last executing test programs: 15.287809501s ago: executing program 1 (id=24): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1214c91, &(0x7f00000000c0)=ANY=[], 0xfe, 0x879, &(0x7f0000000700)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 15.151026954s ago: executing program 1 (id=25): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x15, 0x1, &(0x7f00000000c0)=@raw=[@jmp={0x5, 0x0, 0x9}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28}, 0x94) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x10, 0x2, 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@ipv4_newnexthop={0x20, 0x68, 0x401, 0x70bd25, 0x0, {}, [@NHA_OIF={0x8, 0x5, 0x1}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newnexthop={0x50, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x14, 0x2, [{0x2, 0x1}, {0x1, 0x1}]}, @NHA_RES_GROUP={0x1c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0xe0b}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x64}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8, 0x3, 0x64}]}]}, 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newlink={0x28, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x21120, 0x68591}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x4000804) 13.530571473s ago: executing program 1 (id=34): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) poll(&(0x7f00000003c0)=[{r1}, {r1}], 0x2, 0x5e5f) shutdown(r1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r4, &(0x7f0000000600)=""/102400, 0x19000) sched_setaffinity(0x0, 0x8, &(0x7f0000019600)=0x410000002) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) socket$nl_route(0x10, 0x3, 0x0) bind$can_j1939(r2, &(0x7f0000019640)={0x1d, r3, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000019680)={0x1, 0x8, &(0x7f0000019740)=ANY=[], 0x0}, 0x94) mknod$loop(&(0x7f0000019780)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000197c0)='./file0\x00', 0x0, 0x0) socket$inet6(0xa, 0x3, 0x40) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000019880)={'vcan0\x00'}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x60}, 0x1, 0x1000000, 0x0, 0x24004800}, 0x4) 12.212001175s ago: executing program 1 (id=43): syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x180c8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000340)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x14927e, 0xd0) mount(&(0x7f0000000600)=@loop={'/dev/loop', 0x0}, &(0x7f0000000640)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = open(&(0x7f0000000700)='./bus\x00', 0x8000, 0x30) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x80000000, 0x6, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09030000000000000073ac58818d78c660e677df8dc905b90242b7c5a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d30007d702000000000000000000000001", [0xb]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ff) 11.696604018s ago: executing program 1 (id=45): r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4008, r0}, 0x18) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr', 0x3) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 11.17062767s ago: executing program 1 (id=46): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000006100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000006140)=0x8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000068c0)=0x7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000006980)='asymmetric\x00', &(0x7f00000069c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006c40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000006c80)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000006d00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000006d40), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000006e00)=0x9, 0x4) sendto$inet6(r3, &(0x7f0000006e40)="2ae0e710", 0x4, 0x0, &(0x7f0000006e80)={0xa, 0x0, 0xfffffffe, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000006ec0)=0x6, 0x4) recvmmsg(r3, &(0x7f0000006f00), 0x4000000000001e9, 0x10162, 0x0) 11.152765641s ago: executing program 32 (id=46): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000006100)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000006140)=0x8) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000068c0)=0x7) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000006980)='asymmetric\x00', &(0x7f00000069c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000006c40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000006c80)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000006d00), 0x651, 0x0) recvmmsg(r1, &(0x7f0000006d40), 0x10106, 0x2, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000006e00)=0x9, 0x4) sendto$inet6(r3, &(0x7f0000006e40)="2ae0e710", 0x4, 0x0, &(0x7f0000006e80)={0xa, 0x0, 0xfffffffe, @mcast1}, 0x1c) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000006ec0)=0x6, 0x4) recvmmsg(r3, &(0x7f0000006f00), 0x4000000000001e9, 0x10162, 0x0) 4.54681228s ago: executing program 0 (id=88): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff000000000000000000"], 0x76) 4.377596114s ago: executing program 0 (id=90): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x4000, 0x4, 0x0, 0x0, 0x2}, {0x0, 0x1000, 0x0, 0x0, 0x2, 0x2}, {0x0, 0x0, 0x400000000000000}, 0x0, 0x0, 0x1, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x4008045}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x54, r2, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 4.251913837s ago: executing program 0 (id=93): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r0, &(0x7f00000005c0)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) close(r0) 4.010781623s ago: executing program 0 (id=94): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c) 3.796066588s ago: executing program 4 (id=96): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000480)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="4182aa3d71291629373dd3fe0a0c84d8749982e09860b6496c3b2a2c0a62f12873b7f0", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="e51e84d5ae769a5d88e1d9381c4754096bacfa1e43bdbf5059c898647bbeab8a44963df8fb9b4a4edd53f15dc713e205e1665e9546232f12d3017b1a850dc5264ec65f8183c7608117c92cc06851af8221de2536877e8a3ac7eaed6e0116a853cedfcabe4d032ff577a3baa8f0370e833923249cdffdb33e2858bf1584eeda6d5c1156286b2c75d40171959d49e09205835050b98f2b64c0725814375d130d9eedd2ddf0e8ae98ed2c9edc8423be49f4f0c4156206f34c3df920e53c62b1de371eb34ed746a836aec7344545af843915f1420db72667b8ba8c4f419100d2", 0xde}], 0x1}}], 0x2, 0x48045) close_range(r0, 0xffffffffffffffff, 0x0) 3.71478091s ago: executing program 4 (id=98): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0x5) setreuid(r4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x1}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x0, 0xffff], [0x0, 0xffff], 0x0, 0x2, 0x2}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x578}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x953c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 2.671716555s ago: executing program 4 (id=104): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x1, 0xc, 0x9, 0x6, 0x2, 0xf, 0xf, 0x82, 0x59, 0x3, [0xfffffffe, 0xfffffffa, 0xb, 0x4, 0x7, 0x3, 0x0, 0x1003]}}) 2.518438209s ago: executing program 2 (id=105): r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='3\n', 0x2) 1.886736484s ago: executing program 4 (id=107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x5a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0xfd, 0x5, 0x42}]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000480)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="4182aa3d71291629373dd3fe0a0c84d8749982e09860b6496c3b2a2c0a62f12873b7f0", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="e51e84d5ae769a5d88e1d9381c4754096bacfa1e43bdbf5059c898647bbeab8a44963df8fb9b4a4edd53f15dc713e205e1665e9546232f12d3017b1a850dc5264ec65f8183c7608117c92cc06851af8221de2536877e8a3ac7eaed6e0116a853cedfcabe4d032ff577a3baa8f0370e833923249cdffdb33e2858bf1584eeda6d5c1156286b2c75d40171959d49e09205835050b98f2b64c0725814375d130d9eedd2ddf0e8ae98ed2c9edc8423be49f4f0c4156206f34c3df920e53c62b1de371eb34ed746a836aec7344545af843915f1420db72667b8ba8c4f419100d2", 0xde}], 0x1}}], 0x2, 0x48045) close_range(r0, 0xffffffffffffffff, 0x0) 1.886550574s ago: executing program 2 (id=108): mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xffffffb8, @loopback, 0x9}}, 0x0, 0x0, 0x39, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) 1.886455724s ago: executing program 5 (id=47): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x1e, 0x0, 0x3}, 0x28) r4 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c) 1.886081154s ago: executing program 3 (id=109): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x6d, 0x6, 0x0, 0x0, 0x0, 0x9, 0x10022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x7, @perf_config_ext={0x8}, 0x10b518, 0x0, 0x11000, 0x1, 0xffffffff, 0x1, 0x7, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80001, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x10000}, 0x0, 0x1000000000, 0x2, 0x0, 0x0, 0x8001, 0x5, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000180)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000300)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000380)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="99", 0x1}], 0x1}, 0x844) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xeafbff3, &(0x7f0000000580)=[{&(0x7f00000005c0)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000a40)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000ac0)={0x4, 0x80, 0x2, 0x7, 0x2, 0x7f, 0x0, 0x6af, 0x38300, 0x5, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x101, 0x4, @perf_config_ext={0xc, 0xfff8000000000000}, 0x2000, 0x4, 0x5, 0x5, 0xb, 0x8, 0x400, 0x0, 0x9, 0x0, 0x921}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0x3, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000d80)=ANY=[@ANYBLOB="9fedcb7968ddc36c8f263408008daa"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000e40)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000001040)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20002008}, 0xc, &(0x7f0000001000)={&(0x7f0000000e80)={0x168, 0x2e, 0x800, 0x70bd28, 0x25dfdbfe, {0x6}, [@generic="27319b736716315858737c46432e13e9e5c2204078c3962e1edbbf31a5087194e6c10659f7bc5a4edd015ba3061334e8940c8d7873000731a3851d21ea64fb772b22060025a6d2e9da8e163f35f0ddc17306a65b490c7e1561212e740532cecd1fe0f9e291cffef609c3e98d7f143ad2b3e5e833ed0d009f4fff977e17aea5a38a45b0340955e2aea11d161970b0a7b1f05bd18645f5266bf96dac3063c5165e0f2727025b7bb91413d81317eed1ea9bd7446b080c7483a251761c6be19ba9faed9cdafb9565efc7fab5dd5cf916", @nested={0x38, 0x167, 0x0, 0x1, [@typed={0x14, 0x69, 0x0, 0x0, @ipv6=@loopback}, @typed={0x7, 0x125, 0x0, 0x0, @str='\\)\x00'}, @typed={0xb, 0xd1, 0x0, 0x0, @str='taprio\x00'}, @typed={0xc, 0x142, 0x0, 0x0, @u64=0x4}]}, @nested={0x49, 0x31, 0x0, 0x1, [@nested={0x4, 0xf4}, @generic="7da3f980a83f6a324447fd86b767264362052e4a7c3cd8988169a1c159bc02524ff1a0752f6794487c5b7c8f2e93d156f99f57ece14331db03a3cf233b5d9718b6"]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000480)={'ipvlan1\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r6, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x3, 0x10, &(0x7f0000000980)=ANY=[@ANYRES32=r7, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000a00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x24040050) 1.878821374s ago: executing program 4 (id=110): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff00000000000000000000ffffac141419ff020000000000"], 0x76) 1.830268746s ago: executing program 0 (id=111): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000100)={r1, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f00000001c0)=0x84) 916.271818ms ago: executing program 5 (id=112): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r0, 0x890b, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000004c0)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r2, &(0x7f0000000580)=""/102392, 0x18ff8) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000195c0)='./sys\x00', 0x1ff) sendto(r0, &(0x7f0000000000), 0x0, 0x4c840, &(0x7f0000000100)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80) mount(0x0, &(0x7f0000019600)='./sys\x00', &(0x7f0000019640)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000019680)='./sys/bus/acpi/devices/PNP0501:00/status\x00', 0x0, 0x0) 557.977916ms ago: executing program 4 (id=113): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000) io_submit(0x0, 0x0, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_clone(0x80881000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000ffff27bd7000eedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="150c000000000000240012800b0001006970766c616e00001400028006000200010000000600010000000000080005", @ANYRES32, @ANYBLOB="0c9299f9c700d0391d0bed03db924da64b36022b6a81f8ffa1eb16ac0f6bffc8d2d572b621c51fed5e4a68e37cfd08e0bd96e6fff8f39e6c60c5b3c0bfe24295150bc54a6d145980c61a795cbd039be2bb6885dcdd69cdc30de4c7fa6e"], 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x8000) r4 = io_uring_setup(0x8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f0000000680)={0x3e8, 0x0, 0x0, '\x00', 0x1}, 0x1) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, &(0x7f00000006c0)={0x100, 0x0, 0x1, '\x00', 0xa}, 0x1) io_uring_enter(r4, 0x0, 0x3f, 0x9, &(0x7f0000000700), 0x18) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8"], 0x48}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000600)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000640)={'veth0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001400010604000000000000000a402000", @ANYRES32=r7, @ANYBLOB="14000200200100"], 0x34}}, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000880)='veth0\x00', 0x6) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0xa, 0x5000, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x80) openat$procfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/proc/asound/seq/clients\x00', 0x0, 0x0) 506.708228ms ago: executing program 0 (id=114): sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000006c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000740), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000800)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./tracing\x00', 0x1f7) mount(0x0, &(0x7f0000000880)='./tracing\x00', &(0x7f00000008c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r0, 0x0, 0x0) 419.290829ms ago: executing program 5 (id=115): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) syz_clone(0x6408f400, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000600)="0014c5ffffff", 0x6) 417.788849ms ago: executing program 2 (id=116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r0, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f000000c080)=[{0x0}, {&(0x7f00000001c0)=""/75, 0x4b}], 0x2}, 0x20) 405.32406ms ago: executing program 3 (id=117): r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='3\n', 0x2) 278.733283ms ago: executing program 2 (id=118): epoll_create(0x4) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket(0x10, 0x803, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socket$inet(0x2, 0x3, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb080003"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 195.190775ms ago: executing program 3 (id=119): r0 = open(&(0x7f0000000140)='.\x00', 0x0, 0x112) getdents(r0, 0x0, 0x0) 151.529976ms ago: executing program 3 (id=120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000480)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000580)="4182aa3d71291629373dd3fe0a0c84d8749982e09860b6496c3b2a2c0a62f12873b7f0", 0x23}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="e51e84d5ae769a5d88e1d9381c4754096bacfa1e43bdbf5059c898647bbeab8a44963df8fb9b4a4edd53f15dc713e205e1665e9546232f12d3017b1a850dc5264ec65f8183c7608117c92cc06851af8221de2536877e8a3ac7eaed6e0116a853cedfcabe4d032ff577a3baa8f0370e833923249cdffdb33e2858bf1584eeda6d5c1156286b2c75d40171959d49e09205835050b98f2b64c0725814375d130d9eedd2ddf0e8ae98ed2c9edc8423be49f4f0c4156206f34c3df920e53c62b1de371eb34ed746a836aec7344545af843915f1420db72667b8ba8c4f419100d2", 0xde}], 0x1}}], 0x2, 0x48045) close_range(r0, 0xffffffffffffffff, 0x0) 141.488956ms ago: executing program 2 (id=121): bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)=@generic={0x0}, 0x18) perf_event_open(0x0, 0x0, 0x80000000003, 0xffffffffffffffff, 0x1) mq_open(0x0, 0x8c2, 0x30, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x6, 0xc, &(0x7f0000000f80)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001040)={{r0}, &(0x7f0000001080), &(0x7f00000010c0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001100)={r1, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000001180)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 71.118078ms ago: executing program 3 (id=122): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, 0x0) 187.28µs ago: executing program 2 (id=123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x5001}) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) write$tun(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03031b003000320006006300000000442fff00000000000000000000ffffac141419ff020000000000"], 0x76) 0s ago: executing program 3 (id=124): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) kernel console output (not intermixed with test programs): [ 26.649696][ T30] audit: type=1400 audit(1792048745.913:103): avc: denied { search } for pid=3188 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 26.649749][ T30] audit: type=1400 audit(1792048745.913:104): avc: denied { search } for pid=3188 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=483 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.300060][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 27.300079][ T30] audit: type=1400 audit(1792048746.563:116): avc: denied { write } for pid=3216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.336328][ T30] audit: type=1400 audit(1792048746.603:117): avc: denied { write } for pid=3227 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.816078][ T30] audit: type=1400 audit(1792048747.083:118): avc: denied { write } for pid=3230 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.849841][ T30] audit: type=1400 audit(1792048747.113:119): avc: denied { write } for pid=3241 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.933271][ T30] audit: type=1400 audit(1792048747.203:120): avc: denied { write } for pid=3244 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 27.971447][ T30] audit: type=1400 audit(1792048747.243:121): avc: denied { write } for pid=3255 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.052108][ T30] audit: type=1400 audit(1792048747.323:122): avc: denied { write } for pid=3258 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.086741][ T30] audit: type=1400 audit(1792048747.363:123): avc: denied { write } for pid=3269 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.205884][ T30] audit: type=1400 audit(1792048747.473:124): avc: denied { write } for pid=3273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.242177][ T30] audit: type=1400 audit(1792048747.513:125): avc: denied { write } for pid=3284 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. [ 32.814493][ T30] audit: type=1400 audit(1792048752.083:126): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.814852][ T30] audit: type=1400 audit(1792048752.083:127): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.815505][ T3293] cgroup: Unknown subsys name 'net' [ 32.815804][ T30] audit: type=1400 audit(1792048752.083:128): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.951518][ T3293] cgroup: Unknown subsys name 'cpuset' [ 32.952438][ T3293] cgroup: Unknown subsys name 'rlimit' [ 33.040722][ T30] audit: type=1400 audit(1792048752.303:129): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.041836][ T30] audit: type=1400 audit(1792048752.313:130): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.041979][ T30] audit: type=1400 audit(1792048752.313:131): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.042202][ T30] audit: type=1400 audit(1792048752.313:132): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.046987][ T30] audit: type=1400 audit(1792048752.313:133): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.047246][ T30] audit: type=1400 audit(1792048752.313:134): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.076421][ T30] audit: type=1400 audit(1792048752.343:135): avc: denied { read } for pid=3030 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.119600][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.223091][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.536490][ T3304] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.537047][ T3304] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.537321][ T3304] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.537888][ T3311] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 34.547658][ T3305] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 34.617500][ T3310] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 34.633205][ T3308] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 34.679212][ T3304] infiniband rxe0: set active [ 34.679228][ T3304] infiniband rxe0: added rxe_eth0 [ 34.695979][ T3304] RDS/IB: rxe0: added [ 34.696006][ T3304] smc: adding ib device rxe0 with port count 1 [ 34.696029][ T3304] smc: ib device rxe0 port 1 has no pnetid [ 34.723990][ T11] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.724173][ T24] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.746560][ T3304] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.808347][ T3304] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.857454][ T3310] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.935711][ T3304] rxe_eth0 speed is unknown, defaulting to 1000 [ 34.987215][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.987308][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.987403][ T3305] bridge_slave_0: entered allmulticast mode [ 34.988122][ T3305] bridge_slave_0: entered promiscuous mode [ 35.024349][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.024384][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.024519][ T3305] bridge_slave_1: entered allmulticast mode [ 35.025077][ T3305] bridge_slave_1: entered promiscuous mode [ 35.041687][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.041725][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.041947][ T3311] bridge_slave_0: entered allmulticast mode [ 35.043279][ T3311] bridge_slave_0: entered promiscuous mode [ 35.045997][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.046057][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.046417][ T3311] bridge_slave_1: entered allmulticast mode [ 35.048172][ T3311] bridge_slave_1: entered promiscuous mode [ 35.074913][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.077929][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.106690][ T3311] team0: Port device team_slave_0 added [ 35.108966][ T3311] team0: Port device team_slave_1 added [ 35.153953][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.153979][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.154061][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.162719][ T3304] rxe_eth0 speed is unknown, defaulting to 1000 [ 35.197859][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.197964][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.198182][ T3308] bridge_slave_0: entered allmulticast mode [ 35.201979][ T3308] bridge_slave_0: entered promiscuous mode [ 35.204834][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.204848][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.204883][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.223111][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.278873][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.278997][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.279194][ T3308] bridge_slave_1: entered allmulticast mode [ 35.280516][ T3308] bridge_slave_1: entered promiscuous mode [ 35.285474][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.339338][ T3305] team0: Port device team_slave_0 added [ 35.346093][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.357313][ T3305] team0: Port device team_slave_1 added [ 35.373968][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.418529][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.418546][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.418582][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.427027][ T3311] hsr_slave_0: entered promiscuous mode [ 35.428212][ T3311] hsr_slave_1: entered promiscuous mode [ 35.431264][ T3308] team0: Port device team_slave_0 added [ 35.433435][ T3308] team0: Port device team_slave_1 added [ 35.454893][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.454910][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.455102][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.472311][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.472364][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.472565][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.486134][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.486179][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.486271][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.568427][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.568562][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.568760][ T3310] bridge_slave_0: entered allmulticast mode [ 35.570485][ T3310] bridge_slave_0: entered promiscuous mode [ 35.632383][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.632557][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.632731][ T3310] bridge_slave_1: entered allmulticast mode [ 35.633860][ T3310] bridge_slave_1: entered promiscuous mode [ 35.686259][ T3308] hsr_slave_0: entered promiscuous mode [ 35.686683][ T3308] hsr_slave_1: entered promiscuous mode [ 35.686904][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 35.686921][ T3308] Cannot create hsr debugfs directory [ 35.704518][ T3305] hsr_slave_0: entered promiscuous mode [ 35.705667][ T3305] hsr_slave_1: entered promiscuous mode [ 35.706348][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 35.706391][ T3305] Cannot create hsr debugfs directory [ 35.723698][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.751054][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.804785][ T3310] team0: Port device team_slave_0 added [ 35.818135][ T3310] team0: Port device team_slave_1 added [ 35.884010][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.884027][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.884061][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.936283][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.936336][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.936431][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.024335][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.024372][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.024532][ T3304] bridge_slave_0: entered allmulticast mode [ 36.025061][ T3304] bridge_slave_0: entered promiscuous mode [ 36.054743][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.054782][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.054907][ T3304] bridge_slave_1: entered allmulticast mode [ 36.055597][ T3304] bridge_slave_1: entered promiscuous mode [ 36.074778][ T3310] hsr_slave_0: entered promiscuous mode [ 36.075885][ T3310] hsr_slave_1: entered promiscuous mode [ 36.076545][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 36.076596][ T3310] Cannot create hsr debugfs directory [ 36.102704][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.105395][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.147920][ T3304] team0: Port device team_slave_0 added [ 36.148002][ T3305] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.150145][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.151996][ T3305] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.161790][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.176663][ T3304] team0: Port device team_slave_1 added [ 36.194000][ T3305] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.195980][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.196603][ T3305] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.199077][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.234882][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.234900][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.234952][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.244011][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.244055][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.244156][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.344746][ T3311] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.346411][ T3311] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.347272][ T3311] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.349307][ T3311] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.355519][ T3304] hsr_slave_0: entered promiscuous mode [ 36.356425][ T3304] hsr_slave_1: entered promiscuous mode [ 36.357117][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 36.357154][ T3304] Cannot create hsr debugfs directory [ 36.368668][ T3311] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.375767][ T3311] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.430540][ T3311] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.436219][ T3311] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.477967][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.480298][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.496648][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.498815][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.499570][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.503905][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.532303][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.535006][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.572376][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.574634][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.575362][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.577269][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.594519][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.607705][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.609264][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.622898][ T3310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.679057][ T3304] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.682606][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.692115][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.699469][ T3304] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.718235][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.727583][ T3304] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.736622][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.752113][ T3304] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.754412][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.789709][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.802693][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.802744][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.805255][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.825840][ T1725] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.825939][ T1725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.851747][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.873055][ T1725] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.873095][ T1725] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.882519][ T1725] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.882681][ T1725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.922669][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.945292][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.980649][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.996897][ T1764] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.996936][ T1764] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.998958][ T1764] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.998999][ T1764] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.018616][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.035568][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.054929][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.060546][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.060594][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.091534][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.091576][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.094246][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.094343][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.140618][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.140754][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.396834][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.414878][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.470535][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.559629][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.606915][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.664537][ T3305] veth0_vlan: entered promiscuous mode [ 37.685608][ T3305] veth1_vlan: entered promiscuous mode [ 37.688125][ T3304] veth0_vlan: entered promiscuous mode [ 37.705099][ T3304] veth1_vlan: entered promiscuous mode [ 37.734570][ T3305] veth0_macvtap: entered promiscuous mode [ 37.747855][ T3305] veth1_macvtap: entered promiscuous mode [ 37.784731][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.788878][ T3304] veth0_macvtap: entered promiscuous mode [ 37.794856][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.799454][ T3311] veth0_vlan: entered promiscuous mode [ 37.827161][ T3304] veth1_macvtap: entered promiscuous mode [ 37.855446][ T3311] veth1_vlan: entered promiscuous mode [ 37.857964][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.858035][ T3308] veth0_vlan: entered promiscuous mode [ 37.881830][ T1725] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.884550][ T3310] veth0_vlan: entered promiscuous mode [ 37.888158][ T3310] veth1_vlan: entered promiscuous mode [ 37.894421][ T3308] veth1_vlan: entered promiscuous mode [ 37.908426][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.930472][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 37.930489][ T30] audit: type=1400 audit(1792048757.193:149): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.S4SY1W/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 37.964244][ T30] audit: type=1400 audit(1792048757.233:150): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.967776][ T30] audit: type=1400 audit(1792048757.233:151): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.S4SY1W/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 37.967937][ T30] audit: type=1400 audit(1792048757.233:152): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.967966][ T30] audit: type=1400 audit(1792048757.233:153): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.S4SY1W/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 37.967999][ T30] audit: type=1400 audit(1792048757.233:154): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.S4SY1W/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 37.968250][ T30] audit: type=1400 audit(1792048757.233:155): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 37.969889][ T30] audit: type=1400 audit(1792048757.233:156): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.969927][ T30] audit: type=1400 audit(1792048757.233:157): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=3990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.029762][ T3310] veth0_macvtap: entered promiscuous mode [ 38.038614][ T3311] veth0_macvtap: entered promiscuous mode [ 38.041141][ T366] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.042018][ T366] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.042144][ T366] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.042300][ T366] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.042430][ T366] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.102258][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.102397][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.103047][ T3310] veth1_macvtap: entered promiscuous mode [ 38.114888][ T3308] veth0_macvtap: entered promiscuous mode [ 38.142412][ T3311] veth1_macvtap: entered promiscuous mode [ 38.157626][ T3308] veth1_macvtap: entered promiscuous mode [ 38.169460][ T3305] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.218615][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.276895][ T30] audit: type=1400 audit(1792048757.543:158): avc: denied { read } for pid=3305 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.309359][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.322813][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.334341][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.365517][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.383504][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.413901][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.414107][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.414271][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.414424][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.462903][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.485284][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.560854][ T366] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.582312][ T1764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.582364][ T1764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.582483][ T1764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.582532][ T1764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.582682][ T1764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.826855][ T3532] loop0: detected capacity change from 0 to 1024 [ 38.828508][ T3532] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869) [ 38.828549][ T3532] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 38.829240][ T3532] EXT4-fs (loop0): invalid journal inode [ 38.829267][ T3532] EXT4-fs (loop0): can't get journal size [ 38.878498][ T3532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 38.905874][ T3532] EXT4-fs error (device loop0): ext4_readdir:280: inode #2: block 64: comm syz.0.1: path (unknown): bad entry in directory: rec_len is too small for name_len - offset=0, inode=11, rec_len=12, size=1024 fake=0 [ 38.906642][ T3532] EXT4-fs error (device loop0): ext4_readdir:280: inode #2: block 73: comm syz.0.1: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=83886080, rec_len=1024, size=1024 fake=0 [ 39.055548][ T3531] input: ImExPS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 39.215420][ T3545] ip_tables: iptables: counters copy to user failed while replacing table [ 39.241589][ T3545] syzkaller1: entered promiscuous mode [ 39.241614][ T3545] syzkaller1: entered allmulticast mode [ 39.305025][ T3546] bond_slave_0: entered promiscuous mode [ 39.817236][ T3535] syz.1.2 (3535) used greatest stack depth: 11136 bytes left [ 40.081374][ T3554] loop1: detected capacity change from 0 to 1024 [ 40.088332][ T3554] EXT4-fs error (device loop1): ext4_acquire_dquot:7070: comm syz.1.10: Failed to acquire dquot type 0 [ 40.088441][ T3554] loop1: lost filesystem error report for type 5 error -117 [ 40.089330][ T3554] EXT4-fs error (device loop1): mb_free_blocks:2049: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 40.089807][ T3554] EXT4-fs (loop1): 1 truncate cleaned up [ 40.090537][ T3554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.154857][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.208625][ T3566] loop1: detected capacity change from 0 to 512 [ 41.209025][ T3566] EXT4-fs: Ignoring removed mblk_io_submit option [ 41.226735][ T3566] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.12: corrupted in-inode xattr: e_value size too large [ 41.226771][ T3566] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 41.227725][ T3566] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.12: couldn't read orphan inode 15 (err -117) [ 41.227763][ T3566] loop1: lost filesystem error report for type 5 error -117 [ 41.230604][ T3566] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.342924][ T3304] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.345983][ T3575] loop2: detected capacity change from 0 to 512 [ 41.348175][ T3575] ======================================================= [ 41.348175][ T3575] WARNING: The mand mount option has been deprecated and [ 41.348175][ T3575] and is ignored by this kernel. Remove the mand [ 41.348175][ T3575] option from the mount to silence this warning. [ 41.348175][ T3575] ======================================================= [ 41.348366][ T3575] EXT4-fs: Ignoring removed bh option [ 41.459777][ T3575] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.511904][ T3575] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #2: block 18: comm syz.2.17: lblock 23 mapped to illegal pblock 18 (length 1) [ 41.513044][ T3575] EXT4-fs (loop2): Remounting filesystem read-only [ 41.556059][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.273375][ T3591] loop3: detected capacity change from 0 to 512 [ 42.288961][ T3591] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.21: iget: bad i_size value: 38620345925642 [ 42.289004][ T3591] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 42.289900][ T3591] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.21: couldn't read orphan inode 15 (err -117) [ 42.289963][ T3591] loop3: lost filesystem error report for type 5 error -117 [ 42.293195][ T3591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.615519][ T3591] EXT4-fs error (device loop3): ext4_validate_block_bitmap:436: comm syz.3.21: bg 0: block 5: invalid block bitmap [ 42.648991][ T3598] netlink: 8 bytes leftover after parsing attributes in process `syz.0.23'. [ 42.759791][ T3591] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1880 with error 28 [ 42.759831][ T3591] EXT4-fs (loop3): This should not happen!! Data will be lost [ 42.759831][ T3591] [ 42.759876][ T3591] EXT4-fs (loop3): Total free blocks count 0 [ 42.759894][ T3591] EXT4-fs (loop3): Free/Dirty block details [ 42.759909][ T3591] EXT4-fs (loop3): free_blocks=0 [ 42.759921][ T3591] EXT4-fs (loop3): dirty_blocks=1884 [ 42.759933][ T3591] EXT4-fs (loop3): Block reservation details [ 42.759944][ T3591] EXT4-fs (loop3): i_reserved_data_blocks=1884 [ 42.846019][ T3601] loop1: detected capacity change from 0 to 764 [ 42.918642][ T3591] syz.3.21 (3591) used greatest stack depth: 10464 bytes left [ 42.950670][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.974629][ T3603] lo: entered promiscuous mode [ 43.020174][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 43.020194][ T30] audit: type=1400 audit(1792048762.283:212): avc: denied { open } for pid=3607 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.020220][ T30] audit: type=1400 audit(1792048762.283:213): avc: denied { kernel } for pid=3607 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 43.069576][ T3603] tunl0: entered promiscuous mode [ 43.076844][ T3603] gre0: entered promiscuous mode [ 43.089511][ T3603] gretap0: entered promiscuous mode [ 43.103186][ T30] audit: type=1400 audit(1792048762.373:214): avc: denied { mount } for pid=3610 comm="syz.3.28" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 43.103283][ T30] audit: type=1400 audit(1792048762.373:215): avc: denied { search } for pid=3610 comm="syz.3.28" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 43.103316][ T30] audit: type=1400 audit(1792048762.373:216): avc: denied { search } for pid=3610 comm="syz.3.28" name="events" dev="tracefs" ino=126 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 43.103349][ T30] audit: type=1400 audit(1792048762.373:217): avc: denied { search } for pid=3610 comm="syz.3.28" name="sched" dev="tracefs" ino=5129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 43.103440][ T30] audit: type=1400 audit(1792048762.373:218): avc: denied { write } for pid=3610 comm="syz.3.28" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 43.103474][ T30] audit: type=1400 audit(1792048762.373:219): avc: denied { open } for pid=3610 comm="syz.3.28" path="/5/tracing/events/sched/filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 43.114055][ T3603] erspan0: entered promiscuous mode [ 43.126964][ T3603] ip_vti0: entered promiscuous mode [ 43.147942][ T3603] ip6_vti0: entered promiscuous mode [ 43.188004][ T3603] sit0: entered promiscuous mode [ 43.251446][ T3603] ip6tnl0: entered promiscuous mode [ 43.279269][ T3603] ip6gre0: entered promiscuous mode [ 43.294579][ T30] audit: type=1400 audit(1792048762.563:220): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 43.294784][ T3603] syz_tun: entered promiscuous mode [ 43.328648][ T3603] ip6gretap0: entered promiscuous mode [ 43.346380][ T3603] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.346538][ T3603] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.346813][ T3603] bridge0: entered promiscuous mode [ 43.348658][ T3603] vcan0: entered promiscuous mode [ 43.491437][ T30] audit: type=1400 audit(1792048762.763:221): avc: denied { create } for pid=3613 comm="syz.4.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 43.492453][ T3603] bond0: entered promiscuous mode [ 43.492582][ T3603] bond_slave_0: entered promiscuous mode [ 43.492703][ T3603] bond_slave_1: entered promiscuous mode [ 43.494604][ T3603] team0: entered promiscuous mode [ 43.494626][ T3603] team_slave_0: entered promiscuous mode [ 43.494802][ T3603] team_slave_1: entered promiscuous mode [ 43.496689][ T3603] dummy0: entered promiscuous mode [ 43.498311][ T3603] nlmon0: entered promiscuous mode [ 43.499597][ T3603] batadv0: entered promiscuous mode [ 43.538107][ T3603] vxcan0: entered promiscuous mode [ 43.580866][ T3603] vxcan1: entered promiscuous mode [ 43.582160][ T3603] veth0: entered promiscuous mode [ 43.584720][ T3603] veth1: entered promiscuous mode [ 43.587641][ T3603] wg0: entered promiscuous mode [ 43.589594][ T3603] wg1: entered promiscuous mode [ 43.804013][ T3603] wg2: entered promiscuous mode [ 43.805718][ T3603] veth0_to_bridge: entered promiscuous mode [ 43.839166][ T3603] veth1_to_bridge: entered promiscuous mode [ 43.990556][ T3603] veth0_to_bond: entered promiscuous mode [ 44.004959][ T3603] veth1_to_bond: entered promiscuous mode [ 44.020653][ T3603] veth0_to_team: entered promiscuous mode [ 44.044946][ T3603] veth1_to_team: entered promiscuous mode [ 44.063080][ T3603] veth0_to_batadv: entered promiscuous mode [ 44.068401][ T3603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.068556][ T3603] batadv_slave_0: entered promiscuous mode [ 44.109038][ T3603] veth1_to_batadv: entered promiscuous mode [ 44.340342][ T3603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.340388][ T3603] batadv_slave_1: entered promiscuous mode [ 44.367881][ T3603] xfrm0: entered promiscuous mode [ 44.384335][ T3603] veth0_to_hsr: entered promiscuous mode [ 44.407358][ T3603] veth1_to_hsr: entered promiscuous mode [ 44.423745][ T3603] hsr0: entered promiscuous mode [ 44.428073][ T3603] veth1_virt_wifi: entered promiscuous mode [ 44.445015][ T3603] veth0_virt_wifi: entered promiscuous mode [ 44.470526][ T3603] vlan0: entered promiscuous mode [ 44.471867][ T3603] vlan1: entered promiscuous mode [ 44.473183][ T3603] macvlan0: entered promiscuous mode [ 44.474426][ T3603] macvlan1: entered promiscuous mode [ 44.475017][ T3603] ipvlan0: entered promiscuous mode [ 44.475115][ T3603] ipvlan1: entered promiscuous mode [ 44.478447][ T3603] macvtap0: entered promiscuous mode [ 44.479388][ T3603] macsec0: entered promiscuous mode [ 44.480557][ T3603] geneve0: entered promiscuous mode [ 44.481845][ T3603] geneve1: entered promiscuous mode [ 44.483194][ T3603] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 44.485465][ T3603] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 44.489392][ T3603] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 44.491497][ T3603] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 44.493956][ T32] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.495656][ T1725] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.495712][ T1725] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.495872][ T1725] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.515544][ T3649] process 'syz.1.34' launched './file0' with NULL argv: empty string added [ 45.901774][ T3661] loop1: detected capacity change from 0 to 512 [ 45.982465][ T3403] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.063820][ T3661] loop1: detected capacity change from 512 to 0 [ 46.065945][ C1] I/O error, dev loop1, sector 144 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 46.066004][ T3664] FAT-fs (loop1): Directory bread(block 36) failed [ 46.066034][ T3664] FAT-fs (loop1): Directory bread(block 37) failed [ 46.066055][ T3664] FAT-fs (loop1): Directory bread(block 38) failed [ 46.066132][ T3664] FAT-fs (loop1): Directory bread(block 39) failed [ 46.066210][ T3664] FAT-fs (loop1): Directory bread(block 40) failed [ 46.066235][ T3664] FAT-fs (loop1): Directory bread(block 41) failed [ 46.066259][ T3664] FAT-fs (loop1): Directory bread(block 42) failed [ 46.066293][ T3664] FAT-fs (loop1): Directory bread(block 43) failed [ 46.066646][ T3664] FAT-fs (loop1): Directory bread(block 36) failed [ 46.066698][ T3664] FAT-fs (loop1): Directory bread(block 37) failed [ 46.136892][ T3658] loop4: detected capacity change from 0 to 512 [ 46.181162][ T3658] EXT4-fs (loop4): external journal device major/minor numbers have changed [ 46.233266][ T3668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.44'. [ 46.427746][ T3658] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 46.428079][ T3658] block device autoloading is deprecated and will be removed. [ 46.468446][ T3658] EXT4-fs (loop4): couldn't read superblock of external journal [ 46.711325][ T3652] loop2: detected capacity change from 0 to 512 [ 46.786890][ T366] FAT-fs (loop1): bread failed in fat_clusters_flush [ 46.787972][ T3650] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 46.869229][ T3658] syz.4.42 (3658) used greatest stack depth: 10440 bytes left [ 46.976005][ T3684] lo: entered promiscuous mode [ 46.977844][ T3684] tunl0: entered promiscuous mode [ 46.989204][ T3684] gre0: entered promiscuous mode [ 47.008948][ T3652] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.010180][ T3652] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.122299][ T3684] gretap0: entered promiscuous mode [ 47.125138][ T3684] erspan0: entered promiscuous mode [ 47.150750][ T3684] ip_vti0: entered promiscuous mode [ 47.168460][ T3684] ip6_vti0: entered promiscuous mode [ 47.181353][ T3684] sit0: entered promiscuous mode [ 47.201735][ T3684] ip6tnl0: entered promiscuous mode [ 47.203927][ T3684] ip6gre0: entered promiscuous mode [ 47.645945][ T3684] syz_tun: entered promiscuous mode [ 47.679757][ T3684] ip6gretap0: entered promiscuous mode [ 47.691555][ T3684] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.691772][ T3684] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.692022][ T3684] bridge0: entered promiscuous mode [ 47.696071][ T3684] vcan0: entered promiscuous mode [ 47.697393][ T3684] bond0: entered promiscuous mode [ 47.697476][ T3684] bond_slave_1: entered promiscuous mode [ 47.700578][ T3684] team0: entered promiscuous mode [ 47.700594][ T3684] team_slave_0: entered promiscuous mode [ 47.700757][ T3684] team_slave_1: entered promiscuous mode [ 47.705124][ T3684] dummy0: entered promiscuous mode [ 47.721161][ T3684] nlmon0: entered promiscuous mode [ 47.727706][ T3684] batadv0: entered promiscuous mode [ 47.739882][ T3684] vxcan0: entered promiscuous mode [ 47.742691][ T3684] vxcan1: entered promiscuous mode [ 47.744444][ T3684] veth0: entered promiscuous mode [ 47.745951][ T3684] veth1: entered promiscuous mode [ 47.753049][ T3684] wg0: entered promiscuous mode [ 47.758086][ T3684] wg1: entered promiscuous mode [ 47.768697][ T3684] wg2: entered promiscuous mode [ 47.780499][ T3684] veth0_to_bridge: entered promiscuous mode [ 47.840846][ T3684] veth1_to_bridge: entered promiscuous mode [ 47.846081][ T3684] veth0_to_bond: entered promiscuous mode [ 47.847321][ T3684] veth1_to_bond: entered promiscuous mode [ 47.849537][ T3684] veth0_to_team: entered promiscuous mode [ 47.854008][ T3684] veth1_to_team: entered promiscuous mode [ 47.856134][ T3684] veth0_to_batadv: entered promiscuous mode [ 47.857190][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.857219][ T3684] batadv_slave_0: entered promiscuous mode [ 47.858222][ T3684] veth1_to_batadv: entered promiscuous mode [ 47.859304][ T3684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.859334][ T3684] batadv_slave_1: entered promiscuous mode [ 47.860543][ T3684] xfrm0: entered promiscuous mode [ 47.862293][ T3684] veth0_to_hsr: entered promiscuous mode [ 47.864220][ T3684] veth1_to_hsr: entered promiscuous mode [ 47.876327][ T3684] hsr0: entered promiscuous mode [ 47.920465][ T3684] veth1_virt_wifi: entered promiscuous mode [ 47.948629][ T3684] veth0_virt_wifi: entered promiscuous mode [ 47.973714][ T3684] vlan0: entered promiscuous mode [ 47.982802][ T3684] vlan1: entered promiscuous mode [ 47.993305][ T3684] macvlan0: entered promiscuous mode [ 47.999100][ T3684] macvlan1: entered promiscuous mode [ 48.003175][ T3684] ipvlan0: entered promiscuous mode [ 48.003463][ T3684] ipvlan1: entered promiscuous mode [ 48.017692][ T37] IPVS: starting estimator thread 0... [ 48.027213][ T3684] macvtap0: entered promiscuous mode [ 48.028394][ T3684] macsec0: entered promiscuous mode [ 48.029525][ T3684] geneve0: entered promiscuous mode [ 48.030690][ T3684] geneve1: entered promiscuous mode [ 48.053282][ T3684] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 48.062562][ T3684] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 48.063308][ T3684] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 48.064067][ T3684] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 48.066891][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 48.066988][ T30] audit: type=1400 audit(1792048767.333:241): avc: denied { module_request } for pid=3688 comm="syz-executor" kmod="netdev-nr5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.067555][ T3702] tipc: Started in network mode [ 48.067587][ T3702] tipc: Node identity ac14140f, cluster identity 4711 [ 48.068053][ T3702] tipc: Enabled bearer , priority 10 [ 48.092773][ T3652] netlink: 68 bytes leftover after parsing attributes in process `syz.2.40'. [ 48.093015][ T30] audit: type=1400 audit(1792048767.333:240): avc: denied { write } for pid=3651 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.093098][ T30] audit: type=1400 audit(1792048767.363:242): avc: denied { nlmsg_write } for pid=3651 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.101170][ T37] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.101317][ T37] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.101504][ T37] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.101672][ T37] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.118546][ T30] audit: type=1400 audit(1792048767.373:243): avc: denied { bpf } for pid=3651 comm="syz.2.40" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.118662][ T30] audit: type=1400 audit(1792048767.373:244): avc: denied { perfmon } for pid=3651 comm="syz.2.40" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 48.132969][ T3703] IPVS: using max 1968 ests per chain, 98400 per kthread [ 48.315816][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.353500][ T12] bridge_slave_1: left allmulticast mode [ 48.353603][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.360231][ T12] bridge_slave_0: left allmulticast mode [ 48.360439][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.410592][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 48.421682][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.422342][ T12] bond0 (unregistering): Released all slaves [ 48.499030][ T3688] rxe_eth0 speed is unknown, defaulting to 1000 [ 48.652427][ T3732] loop4: detected capacity change from 0 to 512 [ 48.675691][ T3732] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.784961][ T3732] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.59: corrupted in-inode xattr: e_value size too large [ 48.785179][ T3732] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 48.786478][ T3732] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.59: couldn't read orphan inode 15 (err -117) [ 48.786510][ T3732] loop4: lost filesystem error report for type 5 error -117 [ 48.833878][ T3732] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.025582][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.158133][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 49.162277][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 49.259814][ T30] audit: type=1400 audit(1792048768.523:245): avc: denied { write } for pid=3729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.467932][ T12] team0 (unregistering): Port device team_slave_1 removed [ 49.488746][ T12] team0 (unregistering): Port device team_slave_0 removed [ 49.760631][ T30] audit: type=1400 audit(1792048769.023:246): avc: denied { create } for pid=3755 comm="syz.0.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 49.800058][ T30] audit: type=1400 audit(1792048769.063:247): avc: denied { create } for pid=3763 comm="syz.2.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 49.838080][ T285] tipc: Node number set to 2886997007 [ 50.284264][ T30] audit: type=1400 audit(1792048769.553:248): avc: denied { write } for pid=3775 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.335504][ T3688] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.335537][ T3688] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.335600][ T3688] bridge_slave_0: entered allmulticast mode [ 50.336171][ T3688] bridge_slave_0: entered promiscuous mode [ 50.370158][ T3688] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.370196][ T3688] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.370325][ T3688] bridge_slave_1: entered allmulticast mode [ 50.395603][ T3688] bridge_slave_1: entered promiscuous mode [ 50.414628][ T3030] 8021q: adding VLAN 0 to HW filter on device eth1 [ 50.425679][ T3787] loop2: detected capacity change from 0 to 512 [ 50.431161][ T3787] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.443677][ T3787] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.69: corrupted in-inode xattr: e_value size too large [ 50.443715][ T3787] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 50.446487][ T3787] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.69: couldn't read orphan inode 15 (err -117) [ 50.446525][ T3787] loop2: lost filesystem error report for type 5 error -117 [ 50.447422][ T3787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.509556][ T3688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.523637][ T3688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.525221][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.560145][ T3688] team0: Port device team_slave_0 added [ 50.566910][ T3688] team0: Port device team_slave_1 added [ 50.584344][ T3688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.584370][ T3688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.584514][ T3688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.585650][ T3688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.585667][ T3688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.585702][ T3688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.683773][ T30] audit: type=1400 audit(1792048769.913:249): avc: denied { ioctl } for pid=3786 comm="syz.0.70" path="socket:[6228]" dev="sockfs" ino=6228 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 50.832969][ T3688] hsr_slave_0: entered promiscuous mode [ 50.833415][ T3688] hsr_slave_1: entered promiscuous mode [ 50.833679][ T3688] debugfs: 'hsr0' already exists in 'hsr' [ 50.833773][ T3688] Cannot create hsr debugfs directory [ 51.015313][ T3797] loop2: detected capacity change from 0 to 512 [ 51.439396][ T3030] 8021q: adding VLAN 0 to HW filter on device eth2 [ 51.567456][ T3797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.568870][ T3797] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 51.999108][ T3688] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.021667][ T3688] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 52.024252][ T3688] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.046882][ T3688] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 52.060710][ T3688] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.064833][ T3688] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 52.091122][ T3688] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.111449][ T3688] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 52.250640][ T3834] netlink: 68 bytes leftover after parsing attributes in process `syz.2.74'. [ 52.321919][ T3688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.331703][ T3688] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.339530][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.339571][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.348291][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.348398][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.375867][ T3848] loop3: detected capacity change from 0 to 2048 [ 52.399591][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.405747][ T3848] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.440537][ T3847] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 52.447185][ T3847] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 52.447307][ T3847] EXT4-fs (loop3): This should not happen!! Data will be lost [ 52.447307][ T3847] [ 52.447371][ T3847] EXT4-fs (loop3): Total free blocks count 0 [ 52.447412][ T3847] EXT4-fs (loop3): Free/Dirty block details [ 52.447452][ T3847] EXT4-fs (loop3): free_blocks=4096 [ 52.447545][ T3847] EXT4-fs (loop3): dirty_blocks=64 [ 52.447599][ T3847] EXT4-fs (loop3): Block reservation details [ 52.447632][ T3847] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 52.538939][ T366] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 52.603860][ T3864] loop3: detected capacity change from 0 to 128 [ 52.622384][ T3864] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 52.622769][ T3864] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 52.751666][ T3030] 8021q: adding VLAN 0 to HW filter on device eth3 [ 52.850615][ T3884] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.359666][ T3885] veth0_to_bridge: left promiscuous mode [ 53.395725][ T3885] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.740819][ T3900] tipc: Started in network mode [ 53.740850][ T3900] tipc: Node identity ac14140f, cluster identity 4711 [ 53.740991][ T3900] tipc: Enabled bearer , priority 10 [ 53.774557][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 53.799298][ T3688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.966423][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 53.966471][ T30] audit: type=1400 audit(1792048773.233:260): avc: denied { write } for pid=3886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.040336][ T3916] netlink: 48 bytes leftover after parsing attributes in process `syz.2.91'. [ 54.189599][ T3925] loop3: detected capacity change from 0 to 2048 [ 54.230810][ T30] audit: type=1400 audit(1792048773.473:261): avc: denied { write } for pid=3926 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.232491][ T3925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 54.263822][ T3030] 8021q: adding VLAN 0 to HW filter on device eth4 [ 54.305903][ T3305] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.861303][ T9] tipc: Node number set to 2886997007 [ 55.074859][ T3956] loop3: detected capacity change from 0 to 128 [ 55.117448][ T3956] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 55.136313][ T3956] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.173781][ T30] audit: type=1400 audit(1792048774.433:262): avc: denied { write } for pid=3955 comm="syz.3.101" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 55.227956][ T3688] veth0_vlan: entered promiscuous mode [ 55.236173][ T3688] veth1_vlan: entered promiscuous mode [ 55.240773][ T30] audit: type=1400 audit(1792048774.483:263): avc: denied { create } for pid=3961 comm="syz.2.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 55.240811][ T30] audit: type=1400 audit(1792048774.493:264): avc: denied { ioctl } for pid=3961 comm="syz.2.102" path="socket:[6493]" dev="sockfs" ino=6493 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 55.240905][ T30] audit: type=1400 audit(1792048774.503:265): avc: denied { write } for pid=3961 comm="syz.2.102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 55.263383][ T3688] veth0_macvtap: entered promiscuous mode [ 55.269851][ T3688] veth1_macvtap: entered promiscuous mode [ 55.397892][ T3688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.410441][ T3688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.420273][ T3966] loop2: detected capacity change from 0 to 256 [ 55.661720][ T3970] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 56.011100][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.011286][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.011365][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.011401][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.058878][ T3305] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.611685][ T30] audit: type=1400 audit(1792048776.873:266): avc: denied { mount } for pid=4003 comm="syz.4.113" name="/" dev="ramfs" ino=6009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 57.627198][ T30] audit: type=1400 audit(1792048776.893:267): avc: denied { allowed } for pid=4003 comm="syz.4.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 57.627515][ T30] audit: type=1400 audit(1792048776.893:268): avc: denied { create } for pid=4003 comm="syz.4.113" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 57.666954][ T30] audit: type=1400 audit(1792048776.933:269): avc: denied { read } for pid=4006 comm="syz.2.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 57.934394][ T4020] netlink: 8 bytes leftover after parsing attributes in process `syz.4.113'. [ 58.134865][ T4009] ================================================================== [ 58.134901][ T4009] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 58.134942][ T4009] [ 58.134952][ T4009] write to 0xffffea0004811b18 of 8 bytes by task 4001 on cpu 0: [ 58.134976][ T4009] __filemap_remove_folio+0x201/0x2e0 [ 58.135002][ T4009] filemap_remove_folio+0x6d/0x1d0 [ 58.135025][ T4009] truncate_inode_folio+0x42/0x50 [ 58.135060][ T4009] shmem_undo_range+0x27f/0xb60 [ 58.135094][ T4009] shmem_evict_inode+0x12d/0x580 [ 58.135121][ T4009] evict+0x2a5/0x510 [ 58.135152][ T4009] iput+0x430/0x5a0 [ 58.135174][ T4009] dentry_unlink_inode+0x24a/0x260 [ 58.135214][ T4009] dentry_kill+0x184/0x500 [ 58.135236][ T4009] finish_dput+0x16/0x1d0 [ 58.135266][ T4009] dput+0x48/0x50 [ 58.135287][ T4009] __fput+0x43e/0x630 [ 58.135309][ T4009] ____fput+0x1c/0x30 [ 58.135333][ T4009] task_work_run+0x130/0x1a0 [ 58.135364][ T4009] do_exit+0x4a4/0x1510 [ 58.135399][ T4009] do_group_exit+0xfe/0x140 [ 58.135433][ T4009] get_signal+0xe07/0xf10 [ 58.135469][ T4009] arch_do_signal_or_restart+0x96/0x480 [ 58.135507][ T4009] irqentry_exit+0x14d/0x610 [ 58.135533][ T4009] asm_exc_page_fault+0x26/0x30 [ 58.135553][ T4009] [ 58.135559][ T4009] read to 0xffffea0004811b18 of 8 bytes by task 4009 on cpu 1: [ 58.135575][ T4009] folio_mapping+0xa1/0xe0 [ 58.135600][ T4009] evict_folios+0x1e66/0x2830 [ 58.135628][ T4009] try_to_shrink_lruvec+0x8fd/0xb30 [ 58.135654][ T4009] shrink_lruvec+0x252/0x1d40 [ 58.135671][ T4009] shrink_node+0x67c/0x2000 [ 58.135695][ T4009] do_try_to_free_pages+0x408/0xca0 [ 58.135721][ T4009] try_to_free_mem_cgroup_pages+0x201/0x420 [ 58.135765][ T4009] mem_cgroup_resize_max+0x13d/0x290 [ 58.135796][ T4009] mem_cgroup_write+0x132/0x1c0 [ 58.135822][ T4009] cgroup_file_write+0x197/0x350 [ 58.135861][ T4009] kernfs_fop_write_iter+0x1d2/0x2e0 [ 58.135899][ T4009] vfs_write+0x57f/0x9a0 [ 58.135938][ T4009] ksys_write+0xdc/0x1a0 [ 58.135973][ T4009] __x64_sys_write+0x40/0x50 [ 58.136014][ T4009] x64_sys_call+0x154e/0x2550 [ 58.136049][ T4009] do_syscall_64+0x112/0x360 [ 58.136078][ T4009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.136102][ T4009] [ 58.136107][ T4009] value changed: 0xffff88811c06c4a0 -> 0x0000000000000000 [ 58.136123][ T4009] [ 58.136129][ T4009] Reported by Kernel Concurrency Sanitizer on: [ 58.136167][ T4009] CPU: 1 UID: 0 PID: 4009 Comm: syz.5.115 Not tainted syzkaller #0 PREEMPT(lazy) [ 58.136196][ T4009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.136209][ T4009] ================================================================== [ 58.547319][ T4009] syz.5.115 (4009) used greatest stack depth: 10120 bytes left [ 65.251943][ T30] audit: type=1400 audit(1792048784.523:270): avc: denied { write } for pid=4042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.293381][ T30] audit: type=1400 audit(1792048784.563:271): avc: denied { write } for pid=4053 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.721795][ T30] audit: type=1400 audit(1792048784.993:272): avc: denied { write } for pid=4056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.763792][ T30] audit: type=1400 audit(1792048785.033:273): avc: denied { write } for pid=4067 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.221151][ T30] audit: type=1400 audit(1792048786.493:274): avc: denied { write } for pid=4070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.264053][ T30] audit: type=1400 audit(1792048786.533:275): avc: denied { write } for pid=4081 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.523896][ T30] audit: type=1400 audit(1792048786.793:276): avc: denied { write } for pid=4084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 67.563962][ T30] audit: type=1400 audit(1792048786.833:277): avc: denied { write } for pid=4095 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1