last executing test programs: 6.903305087s ago: executing program 2 (id=219): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000f00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x2c, 0x0) 6.836925363s ago: executing program 2 (id=222): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) syz_usb_connect(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000256930108205050088000002030109021b000100000000090402000191baf20509050b02"], 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) socket(0x10, 0x80002, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x49, 0x1}, 0x48) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffb}]}) getrusage(0x0, 0x0) 3.567279804s ago: executing program 2 (id=276): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@orlov}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r0, 0x0) ftruncate(r0, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', 0x0}) sync_file_range(r0, 0x0, 0x0, 0x6) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3.295980577s ago: executing program 2 (id=277): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x14, 0x14, 0x0, 0x0, 0x0, {0x1e}, [@generic]}, 0x14}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x800dd7d, 0x2f82, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1, 0x7}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r3, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000440)=[{0x0}], 0x1}}], 0x1, 0x24044040) r4 = socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c80)={0xffffffffffffffff, 0xe0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffefc, 0x10, 0x8, 0x0, 0x0}}, 0x10) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x2000000, 0x0, 0xb3550aa4ba878396}, 0x9c) 3.129971161s ago: executing program 1 (id=278): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x800, &(0x7f0000000840)=ANY=[], 0x1, 0x36e, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1000, 0x0) r2 = memfd_create(&(0x7f00000005c0)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x99\xd9\x89\xab\xf8P\xacYt]\xa3\xed\xfa\xd2\n\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9],t\'V|u\x86\x14s>p1\xcd\x1e\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xf5\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x13\x02\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xd6\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close_range(r2, 0xffffffffffffffff, 0x0) 2.32740263s ago: executing program 0 (id=285): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.299631993s ago: executing program 2 (id=287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000680)='I', 0x1}], 0x1}}], 0x1, 0x4008095) socket$inet6_sctp(0xa, 0x1, 0x84) epoll_create1(0x0) socket(0x2, 0x80802, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, &(0x7f0000000000)={0x1fe}, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 2.241908578s ago: executing program 0 (id=288): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c00000010000104000000000000000000480000", @ANYRES32=r1, @ANYBLOB="00000000000000001400030096657468305f766c616e000000000000080004000001"], 0x3c}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.187251692s ago: executing program 1 (id=290): r0 = syz_mount_image$ext4(&(0x7f0000000480)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000140), 0x0, 0x5f0, &(0x7f0000000600)="$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") quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000901, 0x0, 0x0) 1.991391439s ago: executing program 1 (id=293): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_pressure(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe80"], 0xffdd) 1.971129241s ago: executing program 0 (id=294): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0xffffffff}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042) close_range(r0, 0xffffffffffffffff, 0x0) 1.918431345s ago: executing program 4 (id=295): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000030a03000000000000000000020000000c00024000000000000000010900010073797a30"], 0x60}}, 0x0) 1.87141838s ago: executing program 0 (id=296): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000180)=""/235, 0x1ffd4, 0x0, 0x0, 0x0) 1.841451662s ago: executing program 4 (id=297): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) 1.816204964s ago: executing program 4 (id=298): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000140)=0xa7d, 0x4) 1.507159931s ago: executing program 1 (id=300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6], 0x30}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 1.294151069s ago: executing program 1 (id=301): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r3, 0x112, 0x13, 0x0, 0x0) 1.213269786s ago: executing program 2 (id=302): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000004c0)=ANY=[@ANYBLOB="0001000000"], 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) 951.295119ms ago: executing program 0 (id=303): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xda, 0x35, 0x8e, 0x8, 0x46d, 0x900, 0x669e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xc, 0x22, 0xf}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000700)=@filter={'filter\x00', 0x42, 0x4, 0x398, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x300, 0x300, 0x300, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x198, 0x0, {0x100000000000000}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x58, 'system_u:object_r:system_cron_spool_t:s0\x00'}}}, {{@ip={@local, @remote, 0xff, 0x0, 'veth1_to_batadv\x00', 'syzkaller0\x00', {}, {0xff}, 0x11, 0x3, 0x19}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="3232b3c71587", 0x0, 0x0, [0x0, 0x0, 0x5, 0x3e, 0x0, 0x3d, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1c, 0x0, 0x9, 0x0, 0x32]}}}, {{@ip={@remote, @dev, 0x0, 0xff000000, 'wlan1\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x404) socket$inet_udplite(0x2, 0x2, 0x88) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) set_robust_list(0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'netpci0\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 852.674677ms ago: executing program 4 (id=304): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @loopback, @empty}, &(0x7f0000000280)=0xc) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) close(r4) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 629.880576ms ago: executing program 4 (id=305): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d"], 0x0}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16], 0x48}}, 0x0) syz_emit_ethernet(0x29a, &(0x7f00000001c0)={@dev, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x264, 0x3a, 0x0, @dev, @dev, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xd, "7db4265c9f6aa3b46521199ea778d105c24ab977edb940e63f49a7129f45462e5eecc39f468544e3c13aa9017ccd638e784912ef2c2589d0d45cf0ed4bbe909218459bcbeaf63697aef1702b895af582b2e3b5cd435f497d415f29c5d941df10c1ca58197441e0e9b3400d98"}, {0x0, 0x8, "1598a4a8a719ffe0621615f6d04dcae3360546cf06f2665bae2296931fd1d71c1f7e8f222b9ddc4e0bfb5e5c9a484353b785e79b4d8181cf146261723484c54803466e8b"}, {0x0, 0x34, "130c3818a2eaac43f1a6efc4f7772852ea05bff405aa28758ba53e0f2060e4e027f24bb723a5571d0da2ebeb3fe47f34e606cb3987e3681841f511126b773758e143f6be25d6965fcca35155fec3f970e2067f5db8a5de787eaf96b5957e6b988c02ae9fe26ec3118d9fdcca129d1269b290f687cde5b4eaba737c806335ca0d1e43697d144c6df4dc0d31e84004bc22e87b6e2daab5674479c76a1be360d309e7e7e5fa089032b331a3ceea18d92124681c0b78a0f1665ffcba0bee11950f6b4912bb302b3e648fad7ff4862ccc823e720fdb20af8ab0a6a09dfcdacf69923d60a0efeacf81e1e7e17db9547a4962bdec794c013af7210e54d43f3fe7da2f88c674f4cfd818f6a7461368bf62f1d5f98fd9394eb74bf0559f1c6b1ebec57dba007f143108ca4be3fa330cc21a411b0b7af23ebd9282be17fb702a5ca61650b283eec78e0280e4f2713b42bd4e3615c48c55c1abe5827601038109736f9c6b7242e7c9c917309397b864eedf5ca71db1debb609b6381b54955706017731319e0cc41083f99bd11da748b47d8715080899eb15caf19df36632b73bb22596b"}]}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 507.371977ms ago: executing program 4 (id=306): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$binfmt_misc(r4, &(0x7f0000000100)=ANY=[], 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$binfmt_elf64(r4, 0x0, 0x10f) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r5, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="d52a99295b2f"}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 442.251482ms ago: executing program 3 (id=308): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0xf0, 0xf0, 0xffffffff, 0x390, 0xf0, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 421.674324ms ago: executing program 3 (id=309): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000dc0)=ANY=[], 0x11) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) 402.176066ms ago: executing program 3 (id=310): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xffffffff, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, 0x24) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x1d) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r3}, 0x8) 339.388611ms ago: executing program 3 (id=311): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b"], 0x34}}, 0x0) 283.347216ms ago: executing program 3 (id=312): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=';', 0x1}], 0x1}}], 0x1, 0x16da) 186.118594ms ago: executing program 0 (id=313): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r1, &(0x7f0000000180)=""/235, 0x1ffd4, 0x0, 0x0, 0x0) 83.382893ms ago: executing program 1 (id=314): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x8}}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@stripe={'stripe', 0x3d, 0x6a}}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x141842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000000200)="1f4f", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 3 (id=315): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xcf, 0xc5, 0xb6, 0x10, 0x456, 0xf000, 0xf37f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x27, 0x25, 0xea}}]}}]}}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2008002, &(0x7f0000000240), 0x1, 0x546, &(0x7f0000000fc0)="$eJzs3UFvHFcdAPD/jL22m6Z1Aj1ABSRAIaAou/Gmjape2lxAqKqEqDggDqmxN5bJbjZk16U2kXA/A0ggcYKPwAGJA1JPHLhxROKAkMoBKUAEipFAWjSzY2djr8k2u95td38/aTLz5s3M/z07s+/t2/W8AGbW+YjYjYiFiHgrIpaL/UmxxGvdJTvuwf27a3v3764l0em8+fckz8/2Rc85maeLay5FxDe+GvGd5Gjc1vbOzdV6vXanSFfajduV1vbOpc3G6kZto3arWr26cvXyy1deqo6srucav7z3lc3Xv/mbX3/6/d/vfvkHWbFOF3m99RilbtVLB3Ey8xHx+kkEm4C5Yr0w4XLwZNKI+FhEfC6//5djLv/fCQBMs05nOTrLvWkAYNql+RhYkpYjIk2LTkC5O4b3XJxK681W++KN5tat9e5Y2ZkopTc267XLZxf/+L384FKSpVfyvDw/T1cPpa9ExNmI+PHiU3m6vNasr0+mywMAM+/p3vY/Iv61mKbl8kCn9vlUDwD4yFga/ND0JMsBAIzPB2j/AYApof0HgNkzQPtffNi/e+JlAQDGw/t/AJg92n8AmD3afwCYKV9/441s6ewVz79ef3t762bz7UvrtdbNcmNrrbzWvHO7vNFsbuTP7Gk87nr1ZvP2youx9U6lXWu1K63tneuN5tat9vX8ud7Xa6Wx1AoA+H/OnnvvD0lE7L7yVL5Ez1wO2mqYbp7nAbNrbpiTdRDgI81sXzC7BmrC807C7068LMBk9H2Y91LfzUf99AME8T0j+FC58MnBx//N8QzTxfg/zK4nG/9/deTlAMbP+D/Mrk4nOTzn/8JBFgAwlYb4Cl/nh6PqhAAT9bjJvEfy+T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMmdMR8d1I0nI+F3ia/ZuWyxHPRMSZKCU3Nuu1yxHxbJyLiNJill6ZdKEBgCGlf02K+b8uLL9w+nDuQvLvxXwdEd//2Zs/eWe13b6zku3/x8H+xf3pw6oPzxtiXkEAYMTy9rtarHveyD+4f3dtfxlnee5di/8WUxGv7d2/my/dnPnIdkYs5X2JU/9MYr44Zykino+IuRHE3303Ij7Rr/5JPjZyppj5tDd+FLGfGWv89JH4aZ7XXWedr4+PoCwwa967FhGv9bv/0jifr/vf/0v5K9Tw7l3rXmz/tW+vJ/58EWmuT/zsnj8/aIwXf/u1Izs7y928dyOen+8XPzmInxwT/4UB4//pU5/50avH5HV+HnEh+sfvjVVpN25XWts7lzYbqxu1jdqtavXqytXLL195qVrJx6gr+yPVR/3tlYvPHle2rP6nDuKXHqnhUt/6Lxwc8YUB6/+L/7z17c8+TC4ejv+lz/f//T/XN35XVtIvDhh/9dSvjp2+O4u/fszP/3G//4sDxn//LzvrAx4KAIxBa3vn5mq9Xrsz1Eb2LnQU1zmykRVxsIP3u4vDBf1znEQtnnCjdFI/1RPfmD/oK472yt/Krjjm6qQjr8VQGw/GFWtyr0nAeDy86SddEgAAAAAAAAAAAAAA4Djj+NOlSdcRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA6fW/AAAA//94BMlJ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000005180100002020702500020000002020207b1af8ff00000000bfa10000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_connect(0x0, 0x9c, &(0x7f0000000bc0)={{0x12, 0x1, 0x300, 0xf4, 0x1d, 0x95, 0xff, 0x1bc7, 0x1050, 0xb6a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x1, 0xb0, 0x39, 0x0, 0x2, [{{0x9, 0x4, 0x4d, 0x8c, 0x0, 0xff, 0x74, 0x79, 0x8, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x48}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x2, 0x8, 0xf}}, @generic={0x61, 0x27, "88ee54cbf2bea37b8888562c2804293ad141afd964a6cffe95ebdce303dacd250dc4c731855b7ee5c5c71a77da4302f5c5f6d8ba6cdbc22f0b0b7ac1666b70663929255b02ec71ab7a497f9f50249c6d79abc34074ef8d779980b4c34d72b1"}]}}]}}]}}, &(0x7f00000015c0)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x110, 0x33, 0x38, 0xf8, 0x20, 0x1}, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_connect$cdc_ecm(0x3edd711d2701f72e, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f00000006c0)=0xfffffffe, 0x4) kernel console output (not intermixed with test programs): [ 18.963219][ T29] audit: type=1400 audit(1724842181.150:81): avc: denied { read } for pid=2943 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.226' (ED25519) to the list of known hosts. [ 25.140965][ T29] audit: type=1400 audit(1724842187.330:82): avc: denied { mounton } for pid=3250 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.141929][ T3250] cgroup: Unknown subsys name 'net' [ 25.163654][ T29] audit: type=1400 audit(1724842187.330:83): avc: denied { mount } for pid=3250 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.191063][ T29] audit: type=1400 audit(1724842187.360:84): avc: denied { unmount } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.305478][ T3250] cgroup: Unknown subsys name 'rlimit' [ 25.427831][ T29] audit: type=1400 audit(1724842187.620:85): avc: denied { setattr } for pid=3250 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.451156][ T29] audit: type=1400 audit(1724842187.620:86): avc: denied { create } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.471591][ T29] audit: type=1400 audit(1724842187.620:87): avc: denied { write } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.478316][ T3252] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.491925][ T29] audit: type=1400 audit(1724842187.620:88): avc: denied { read } for pid=3250 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.520878][ T29] audit: type=1400 audit(1724842187.630:89): avc: denied { mounton } for pid=3250 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.545744][ T29] audit: type=1400 audit(1724842187.630:90): avc: denied { mount } for pid=3250 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.569063][ T29] audit: type=1400 audit(1724842187.690:91): avc: denied { relabelto } for pid=3252 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.597956][ T3250] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.667397][ T3259] chnl_net:caif_netlink_parms(): no params data found [ 26.708774][ T3263] chnl_net:caif_netlink_parms(): no params data found [ 26.728592][ T3260] chnl_net:caif_netlink_parms(): no params data found [ 26.737487][ T3266] chnl_net:caif_netlink_parms(): no params data found [ 26.769848][ T3259] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.776947][ T3259] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.784094][ T3259] bridge_slave_0: entered allmulticast mode [ 26.790460][ T3259] bridge_slave_0: entered promiscuous mode [ 26.800976][ T3259] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.808074][ T3259] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.815248][ T3259] bridge_slave_1: entered allmulticast mode [ 26.821402][ T3259] bridge_slave_1: entered promiscuous mode [ 26.839329][ T3264] chnl_net:caif_netlink_parms(): no params data found [ 26.881766][ T3259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.891092][ T3263] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.898180][ T3263] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.905475][ T3263] bridge_slave_0: entered allmulticast mode [ 26.911771][ T3263] bridge_slave_0: entered promiscuous mode [ 26.918605][ T3263] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.925684][ T3263] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.932844][ T3263] bridge_slave_1: entered allmulticast mode [ 26.939427][ T3263] bridge_slave_1: entered promiscuous mode [ 26.954254][ T3259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.989592][ T3260] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.996662][ T3260] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.003739][ T3260] bridge_slave_0: entered allmulticast mode [ 27.010346][ T3260] bridge_slave_0: entered promiscuous mode [ 27.016918][ T3260] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.024028][ T3260] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.031215][ T3260] bridge_slave_1: entered allmulticast mode [ 27.037557][ T3260] bridge_slave_1: entered promiscuous mode [ 27.051041][ T3259] team0: Port device team_slave_0 added [ 27.057635][ T3263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.067243][ T3259] team0: Port device team_slave_1 added [ 27.081178][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.088385][ T3266] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.095607][ T3266] bridge_slave_0: entered allmulticast mode [ 27.101937][ T3266] bridge_slave_0: entered promiscuous mode [ 27.108497][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.115563][ T3266] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.122840][ T3266] bridge_slave_1: entered allmulticast mode [ 27.129241][ T3266] bridge_slave_1: entered promiscuous mode [ 27.140924][ T3263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.175402][ T3264] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.182453][ T3264] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.189627][ T3264] bridge_slave_0: entered allmulticast mode [ 27.196156][ T3264] bridge_slave_0: entered promiscuous mode [ 27.202735][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.209707][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.235605][ T3259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.246844][ T3259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.253779][ T3259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.279820][ T3259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.291425][ T3260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.305651][ T3263] team0: Port device team_slave_0 added [ 27.311371][ T3264] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.318421][ T3264] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.325791][ T3264] bridge_slave_1: entered allmulticast mode [ 27.332087][ T3264] bridge_slave_1: entered promiscuous mode [ 27.345072][ T3260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.354966][ T3266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.368523][ T3263] team0: Port device team_slave_1 added [ 27.384293][ T3266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.397579][ T3260] team0: Port device team_slave_0 added [ 27.408699][ T3264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.422636][ T3260] team0: Port device team_slave_1 added [ 27.428748][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.435781][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.461793][ T3263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.477715][ T3264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.491662][ T3266] team0: Port device team_slave_0 added [ 27.501843][ T3263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.508885][ T3263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.534785][ T3263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.554381][ T3266] team0: Port device team_slave_1 added [ 27.573001][ T3259] hsr_slave_0: entered promiscuous mode [ 27.578977][ T3259] hsr_slave_1: entered promiscuous mode [ 27.594985][ T3264] team0: Port device team_slave_0 added [ 27.600805][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.607826][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.633693][ T3260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.653951][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.660926][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.686827][ T3266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.698092][ T3264] team0: Port device team_slave_1 added [ 27.704041][ T3260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.710967][ T3260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.736872][ T3260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.759724][ T3266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.766674][ T3266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.792620][ T3266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.818502][ T3263] hsr_slave_0: entered promiscuous mode [ 27.824603][ T3263] hsr_slave_1: entered promiscuous mode [ 27.830359][ T3263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.837905][ T3263] Cannot create hsr debugfs directory [ 27.855452][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.862402][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.888385][ T3264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.901474][ T3264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.908460][ T3264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.934392][ T3264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.962367][ T3260] hsr_slave_0: entered promiscuous mode [ 27.968299][ T3260] hsr_slave_1: entered promiscuous mode [ 27.974223][ T3260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 27.981765][ T3260] Cannot create hsr debugfs directory [ 28.007493][ T3266] hsr_slave_0: entered promiscuous mode [ 28.013419][ T3266] hsr_slave_1: entered promiscuous mode [ 28.019379][ T3266] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.026934][ T3266] Cannot create hsr debugfs directory [ 28.072733][ T3264] hsr_slave_0: entered promiscuous mode [ 28.078703][ T3264] hsr_slave_1: entered promiscuous mode [ 28.084662][ T3264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 28.092198][ T3264] Cannot create hsr debugfs directory [ 28.191720][ T3259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.202490][ T3259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.213114][ T3259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.221581][ T3259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.255923][ T3263] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.264347][ T3263] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.279493][ T3263] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.289674][ T3263] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.311112][ T3260] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.326276][ T3260] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.334959][ T3260] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.343154][ T3260] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.379168][ T3266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.398567][ T3266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.406962][ T3266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.416479][ T3266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.433513][ T3259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.442212][ T3264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.457154][ T3264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.475494][ T3264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.489275][ T3259] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.498156][ T3264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.508893][ T3263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.521762][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.528837][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.546487][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.553571][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.568492][ T3263] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.588628][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.595705][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.612672][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.619724][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.650355][ T3260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.664403][ T3266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.690873][ T3266] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.700997][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.708111][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.717889][ T3260] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.733672][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.740815][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.750920][ T28] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.758203][ T28] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.772259][ T2136] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.779324][ T2136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.793716][ T3264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.822049][ T3264] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.850580][ T3266] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.861573][ T3266] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.875512][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.882583][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.891274][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.898315][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.918505][ T3264] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.928878][ T3264] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.942071][ T3260] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.959750][ T3263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.982953][ T3259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.049362][ T3266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.078998][ T3264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.104872][ T3260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.164663][ T3263] veth0_vlan: entered promiscuous mode [ 29.174594][ T3259] veth0_vlan: entered promiscuous mode [ 29.196542][ T3263] veth1_vlan: entered promiscuous mode [ 29.206648][ T3259] veth1_vlan: entered promiscuous mode [ 29.235725][ T3263] veth0_macvtap: entered promiscuous mode [ 29.242781][ T3263] veth1_macvtap: entered promiscuous mode [ 29.250252][ T3266] veth0_vlan: entered promiscuous mode [ 29.260003][ T3259] veth0_macvtap: entered promiscuous mode [ 29.276358][ T3266] veth1_vlan: entered promiscuous mode [ 29.288985][ T3259] veth1_macvtap: entered promiscuous mode [ 29.299331][ T3264] veth0_vlan: entered promiscuous mode [ 29.310193][ T3266] veth0_macvtap: entered promiscuous mode [ 29.321215][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.333695][ T3264] veth1_vlan: entered promiscuous mode [ 29.347529][ T3263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.357794][ T3263] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.366735][ T3263] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.375497][ T3263] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.384256][ T3263] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.394593][ T3260] veth0_vlan: entered promiscuous mode [ 29.400941][ T3266] veth1_macvtap: entered promiscuous mode [ 29.408760][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.419226][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.429705][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.440695][ T3260] veth1_vlan: entered promiscuous mode [ 29.459596][ T3259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.470074][ T3259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.480556][ T3259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.494559][ T3259] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.503274][ T3259] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.512093][ T3259] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.520787][ T3259] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.530960][ T3264] veth0_macvtap: entered promiscuous mode [ 29.541823][ T3264] veth1_macvtap: entered promiscuous mode [ 29.551336][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.561843][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.571683][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.582101][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.593825][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.614646][ T3260] veth0_macvtap: entered promiscuous mode [ 29.623460][ T3260] veth1_macvtap: entered promiscuous mode [ 29.638677][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.642814][ T3400] loop2: detected capacity change from 0 to 128 [ 29.649217][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.665278][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.675691][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.685560][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 29.695990][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.708811][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.716021][ T3400] Zero length message leads to an empty skb [ 29.724035][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.734463][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.744268][ T3266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.754682][ T3266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.766486][ T3266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.791429][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.801931][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.811884][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.822368][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.832228][ T3264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 29.834973][ T3404] loop0: detected capacity change from 0 to 128 [ 29.842638][ T3264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 29.843658][ T3264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.867161][ T3266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.876022][ T3266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.884766][ T3266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.893479][ T3266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.902757][ T3404] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.916184][ T3404] ext4 filesystem being mounted at /0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 29.917192][ T3408] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3408 comm=syz.2.7 [ 29.956150][ T3264] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.968984][ T3264] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.977798][ T3264] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.986518][ T3264] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.999783][ T3408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 30.008497][ T3408] ip_vti0: entered promiscuous mode [ 30.013684][ T3408] ip_vti0: entered allmulticast mode [ 30.032233][ T3404] syz.0.1 (3404) used greatest stack depth: 11384 bytes left [ 30.048716][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.059237][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.069243][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.079782][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.089780][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.100429][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.110300][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 30.120718][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.132198][ T3259] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 30.142476][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.178962][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.189438][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.199377][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.209981][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.219999][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.230629][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.240677][ T3260] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 30.246907][ T3415] netlink: 900 bytes leftover after parsing attributes in process `syz.1.2'. [ 30.251236][ T3260] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 30.270525][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 30.270538][ T29] audit: type=1400 audit(1724842192.420:148): avc: denied { create } for pid=3414 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.296699][ T29] audit: type=1400 audit(1724842192.430:149): avc: denied { connect } for pid=3414 comm="syz.1.2" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.306879][ T3418] loop3: detected capacity change from 0 to 512 [ 30.316800][ T29] audit: type=1400 audit(1724842192.430:150): avc: denied { write } for pid=3414 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.316823][ T29] audit: type=1400 audit(1724842192.430:151): avc: denied { nlmsg_write } for pid=3414 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.316839][ T29] audit: type=1400 audit(1724842192.450:152): avc: denied { create } for pid=3409 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.316856][ T29] audit: type=1400 audit(1724842192.450:153): avc: denied { bind } for pid=3409 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.327833][ T3260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.342766][ T29] audit: type=1400 audit(1724842192.450:154): avc: denied { listen } for pid=3409 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 30.405209][ T3418] EXT4-fs: Ignoring removed bh option [ 30.408468][ T29] audit: type=1400 audit(1724842192.450:155): avc: denied { connect } for pid=3409 comm="syz.2.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.452923][ T29] audit: type=1400 audit(1724842192.450:156): avc: denied { write } for pid=3409 comm="syz.2.8" path="socket:[3742]" dev="sockfs" ino=3742 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 30.480282][ T29] audit: type=1400 audit(1724842192.640:157): avc: denied { create } for pid=3414 comm="syz.1.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 30.537889][ T3418] EXT4-fs error (device loop3): __ext4_iget:4985: inode #15: block 1803188595: comm syz.3.4: invalid block [ 30.551499][ T3260] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.553190][ T3418] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.4: couldn't read orphan inode 15 (err -117) [ 30.560310][ T3260] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.573476][ T3418] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.580494][ T3260] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.601608][ T3260] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.715806][ T3432] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11'. [ 30.733995][ T3418] loop3: detected capacity change from 512 to 11 [ 30.740756][ T3431] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 30.754675][ T3431] EXT4-fs error (device loop3): add_dirent_to_buf:2168: inode #2: comm syz.3.4: mark_inode_dirty error [ 30.944981][ T3266] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 30.975762][ T3436] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 30.983163][ T3436] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 31.000841][ T3266] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 31.010705][ T3436] vhci_hcd: invalid port number 38 [ 31.017496][ T3436] vhci_hcd: invalid port number 38 [ 31.031128][ T3266] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5810: Out of memory [ 31.044849][ T3266] EXT4-fs error (device loop3): __ext4_unlink:3275: inode #2: comm syz-executor: mark_inode_dirty error [ 31.093538][ T3436] __vm_enough_memory: pid: 3436, comm: syz.4.12, bytes: 548979097600 not enough memory for the allocation [ 31.263188][ T3441] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 31.498906][ T3445] loop0: detected capacity change from 0 to 8192 [ 31.515598][ T3445] syz.0.16 (3445) used greatest stack depth: 11288 bytes left [ 31.573651][ T3455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 31.582477][ T3455] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 31.610427][ T3455] loop1: detected capacity change from 0 to 512 [ 31.686228][ T3455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.699080][ T3455] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.747699][ T3454] loop0: detected capacity change from 0 to 4096 [ 31.764417][ T3454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.849955][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.921757][ T3461] netlink: 96 bytes leftover after parsing attributes in process `syz.0.19'. [ 31.971738][ T3463] loop0: detected capacity change from 0 to 4096 [ 31.979081][ T3463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 31.989067][ T3463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.007308][ T3466] netlink: 132 bytes leftover after parsing attributes in process `syz.4.21'. [ 32.017261][ T3466] SET target dimension over the limit! [ 32.023372][ T3463] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.036958][ T3466] netlink: 96 bytes leftover after parsing attributes in process `syz.4.21'. [ 32.061668][ T3468] loop4: detected capacity change from 0 to 512 [ 32.068253][ T3468] EXT4-fs: Ignoring removed bh option [ 32.074646][ T3463] syz.0.20 (3463) used greatest stack depth: 11176 bytes left [ 32.075212][ T3468] EXT4-fs error (device loop4): __ext4_iget:4985: inode #15: block 1803188595: comm syz.4.22: invalid block [ 32.094049][ T3468] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.22: couldn't read orphan inode 15 (err -117) [ 32.107191][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.107227][ T3468] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.161508][ T3473] ipvlan1: entered promiscuous mode [ 32.167658][ T3473] ipvlan1: left promiscuous mode [ 32.184087][ T3468] loop4: detected capacity change from 512 to 11 [ 32.207385][ T3260] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 32.231631][ T3260] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: Out of memory [ 32.253948][ T3260] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 32.279090][ T3260] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.302374][ T3480] loop0: detected capacity change from 0 to 8192 [ 32.344816][ T3455] syz.1.17 (3455) used greatest stack depth: 10424 bytes left [ 32.355141][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.398223][ T3483] loop1: detected capacity change from 0 to 512 [ 32.410307][ T3483] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 32.446521][ T3483] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.29: iget: bad i_size value: -6917529027641081756 [ 32.459760][ T3483] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.29: couldn't read orphan inode 17 (err -117) [ 32.473191][ T3483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.490375][ T3483] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.29: bg 0: block 65: padding at end of block bitmap is not set [ 32.506371][ T3483] EXT4-fs error (device loop1): ext4_acquire_dquot:6848: comm syz.1.29: Failed to acquire dquot type 0 [ 32.594313][ T3483] syz.1.29 (3483) used greatest stack depth: 9104 bytes left [ 32.609512][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.775239][ T3500] loop0: detected capacity change from 0 to 8192 [ 32.811309][ T3502] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 32.817827][ T3502] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 32.825450][ T3502] vhci_hcd vhci_hcd.0: Device attached [ 33.033967][ T3338] vhci_hcd: vhci_device speed not set [ 33.104730][ T3338] usb 1-1: new full-speed USB device number 2 using vhci_hcd [ 33.503290][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888104177600: rx timeout, send abort [ 33.511620][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888104177600: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 33.537744][ T3510] loop2: detected capacity change from 0 to 512 [ 33.544347][ T3510] ======================================================= [ 33.544347][ T3510] WARNING: The mand mount option has been deprecated and [ 33.544347][ T3510] and is ignored by this kernel. Remove the mand [ 33.544347][ T3510] option from the mount to silence this warning. [ 33.544347][ T3510] ======================================================= [ 33.583108][ T3510] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.593171][ T3510] EXT4-fs (loop2): orphan cleanup on readonly fs [ 33.601838][ T3510] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.37: bg 0: block 248: padding at end of block bitmap is not set [ 33.617334][ T3510] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.37: Failed to acquire dquot type 1 [ 33.629814][ T3510] EXT4-fs (loop2): 1 truncate cleaned up [ 33.646803][ T3510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 33.661408][ T3510] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.935323][ T3266] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.950003][ T28] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.019332][ T3524] dccp_close: ABORT with 3 bytes unread [ 34.082523][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888114a6c400: rx timeout, send abort [ 34.090861][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888114a6c400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 34.104571][ T3517] chnl_net:caif_netlink_parms(): no params data found [ 34.113144][ T3503] vhci_hcd: connection closed [ 34.117173][ T40] vhci_hcd: stop threads [ 34.126202][ T40] vhci_hcd: release socket [ 34.130665][ T40] vhci_hcd: disconnect device [ 34.142104][ T3535] loop0: detected capacity change from 0 to 1024 [ 34.172709][ T3535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.190300][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.197470][ T3517] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.205187][ T3517] bridge_slave_0: entered allmulticast mode [ 34.211780][ T3517] bridge_slave_0: entered promiscuous mode [ 34.218810][ T3517] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.226002][ T3517] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.233417][ T3517] bridge_slave_1: entered allmulticast mode [ 34.240067][ T3517] bridge_slave_1: entered promiscuous mode [ 34.267717][ T3517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 34.268996][ T3543] loop2: detected capacity change from 0 to 512 [ 34.290066][ T3517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.301187][ T3543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 34.314308][ T3543] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.327883][ T3543] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.43: Failed to acquire dquot type 0 [ 34.365038][ T3517] team0: Port device team_slave_0 added [ 34.375153][ T3517] team0: Port device team_slave_1 added [ 34.387273][ T3547] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3547 comm=syz.1.44 [ 34.400903][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 34.415631][ T3517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.422661][ T3517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.449047][ T3517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.465041][ T3517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.472060][ T3517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 34.497969][ T3517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.514010][ T3547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 34.522732][ T3547] veth0: entered promiscuous mode [ 34.528371][ T3547] veth0: entered allmulticast mode [ 34.536543][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.592115][ T3517] hsr_slave_0: entered promiscuous mode [ 34.600786][ T3555] loop2: detected capacity change from 0 to 512 [ 34.601599][ T3556] loop1: detected capacity change from 0 to 512 [ 34.607983][ T3555] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 34.624422][ T3517] hsr_slave_1: entered promiscuous mode [ 34.633366][ T3556] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 34.643639][ T3517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 34.651360][ T3517] Cannot create hsr debugfs directory [ 34.655215][ T3556] block device autoloading is deprecated and will be removed. [ 34.669841][ T3556] syz.1.47: attempt to access beyond end of device [ 34.669841][ T3556] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 34.682841][ T3556] EXT4-fs (loop1): couldn't read superblock of external journal [ 34.688880][ T3555] loop2: detected capacity change from 0 to 512 [ 34.708813][ T3555] EXT4-fs: Ignoring removed nobh option [ 34.721158][ T3555] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 34.734368][ T3555] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 34.747224][ T3555] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 34.761322][ T3556] nfs4: Unknown parameter 'K}pnOA? [ 34.761322][ T3556] ' [ 34.762765][ T3555] EXT4-fs (loop2): 1 truncate cleaned up [ 34.776561][ T3555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.790038][ T3556] bridge0: port 3(hsr_slave_1) entered blocking state [ 34.797053][ T3556] bridge0: port 3(hsr_slave_1) entered disabled state [ 34.804081][ T3556] hsr_slave_1: entered allmulticast mode [ 34.810344][ T3556] hsr_slave_1: left allmulticast mode [ 34.861887][ T3561] loop1: detected capacity change from 0 to 512 [ 34.870833][ T3561] EXT4-fs: Ignoring removed i_version option [ 34.886624][ T3561] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 34.915024][ T3561] EXT4-fs (loop1): mount failed [ 34.927890][ T3561] loop1: detected capacity change from 0 to 512 [ 34.935576][ T3561] EXT4-fs: Ignoring removed nomblk_io_submit option [ 34.942184][ T3561] EXT4-fs: dax option not supported [ 34.989933][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.991950][ T3569] ip6gre0: entered promiscuous mode [ 35.021436][ T3568] ip6gre0: left promiscuous mode [ 35.021826][ T3571] process 'syz.2.52' launched './file1' with NULL argv: empty string added [ 35.070622][ T3574] loop1: detected capacity change from 0 to 4096 [ 35.079755][ T3571] syzkaller0: entered promiscuous mode [ 35.081596][ T3574] EXT4-fs: Ignoring removed nomblk_io_submit option [ 35.085338][ T3571] syzkaller0: entered allmulticast mode [ 35.101819][ T3574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.151067][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.230459][ T3580] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 35.236994][ T3580] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 35.244811][ T3580] vhci_hcd vhci_hcd.0: Device attached [ 35.365082][ T3583] chnl_net:caif_netlink_parms(): no params data found [ 35.397118][ T3583] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.404634][ T3583] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.411760][ T3583] bridge_slave_0: entered allmulticast mode [ 35.418135][ T3583] bridge_slave_0: entered promiscuous mode [ 35.425224][ T3583] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.432243][ T3583] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.439357][ T3583] bridge_slave_1: entered allmulticast mode [ 35.445890][ T3583] bridge_slave_1: entered promiscuous mode [ 35.455019][ T9] vhci_hcd: vhci_device speed not set [ 35.466359][ T3583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.476695][ T3583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.497661][ T3583] team0: Port device team_slave_0 added [ 35.504305][ T3583] team0: Port device team_slave_1 added [ 35.517082][ T3583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.524021][ T3583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.549934][ T3583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.560460][ T9] usb 3-1: new full-speed USB device number 2 using vhci_hcd [ 35.561424][ T3583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.575285][ T3583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.601187][ T3583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.616394][ T28] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.641214][ T3583] hsr_slave_0: entered promiscuous mode [ 35.647598][ T3583] hsr_slave_1: entered promiscuous mode [ 35.653576][ T3583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 35.661139][ T3583] Cannot create hsr debugfs directory [ 35.669068][ T28] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.716408][ T28] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 35.755283][ T3601] loop2: detected capacity change from 0 to 512 [ 35.762378][ T3601] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 35.775269][ T3601] syz.2.59: attempt to access beyond end of device [ 35.775269][ T3601] loop75: rw=0, sector=2, nr_sectors = 2 limit=0 [ 35.787582][ T3603] loop0: detected capacity change from 0 to 2048 [ 35.793952][ T3601] EXT4-fs (loop2): couldn't read superblock of external journal [ 35.811545][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 35.811557][ T29] audit: type=1400 audit(1724842198.000:390): avc: denied { search } for pid=2999 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 35.838044][ T3603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.839151][ T29] audit: type=1400 audit(1724842198.030:391): avc: denied { read } for pid=2999 comm="dhcpcd" name="n25" dev="tmpfs" ino=880 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.872517][ T29] audit: type=1400 audit(1724842198.030:392): avc: denied { open } for pid=2999 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=880 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.895508][ T29] audit: type=1400 audit(1724842198.030:393): avc: denied { getattr } for pid=2999 comm="dhcpcd" path="/run/udev/data/n25" dev="tmpfs" ino=880 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 35.923997][ T28] bridge_slave_1: left allmulticast mode [ 35.924530][ T3601] nfs4: Unknown parameter 'K}pnOA? [ 35.924530][ T3601] ' [ 35.929721][ T28] bridge_slave_1: left promiscuous mode [ 35.943718][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.952670][ T28] bridge_slave_0: left allmulticast mode [ 35.958371][ T28] bridge_slave_0: left promiscuous mode [ 35.964067][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.989914][ T3609] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.006925][ T3609] EXT4-fs (loop0): Remounting filesystem read-only [ 36.014015][ T3609] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop0 ino=15 [ 36.056011][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 36.066646][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 36.076814][ T28] bond0 (unregistering): Released all slaves [ 36.085194][ T3603] tun0: tun_chr_ioctl cmd 2148553947 [ 36.090580][ T3601] bridge0: port 3(hsr_slave_1) entered blocking state [ 36.097407][ T3601] bridge0: port 3(hsr_slave_1) entered disabled state [ 36.105760][ T3601] hsr_slave_1: entered allmulticast mode [ 36.111852][ T3601] hsr_slave_1: left allmulticast mode [ 36.117573][ T29] audit: type=1400 audit(1724842198.310:394): avc: denied { read } for pid=3612 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.140500][ T29] audit: type=1400 audit(1724842198.310:395): avc: denied { open } for pid=3612 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.165407][ T29] audit: type=1400 audit(1724842198.310:396): avc: denied { getattr } for pid=3612 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=343 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.191609][ T29] audit: type=1400 audit(1724842198.350:397): avc: denied { write } for pid=3611 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=342 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.214515][ T29] audit: type=1400 audit(1724842198.350:398): avc: denied { add_name } for pid=3611 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 36.236904][ T29] audit: type=1400 audit(1724842198.350:399): avc: denied { create } for pid=3611 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 36.312846][ T28] hsr_slave_0: left promiscuous mode [ 36.320741][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.330499][ T28] hsr_slave_1: left promiscuous mode [ 36.337494][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.344993][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.369243][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.376904][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.382894][ T3640] loop0: detected capacity change from 0 to 512 [ 36.390968][ T3640] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 36.401005][ T28] veth1_macvtap: left promiscuous mode [ 36.406545][ T28] veth0_macvtap: left promiscuous mode [ 36.412082][ T28] veth1_vlan: left promiscuous mode [ 36.417411][ T28] veth0_vlan: left promiscuous mode [ 36.457930][ T3643] loop0: detected capacity change from 0 to 512 [ 36.464426][ T3643] EXT4-fs: Ignoring removed nobh option [ 36.470324][ T3643] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 36.485536][ T3643] EXT4-fs (loop0): 1 truncate cleaned up [ 36.491512][ T3643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.501719][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888113c89200: rx timeout, send abort [ 36.512457][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888113c89200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 36.529177][ T3581] vhci_hcd: connection closed [ 36.530174][ T63] vhci_hcd: stop threads [ 36.539204][ T63] vhci_hcd: release socket [ 36.543612][ T63] vhci_hcd: disconnect device [ 36.574310][ T28] team0 (unregistering): Port device team_slave_1 removed [ 36.594168][ T28] team0 (unregistering): Port device team_slave_0 removed [ 36.680952][ T3647] loop1: detected capacity change from 0 to 512 [ 36.699729][ T3647] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 36.729613][ T3647] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.63: iget: bad i_size value: -6917529027641081756 [ 36.748012][ T3583] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.758978][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.771069][ T3647] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.63: couldn't read orphan inode 17 (err -117) [ 36.798130][ T3668] FAULT_INJECTION: forcing a failure. [ 36.798130][ T3668] name failslab, interval 1, probability 0, space 0, times 1 [ 36.798909][ T3647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.810876][ T3668] CPU: 1 UID: 0 PID: 3668 Comm: syz.0.64 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 36.810903][ T3668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 36.843841][ T3668] Call Trace: [ 36.847120][ T3668] [ 36.850047][ T3668] dump_stack_lvl+0xf2/0x150 [ 36.854728][ T3668] dump_stack+0x15/0x20 [ 36.858955][ T3668] should_fail_ex+0x229/0x230 [ 36.863689][ T3668] ? dst_alloc+0xc0/0x100 [ 36.868028][ T3668] should_failslab+0x8f/0xb0 [ 36.872701][ T3668] kmem_cache_alloc_noprof+0x4c/0x290 [ 36.878151][ T3668] dst_alloc+0xc0/0x100 [ 36.882361][ T3668] ip_route_input_rcu+0x1725/0x1c10 [ 36.887559][ T3668] ? nf_conntrack_icmpv4_error+0x202/0x2f0 [ 36.893388][ T3668] ip_route_input_noref+0x63/0xa0 [ 36.898414][ T3668] ip_rcv_finish_core+0x304/0xb20 [ 36.903443][ T3668] ? __pfx_ip_rcv+0x10/0x10 [ 36.907949][ T3668] ip_rcv_finish+0xfe/0x1b0 [ 36.912463][ T3668] ? __pfx_ip_rcv+0x10/0x10 [ 36.916969][ T3668] ip_rcv+0x64/0x140 [ 36.920868][ T3668] ? __pfx_ip_rcv_finish+0x10/0x10 [ 36.925994][ T3668] ? __pfx_ip_rcv+0x10/0x10 [ 36.930492][ T3668] __netif_receive_skb+0x10a/0x280 [ 36.935591][ T3668] netif_receive_skb+0x4a/0x320 [ 36.940421][ T3668] ? virtio_net_hdr_to_skb+0x6c4/0xb50 [ 36.945860][ T3668] ? tun_rx_batched+0xba/0x410 [ 36.950708][ T3668] tun_rx_batched+0xf0/0x410 [ 36.955424][ T3668] tun_get_user+0x1e77/0x24b0 [ 36.960163][ T3668] ? kstrtoull+0x110/0x140 [ 36.964557][ T3668] ? ref_tracker_alloc+0x1f5/0x2f0 [ 36.969696][ T3668] tun_chr_write_iter+0x18e/0x240 [ 36.974738][ T3668] vfs_write+0x78f/0x900 [ 36.978963][ T3668] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 36.984548][ T3668] ksys_write+0xeb/0x1b0 [ 36.988907][ T3668] __x64_sys_write+0x42/0x50 [ 36.993488][ T3668] x64_sys_call+0x27dd/0x2d60 [ 36.998147][ T3668] do_syscall_64+0xc9/0x1c0 [ 37.002638][ T3668] ? clear_bhb_loop+0x55/0xb0 [ 37.007300][ T3668] ? clear_bhb_loop+0x55/0xb0 [ 37.011984][ T3668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.017871][ T3668] RIP: 0033:0x7fdfe392895f [ 37.022349][ T3668] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 37.042009][ T3668] RSP: 002b:00007fdfe25a1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 37.050445][ T3668] RAX: ffffffffffffffda RBX: 00007fdfe3ac5f80 RCX: 00007fdfe392895f [ 37.058411][ T3668] RDX: 0000000000000046 RSI: 0000000020000000 RDI: 00000000000000c8 [ 37.066366][ T3668] RBP: 00007fdfe25a1090 R08: 0000000000000000 R09: 0000000000000000 [ 37.074355][ T3668] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 37.082321][ T3668] R13: 0000000000000000 R14: 00007fdfe3ac5f80 R15: 00007ffd9bbcdac8 [ 37.090317][ T3668] [ 37.099215][ T3583] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.116890][ T3683] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3683 comm=syz.0.65 [ 37.131620][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.65'. [ 37.140440][ T3683] veth0_vlan: entered allmulticast mode [ 37.173801][ T3583] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.203181][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.253089][ T3583] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.309959][ T3690] loop2: detected capacity change from 0 to 4096 [ 37.319793][ T3698] IPv6: NLM_F_CREATE should be specified when creating new route [ 37.340718][ T3690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.361089][ T3517] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.369557][ T3517] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.378459][ T3517] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.389176][ T28] bridge_slave_1: left allmulticast mode [ 37.394848][ T28] bridge_slave_1: left promiscuous mode [ 37.400584][ T28] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.409033][ T28] bridge_slave_0: left allmulticast mode [ 37.414765][ T28] bridge_slave_0: left promiscuous mode [ 37.420510][ T28] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.429975][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.460139][ T3706] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3706 comm=syz.0.75 [ 37.497187][ T3711] loop2: detected capacity change from 0 to 512 [ 37.504390][ T3711] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.515540][ T3711] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #17: comm syz.2.76: iget: bad i_size value: -6917529027641081756 [ 37.529111][ T3711] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.76: couldn't read orphan inode 17 (err -117) [ 37.541078][ T28] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.541392][ T3711] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.565131][ T28] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.574490][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.575846][ T28] bond0 (unregistering): Released all slaves [ 37.595398][ T3517] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.608065][ T3706] netlink: 4 bytes leftover after parsing attributes in process `syz.0.75'. [ 37.616883][ T3706] macsec0: entered promiscuous mode [ 37.622127][ T3706] macsec0: entered allmulticast mode [ 37.627520][ T3706] veth1_macvtap: entered allmulticast mode [ 37.636439][ T3715] veth1_macvtap: left allmulticast mode [ 37.642243][ T3715] veth1_macvtap: left promiscuous mode [ 37.686948][ T3583] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.702914][ T28] hsr_slave_0: left promiscuous mode [ 37.715542][ T28] hsr_slave_1: left promiscuous mode [ 37.721577][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.729067][ T28] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.736879][ T28] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.744423][ T28] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.752009][ T3724] FAULT_INJECTION: forcing a failure. [ 37.752009][ T3724] name failslab, interval 1, probability 0, space 0, times 0 [ 37.764669][ T3724] CPU: 0 UID: 0 PID: 3724 Comm: syz.0.80 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 37.775232][ T3724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 37.785273][ T3724] Call Trace: [ 37.788611][ T3724] [ 37.791528][ T3724] dump_stack_lvl+0xf2/0x150 [ 37.796183][ T3724] dump_stack+0x15/0x20 [ 37.800333][ T3724] should_fail_ex+0x229/0x230 [ 37.805006][ T3724] ? security_inode_alloc+0x32/0xd0 [ 37.810222][ T3724] should_failslab+0x8f/0xb0 [ 37.814844][ T3724] kmem_cache_alloc_noprof+0x4c/0x290 [ 37.820210][ T3724] security_inode_alloc+0x32/0xd0 [ 37.825254][ T3724] inode_init_always+0x439/0x480 [ 37.830212][ T3724] ? __pfx_sock_alloc_inode+0x10/0x10 [ 37.835643][ T3724] alloc_inode+0x7d/0x160 [ 37.840004][ T3724] new_inode_pseudo+0x15/0x20 [ 37.844710][ T3724] __sock_create+0x12b/0x4f0 [ 37.849287][ T3724] __sys_socket+0xae/0x240 [ 37.853692][ T3724] __x64_sys_socket+0x3f/0x50 [ 37.858356][ T3724] x64_sys_call+0x2c97/0x2d60 [ 37.863027][ T3724] do_syscall_64+0xc9/0x1c0 [ 37.867525][ T3724] ? clear_bhb_loop+0x55/0xb0 [ 37.872234][ T3724] ? clear_bhb_loop+0x55/0xb0 [ 37.876927][ T3724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.882866][ T3724] RIP: 0033:0x7fdfe3929e79 [ 37.887394][ T3724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 37.907030][ T3724] RSP: 002b:00007fdfe25a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 37.915429][ T3724] RAX: ffffffffffffffda RBX: 00007fdfe3ac5f80 RCX: 00007fdfe3929e79 [ 37.923456][ T3724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.931447][ T3724] RBP: 00007fdfe25a1090 R08: 0000000000000000 R09: 0000000000000000 [ 37.939408][ T3724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 37.947462][ T3724] R13: 0000000000000000 R14: 00007fdfe3ac5f80 R15: 00007ffd9bbcdac8 [ 37.955515][ T3724] [ 37.958717][ T3724] socket: no more sockets [ 37.967008][ T28] veth1_macvtap: left promiscuous mode [ 37.972570][ T28] veth0_macvtap: left promiscuous mode [ 37.978143][ T28] veth1_vlan: left promiscuous mode [ 37.983358][ T28] veth0_vlan: left promiscuous mode [ 38.034704][ T3727] loop2: detected capacity change from 0 to 8192 [ 38.042019][ T3727] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 38.071528][ T3731] loop0: detected capacity change from 0 to 4096 [ 38.082545][ T3731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.125157][ T28] team0 (unregistering): Port device team_slave_1 removed [ 38.135202][ T3726] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 38.144031][ T3726] FAT-fs (loop2): Filesystem has been set read-only [ 38.150876][ T3338] usb 1-1: enqueue for inactive port 0 [ 38.151012][ T28] team0 (unregistering): Port device team_slave_0 removed [ 38.156436][ T3338] usb 1-1: enqueue for inactive port 0 [ 38.171380][ T3726] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 38.196997][ T3726] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 38.197094][ T3259] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.220961][ T3583] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.230446][ T3734] loop1: detected capacity change from 0 to 512 [ 38.238819][ T3583] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.253620][ T3263] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 1050) [ 38.262646][ T3734] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 38.273489][ T3338] vhci_hcd: vhci_device speed not set [ 38.281241][ T3517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.305859][ T3583] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.317912][ T3517] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.329857][ T3734] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #17: comm syz.1.85: iget: bad i_size value: -6917529027641081756 [ 38.366838][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.373930][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.386921][ T3734] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.85: couldn't read orphan inode 17 (err -117) [ 38.401996][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.405215][ T3742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3742 comm=syz.2.87 [ 38.409069][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.423006][ T3734] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.439910][ T3742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.87'. [ 38.449727][ T3742] veth0_macvtap: entered allmulticast mode [ 38.503131][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.518529][ T3745] veth0_vlan: left allmulticast mode [ 38.562300][ T3749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3749 comm=syz.2.89 [ 38.567586][ T3583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.589131][ T3749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.89'. [ 38.595567][ T3583] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.597825][ T3749] netlink: 'syz.2.89': attribute type 3 has an invalid length. [ 38.610305][ T3517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.619095][ T3753] FAULT_INJECTION: forcing a failure. [ 38.619095][ T3753] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.632317][ T3753] CPU: 1 UID: 0 PID: 3753 Comm: syz.1.88 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 38.642870][ T3753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 38.652918][ T3753] Call Trace: [ 38.656186][ T3753] [ 38.659173][ T3753] dump_stack_lvl+0xf2/0x150 [ 38.663845][ T3753] dump_stack+0x15/0x20 [ 38.668008][ T3753] should_fail_ex+0x229/0x230 [ 38.672786][ T3753] should_fail+0xb/0x10 [ 38.676943][ T3753] should_fail_usercopy+0x1a/0x20 [ 38.682157][ T3753] _copy_from_user+0x1e/0xd0 [ 38.686755][ T3753] input_event_from_user+0x126/0x1e0 [ 38.692052][ T3753] ? input_inject_event+0xe1/0x100 [ 38.697229][ T3753] evdev_write+0x288/0x420 [ 38.697870][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.701638][ T3753] ? __pfx_evdev_write+0x10/0x10 [ 38.701660][ T3753] vfs_write+0x28b/0x900 [ 38.701685][ T3753] ? __fget_files+0x1da/0x210 [ 38.708714][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.713582][ T3753] ksys_write+0xeb/0x1b0 [ 38.733929][ T3753] __x64_sys_write+0x42/0x50 [ 38.738530][ T3753] x64_sys_call+0x27dd/0x2d60 [ 38.743219][ T3753] do_syscall_64+0xc9/0x1c0 [ 38.747739][ T3753] ? clear_bhb_loop+0x55/0xb0 [ 38.748051][ T3583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.752491][ T3753] ? clear_bhb_loop+0x55/0xb0 [ 38.762811][ T3583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.767442][ T3753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 38.783649][ T3753] RIP: 0033:0x7fd8e5329e79 [ 38.788059][ T3753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.802410][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.807793][ T3753] RSP: 002b:00007fd8e3f86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 38.807814][ T3753] RAX: ffffffffffffffda RBX: 00007fd8e54c6058 RCX: 00007fd8e5329e79 [ 38.814844][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.823192][ T3753] RDX: 0000000000001068 RSI: 0000000020000040 RDI: 0000000000000006 [ 38.846328][ T3753] RBP: 00007fd8e3f86090 R08: 0000000000000000 R09: 0000000000000000 [ 38.854295][ T3753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.862339][ T3753] R13: 0000000000000001 R14: 00007fd8e54c6058 R15: 00007ffee3254c08 [ 38.870310][ T3753] [ 38.953625][ T3583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.968557][ T3756] FAULT_INJECTION: forcing a failure. [ 38.968557][ T3756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 38.981649][ T3756] CPU: 0 UID: 0 PID: 3756 Comm: syz.2.90 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 38.992148][ T3756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 38.997196][ T3517] veth0_vlan: entered promiscuous mode [ 39.002189][ T3756] Call Trace: [ 39.002197][ T3756] [ 39.002203][ T3756] dump_stack_lvl+0xf2/0x150 [ 39.010819][ T3517] veth1_vlan: entered promiscuous mode [ 39.010967][ T3756] dump_stack+0x15/0x20 [ 39.010997][ T3756] should_fail_ex+0x229/0x230 [ 39.011022][ T3756] should_fail+0xb/0x10 [ 39.022728][ T3517] veth0_macvtap: entered promiscuous mode [ 39.024011][ T3756] should_fail_usercopy+0x1a/0x20 [ 39.030721][ T3517] veth1_macvtap: entered promiscuous mode [ 39.032854][ T3756] _copy_to_user+0x1e/0xa0 [ 39.041061][ T3517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.042702][ T3756] put_timespec64+0x64/0xb0 [ 39.047744][ T3517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.053395][ T3756] nanosleep_copyout+0x4b/0xc0 [ 39.057810][ T3517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.057824][ T3517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.057833][ T3517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.068202][ T3756] do_cpu_nanosleep+0x2a9/0x300 [ 39.072693][ T3517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.074896][ T3517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.082471][ T3756] posix_cpu_nsleep_restart+0x56/0x80 [ 39.082506][ T3756] __do_sys_restart_syscall+0x35/0x40 [ 39.091051][ T3517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.097658][ T3756] x64_sys_call+0x1803/0x2d60 [ 39.097686][ T3756] do_syscall_64+0xc9/0x1c0 [ 39.107529][ T3517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.118023][ T3756] ? clear_bhb_loop+0x55/0xb0 [ 39.122805][ T3517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.132572][ T3756] ? clear_bhb_loop+0x55/0xb0 [ 39.132604][ T3756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.139776][ T3517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.145116][ T3756] RIP: 0033:0x7f0fb8309e79 [ 39.145133][ T3756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.150475][ T3517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.161108][ T3756] RSP: 002b:00007f0fb6f87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000db [ 39.161131][ T3756] RAX: ffffffffffffffda RBX: 00007f0fb84a5f80 RCX: 00007f0fb8309e79 [ 39.165827][ T3517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.170245][ T3756] RDX: 0000000020000080 RSI: 0000000000000000 RDI: 0000000000000002 [ 39.284558][ T3756] RBP: 00007f0fb6f87090 R08: 0000000000000000 R09: 0000000000000000 [ 39.292527][ T3756] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000001 [ 39.300507][ T3756] R13: 0000000000000000 R14: 00007f0fb84a5f80 R15: 00007ffeef522e18 [ 39.308516][ T3756] [ 39.315564][ T3517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.328953][ T3517] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.337770][ T3517] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.346647][ T3517] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.355345][ T3517] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.449560][ T3781] loop1: detected capacity change from 0 to 512 [ 39.488708][ T3781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.512632][ T3781] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.550137][ T3583] veth0_vlan: entered promiscuous mode [ 39.560619][ T3583] veth1_vlan: entered promiscuous mode [ 39.576475][ T3583] veth0_macvtap: entered promiscuous mode [ 39.583649][ T3583] veth1_macvtap: entered promiscuous mode [ 39.593369][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.603921][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.613736][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.624311][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.634217][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.644704][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.654530][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.664945][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.677009][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.685219][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.695650][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.705578][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.716059][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.725989][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.736429][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.746247][ T3583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.756667][ T3583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.769437][ T3583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.780053][ T3803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.96'. [ 39.781084][ T3798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3798 comm=syz.0.98 [ 39.800126][ T3583] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.809749][ T3583] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.818584][ T3583] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.827413][ T3583] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.839353][ T3798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.98'. [ 39.850789][ T3798] bond_slave_0: entered promiscuous mode [ 39.856457][ T3798] bond_slave_1: entered promiscuous mode [ 39.862187][ T3798] macvtap1: entered promiscuous mode [ 39.867581][ T3798] bond0: entered promiscuous mode [ 39.872875][ T3798] macvtap1: entered allmulticast mode [ 39.878537][ T3798] bond0: entered allmulticast mode [ 39.883639][ T3798] bond_slave_0: entered allmulticast mode [ 39.889465][ T3798] bond_slave_1: entered allmulticast mode [ 39.897728][ T3798] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 39.916128][ T3805] bond0: left allmulticast mode [ 39.921078][ T3805] bond_slave_0: left allmulticast mode [ 39.926655][ T3805] bond_slave_1: left allmulticast mode [ 39.932162][ T3805] bond0: left promiscuous mode [ 39.937231][ T3805] bond_slave_0: left promiscuous mode [ 39.942658][ T3805] bond_slave_1: left promiscuous mode [ 40.028078][ T3813] netlink: 'syz.0.101': attribute type 1 has an invalid length. [ 40.035867][ T3813] netlink: 12 bytes leftover after parsing attributes in process `syz.0.101'. [ 40.048154][ T3822] loop4: detected capacity change from 0 to 1024 [ 40.057006][ T3822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.077754][ T3828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.104'. [ 40.129118][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.267906][ T3583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.400703][ C1] hrtimer: interrupt took 67782 ns [ 40.568625][ T3879] loop4: detected capacity change from 0 to 512 [ 40.570146][ T3880] loop1: detected capacity change from 0 to 512 [ 40.585584][ T3879] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 40.596470][ T3880] EXT4-fs: quotafile must be on filesystem root [ 40.614490][ T9] usb 3-1: enqueue for inactive port 0 [ 40.627020][ T9] usb 3-1: enqueue for inactive port 0 [ 40.721014][ T9] vhci_hcd: vhci_device speed not set [ 40.978305][ T29] kauditd_printk_skb: 72 callbacks suppressed [ 40.978322][ T29] audit: type=1400 audit(1724842203.130:472): avc: denied { setopt } for pid=3877 comm="syz.4.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 41.069274][ T3887] loop3: detected capacity change from 0 to 1024 [ 41.091346][ T3889] loop0: detected capacity change from 0 to 512 [ 41.099364][ T3887] EXT4-fs: Ignoring removed i_version option [ 41.118004][ T3889] EXT4-fs (loop0): blocks per group (71) and clusters per group (20800) inconsistent [ 41.176512][ T3892] loop1: detected capacity change from 0 to 2048 [ 41.199827][ T3887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.215041][ T3892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.242754][ T29] audit: type=1400 audit(1724842203.420:473): avc: denied { write } for pid=3884 comm="syz.1.124" path="/34/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 41.635652][ T3898] loop2: detected capacity change from 0 to 256 [ 41.693539][ T3898] vfat: Bad value for 'fmask' [ 41.698950][ T3900] loop4: detected capacity change from 0 to 512 [ 41.743499][ T3900] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 41.882409][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.890117][ T3902] loop2: detected capacity change from 0 to 512 [ 41.899660][ T3902] EXT4-fs (loop2): blocks per group (71) and clusters per group (20800) inconsistent [ 41.963069][ T29] audit: type=1400 audit(1724842204.150:474): avc: denied { read write } for pid=3901 comm="syz.2.129" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 41.986843][ T29] audit: type=1400 audit(1724842204.150:475): avc: denied { open } for pid=3901 comm="syz.2.129" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 42.024564][ T3906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.033207][ T3517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.044124][ T3906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.445079][ T3918] loop3: detected capacity change from 0 to 256 [ 42.452925][ T3918] vfat: Bad value for 'fmask' [ 42.497596][ T3920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.507748][ T3920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.589182][ T3924] loop1: detected capacity change from 0 to 512 [ 42.598516][ T3924] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13 [ 42.608591][ T3924] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.137: invalid indirect mapped block 2683928664 (level 1) [ 42.622943][ T3924] EXT4-fs (loop1): Remounting filesystem read-only [ 42.629707][ T3924] EXT4-fs (loop1): 1 truncate cleaned up [ 42.635674][ T3924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.648182][ T3924] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 42.656686][ T3924] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.711249][ T3929] loop1: detected capacity change from 0 to 256 [ 42.719270][ T3929] vfat: Bad value for 'fmask' [ 42.738198][ T29] audit: type=1400 audit(1724842204.860:476): avc: denied { remount } for pid=3923 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 42.957517][ T29] audit: type=1400 audit(1724842205.140:477): avc: denied { setattr } for pid=3934 comm="syz.0.141" path="/dev/ppp" dev="devtmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 44.000621][ T3947] netpci0: tun_chr_ioctl cmd 1074025677 [ 44.020445][ T3942] Illegal XDP return value 4294967274 on prog (id 65) dev N/A, expect packet loss! [ 44.021614][ T3947] netpci0: linktype set to 771 [ 44.180182][ T3957] syzkaller0: entered promiscuous mode [ 44.185718][ T3957] syzkaller0: entered allmulticast mode [ 46.640689][ T4026] wg2: entered allmulticast mode [ 47.173216][ T29] audit: type=1400 audit(1724842209.360:478): avc: denied { tracepoint } for pid=4075 comm="syz.3.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 47.259963][ T4086] loop1: detected capacity change from 0 to 1024 [ 47.286500][ T4086] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.317577][ T4086] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 47.328513][ T4086] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 47.354753][ T4086] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 47.356605][ T4092] loop3: detected capacity change from 0 to 128 [ 47.376250][ T4086] JBD2: no valid journal superblock found [ 47.382013][ T4086] EXT4-fs (loop1): Could not load journal inode [ 47.447290][ T29] audit: type=1400 audit(1724842209.630:479): avc: denied { write } for pid=4094 comm="syz.1.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 47.495860][ T4098] loop1: detected capacity change from 0 to 512 [ 47.534229][ T4098] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.543076][ T4098] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.549589][ T4098] EXT4-fs: Ignoring removed i_version option [ 47.559870][ T4098] EXT4-fs error (device loop1): __ext4_iget:4985: inode #11: block 1: comm syz.1.208: invalid block [ 47.572223][ T4098] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.208: couldn't read orphan inode 11 (err -117) [ 47.585286][ T4098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.600333][ T4098] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.208: Directory hole found for htree leaf block 0 [ 47.600650][ T29] audit: type=1400 audit(1724842209.790:480): avc: denied { create } for pid=4097 comm="syz.1.208" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 47.636092][ T29] audit: type=1400 audit(1724842209.810:481): avc: denied { bind } for pid=4091 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.655353][ T29] audit: type=1400 audit(1724842209.810:482): avc: denied { connect } for pid=4091 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 47.812442][ T4103] netlink: 24 bytes leftover after parsing attributes in process `syz.1.208'. [ 47.822595][ T4103] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.208: Directory hole found for htree leaf block 0 [ 47.837126][ T4103] EXT4-fs error (device loop1): ext4_add_entry:2435: inode #2: comm syz.1.208: Directory hole found for htree leaf block 0 [ 47.931815][ T29] audit: type=1400 audit(1724842210.120:483): avc: denied { create } for pid=4104 comm="syz.4.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 48.104896][ T4111] loop4: detected capacity change from 0 to 512 [ 48.111313][ T4111] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.117976][ T4111] EXT4-fs: Ignoring removed mblk_io_submit option [ 48.124476][ T4111] EXT4-fs: Ignoring removed i_version option [ 48.136234][ T4111] EXT4-fs error (device loop4): __ext4_iget:4985: inode #11: block 1: comm syz.4.211: invalid block [ 48.154016][ T4111] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.211: couldn't read orphan inode 11 (err -117) [ 48.167301][ T4111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.183285][ T4111] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.211: Directory hole found for htree leaf block 0 [ 48.351811][ T29] audit: type=1400 audit(1724842210.540:484): avc: denied { unmount } for pid=3517 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 48.385963][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.427725][ T4125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.211'. [ 48.438976][ T4125] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.211: Directory hole found for htree leaf block 0 [ 48.456316][ T4125] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.211: Directory hole found for htree leaf block 0 [ 48.739753][ T29] audit: type=1326 audit(1724842210.920:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e5329e79 code=0x7ffc0000 [ 48.762996][ T29] audit: type=1326 audit(1724842210.920:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8e5329e79 code=0x7ffc0000 [ 48.790875][ T29] audit: type=1326 audit(1724842210.950:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4126 comm="syz.1.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fd8e5329e79 code=0x7ffc0000 [ 48.890673][ T4135] loop1: detected capacity change from 0 to 512 [ 48.907739][ T4135] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.920725][ T4135] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.065210][ T3583] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.281128][ T4149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.370760][ T4149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.754509][ T4158] syz.4.225[4158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.754561][ T4158] syz.4.225[4158] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 49.785860][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.851316][ T4158] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 50.118484][ T4179] netlink: 'syz.4.235': attribute type 5 has an invalid length. [ 50.193669][ T4195] team0: entered promiscuous mode [ 50.198766][ T4195] team_slave_0: entered promiscuous mode [ 50.204499][ T4195] team_slave_1: entered promiscuous mode [ 50.211523][ T4194] team0: left promiscuous mode [ 50.216314][ T4194] team_slave_0: left promiscuous mode [ 50.221905][ T4194] team_slave_1: left promiscuous mode [ 50.230519][ T4197] netlink: 'syz.0.242': attribute type 1 has an invalid length. [ 50.424639][ T4205] syz.0.246 uses obsolete (PF_INET,SOCK_PACKET) [ 50.447090][ T4231] sctp: [Deprecated]: syz.1.255 (pid 4231) Use of struct sctp_assoc_value in delayed_ack socket option. [ 50.447090][ T4231] Use struct sctp_sack_info instead [ 50.447930][ T4230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 50.574618][ T4238] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'. [ 52.107986][ T4294] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.459548][ T4296] loop2: detected capacity change from 0 to 2048 [ 52.479836][ T4296] EXT4-fs: Ignoring removed orlov option [ 52.528835][ T4296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.557399][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 52.557413][ T29] audit: type=1400 audit(1724842214.576:523): avc: denied { map } for pid=4295 comm="syz.2.276" path="/45/file0/blkio.bfq.avg_queue_size" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.587672][ T29] audit: type=1400 audit(1724842214.576:524): avc: denied { execute } for pid=4295 comm="syz.2.276" path="/45/file0/blkio.bfq.avg_queue_size" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.642851][ T4296] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 52.683298][ T4296] EXT4-fs (loop2): Remounting filesystem read-only [ 52.703490][ T3263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.878945][ T4305] loop1: detected capacity change from 0 to 128 [ 52.897383][ T29] audit: type=1400 audit(1724842214.894:525): avc: denied { mount } for pid=4304 comm="syz.1.278" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 53.199769][ T29] audit: type=1400 audit(1724842214.997:526): avc: denied { write } for pid=4301 comm="syz.2.277" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 53.388823][ T29] audit: type=1400 audit(1724842215.352:527): avc: denied { ioctl } for pid=4316 comm="syz.0.282" path="socket:[6723]" dev="sockfs" ino=6723 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.435622][ T29] audit: type=1400 audit(1724842215.390:528): avc: denied { write } for pid=4316 comm="syz.0.282" path="socket:[6723]" dev="sockfs" ino=6723 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 53.531531][ T29] audit: type=1400 audit(1724842215.483:529): avc: denied { connect } for pid=4318 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.561739][ T4320] Option ''MO' to dns_resolver key: bad/missing value [ 53.582397][ T29] audit: type=1400 audit(1724842215.511:530): avc: denied { bind } for pid=4318 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.601500][ T29] audit: type=1400 audit(1724842215.511:531): avc: denied { write } for pid=4318 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.601576][ T29] audit: type=1400 audit(1724842215.521:532): avc: denied { getopt } for pid=4318 comm="syz.0.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 53.819415][ T4335] loop1: detected capacity change from 0 to 1024 [ 53.836349][ T4334] eth0_vlan: renamed from bridge_slave_1 (while UP) [ 53.856844][ T4337] af_packet: tpacket_rcv: packet too big, clamped from 4048 to 3952. macoff=96 [ 53.871079][ T4334] netlink: 'syz.0.288': attribute type 10 has an invalid length. [ 53.879313][ T4334] bridge0: port 2(eth0_vlan) entered disabled state [ 53.886190][ T4334] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.901899][ T4335] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.927790][ T4334] bridge0: port 2(eth0_vlan) entered blocking state [ 53.934590][ T4334] bridge0: port 2(eth0_vlan) entered forwarding state [ 53.941563][ T4334] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.948738][ T4334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.965285][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.996757][ T4334] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 54.039292][ T3339] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 54.050921][ T3339] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.053839][ T4348] syzkaller0: entered promiscuous mode [ 54.066026][ T4348] syzkaller0: entered allmulticast mode [ 54.101277][ T4354] netlink: 12 bytes leftover after parsing attributes in process `syz.4.295'. [ 54.129567][ T40] syzkaller0: tun_net_xmit 48 [ 54.137292][ T4348] syzkaller0: tun_net_xmit 1280 [ 54.142195][ T4348] syzkaller0: create flow: hash 2267900210 index 1 [ 54.171010][ T4347] syzkaller0: delete flow: hash 2267900210 index 1 [ 54.656943][ T4367] netlink: 20 bytes leftover after parsing attributes in process `syz.1.300'. [ 55.037525][ T4385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.071864][ T4385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.189947][ T4387] netlink: 'syz.4.304': attribute type 10 has an invalid length. [ 55.561046][ T4398] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 55.675996][ T4407] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 55.911567][ T4415] loop1: detected capacity change from 0 to 1024 [ 55.919445][ T4415] EXT4-fs: Ignoring removed orlov option [ 55.932021][ T4415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 55.939956][ T4415] EXT4-fs (loop1): stripe (106) is not aligned with cluster size (16), stripe is disabled [ 55.971760][ T4415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.005280][ T4420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.015590][ T4420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.027510][ T4420] loop3: detected capacity change from 0 to 512 [ 56.057524][ T4420] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.070281][ T4420] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.084834][ T4420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.094576][ T4420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.322230][ T4421] ================================================================== [ 56.330339][ T4421] BUG: KCSAN: data-race in __writeback_single_inode / generic_buffers_fsync_noflush [ 56.339720][ T4421] [ 56.342041][ T4421] read-write to 0xffff888113864640 of 8 bytes by task 4415 on cpu 0: [ 56.350104][ T4421] __writeback_single_inode+0x201/0x870 [ 56.355658][ T4421] writeback_single_inode+0x12f/0x4a0 [ 56.361027][ T4421] sync_inode_metadata+0x5c/0x90 [ 56.365961][ T4421] generic_buffers_fsync_noflush+0xe4/0x130 [ 56.371860][ T4421] ext4_sync_file+0x20b/0x6c0 [ 56.376544][ T4421] vfs_fsync_range+0x122/0x140 [ 56.381314][ T4421] ext4_buffered_write_iter+0x338/0x380 [ 56.386868][ T4421] ext4_file_write_iter+0x29f/0xe30 [ 56.392080][ T4421] iter_file_splice_write+0x5e6/0x970 [ 56.397450][ T4421] direct_splice_actor+0x16c/0x2c0 [ 56.402557][ T4421] splice_direct_to_actor+0x305/0x670 [ 56.407942][ T4421] do_splice_direct+0xd7/0x150 [ 56.412707][ T4421] do_sendfile+0x3ab/0x950 [ 56.417126][ T4421] __x64_sys_sendfile64+0x110/0x150 [ 56.422336][ T4421] x64_sys_call+0xed5/0x2d60 [ 56.426929][ T4421] do_syscall_64+0xc9/0x1c0 [ 56.431452][ T4421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.437350][ T4421] [ 56.439674][ T4421] read to 0xffff888113864640 of 8 bytes by task 4421 on cpu 1: [ 56.447206][ T4421] generic_buffers_fsync_noflush+0x89/0x130 [ 56.453103][ T4421] ext4_sync_file+0x20b/0x6c0 [ 56.457780][ T4421] vfs_fsync_range+0x122/0x140 [ 56.462545][ T4421] ext4_buffered_write_iter+0x338/0x380 [ 56.468190][ T4421] ext4_file_write_iter+0x29f/0xe30 [ 56.473392][ T4421] iter_file_splice_write+0x5e6/0x970 [ 56.478764][ T4421] direct_splice_actor+0x16c/0x2c0 [ 56.483882][ T4421] splice_direct_to_actor+0x305/0x670 [ 56.489254][ T4421] do_splice_direct+0xd7/0x150 [ 56.494022][ T4421] do_sendfile+0x3ab/0x950 [ 56.498439][ T4421] __x64_sys_sendfile64+0x110/0x150 [ 56.503645][ T4421] x64_sys_call+0xed5/0x2d60 [ 56.508238][ T4421] do_syscall_64+0xc9/0x1c0 [ 56.512752][ T4421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.518651][ T4421] [ 56.521057][ T4421] value changed: 0x0000000000000084 -> 0x0000000000000000 [ 56.528159][ T4421] [ 56.530474][ T4421] Reported by Kernel Concurrency Sanitizer on: [ 56.536609][ T4421] CPU: 1 UID: 0 PID: 4421 Comm: syz.1.314 Not tainted 6.11.0-rc5-syzkaller-00057-g86987d84b968 #0 [ 56.547191][ T4421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 56.557239][ T4421] ================================================================== [ 56.787610][ T3517] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.810166][ T3264] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.