32.700340][ T3576] x64_sys_call+0x2bb0/0x2ff0 [ 32.705021][ T3576] do_syscall_64+0xd2/0x200 [ 32.709538][ T3576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.715430][ T3576] [ 32.717751][ T3576] read to 0xffff8881077d9414 of 4 bytes by task 3576 on cpu 0: [ 32.725290][ T3576] __writeback_single_inode+0x1f9/0x7c0 [ 32.730838][ T3576] writeback_single_inode+0x167/0x3e0 [ 32.736217][ T3576] sync_inode_metadata+0x5b/0x90 [ 32.741160][ T3576] __generic_file_fsync+0xf8/0x140 [ 32.746266][ T3576] fat_file_fsync+0x49/0x100 [ 32.750850][ T3576] vfs_fsync_range+0x10a/0x130 [ 32.755628][ T3576] generic_file_write_iter+0x1b8/0x2f0 [ 32.761183][ T3576] iter_file_splice_write+0x666/0xa60 [ 32.766560][ T3576] direct_splice_actor+0x156/0x2a0 [ 32.771671][ T3576] splice_direct_to_actor+0x312/0x680 [ 32.777043][ T3576] do_splice_direct+0xda/0x150 [ 32.781865][ T3576] do_sendfile+0x380/0x650 [ 32.786293][ T3576] __x64_sys_sendfile64+0x105/0x150 [ 32.791497][ T3576] x64_sys_call+0x2bb0/0x2ff0 [ 32.796170][ T3576] do_syscall_64+0xd2/0x200 [ 32.800764][ T3576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.806672][ T3576] [ 32.808987][ T3576] value changed: 0x0a000021 -> 0x04000021 [ 32.814695][ T3576] [ 32.817040][ T3576] Reported by Kernel Concurrency Sanitizer on: [ 32.823288][ T3576] CPU: 0 UID: 0 PID: 3576 Comm: syz.0.40 Not tainted syzkaller #0 PREEMPT(voluntary) [ 32.832836][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 32.842886][ T3576] ================================================================== [ 32.900117][ T3576] syz.0.40: attempt to access beyond end of device [ 32.900117][ T3576] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 32.913560][ T3576] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 32.922483][ T3576] syz.0.40: attempt to access beyond end of device [ 32.922483][ T3576] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 32.935811][ T3576] Buffer I/O error on dev loop0, logical block 128, lost async page write