last executing test programs: 1.597001738s ago: executing program 2 (id=331): r0 = socket$inet6(0xa, 0x3, 0x3) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4096, 0x1000}, 0x3}], 0x1, 0x40010102, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553780081e7465c883ac4dd9b3e59b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de00000000000000", 0x80) 1.503411201s ago: executing program 2 (id=333): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x9) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0), 0x0, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 1.402477895s ago: executing program 2 (id=335): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000fe8000000000000000000000000000aa0000000000000000000000000000000100000000000000000a000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffdfff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001010401000000074400050000000000000000000000000000000001000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 1.401799555s ago: executing program 2 (id=336): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008", @ANYRES32=r1, @ANYBLOB='\b\x00', @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 1.336479697s ago: executing program 2 (id=339): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 1.262400359s ago: executing program 1 (id=341): socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r1, &(0x7f0000001980)=[{&(0x7f0000000240)="f9", 0x1}], 0x1) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r0, &(0x7f0000001980)=[{&(0x7f0000000240)="f9", 0x1}], 0x1) 1.259440889s ago: executing program 1 (id=342): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, 0x0, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x400) 1.2576659s ago: executing program 0 (id=343): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) sendto(r1, &(0x7f00000007c0), 0x0, 0x8001, 0x0, 0x0) 971.785488ms ago: executing program 3 (id=347): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x9) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0), 0x0, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 918.08936ms ago: executing program 3 (id=348): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a0000000200", 0x6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) 917.97141ms ago: executing program 3 (id=349): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f0000000600010000000000080005", @ANYRES32=r1, @ANYBLOB='\b\x00', @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 917.59623ms ago: executing program 3 (id=350): signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$key(0xf, 0x3, 0x2) syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x5, 0x3, 0xd}}}}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x80480, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x2277e77d6087cdc2}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 426.451326ms ago: executing program 2 (id=359): prlimit64(0x0, 0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team_slave_0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10107, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x92) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x40, 0x180) syz_clone3(&(0x7f0000000480)={0x10100, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300), {0x17}, &(0x7f0000000340)=""/145, 0x91, &(0x7f0000000400)=""/50, &(0x7f0000000440)=[0xffffffffffffffff], 0x1}, 0x58) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1002, 0x2c3) write(r2, &(0x7f0000004200)='t', 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x4}, 0x38) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 426.329186ms ago: executing program 4 (id=360): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) 417.971516ms ago: executing program 4 (id=361): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f0000000600010000000000080005", @ANYRES32=r1, @ANYBLOB='\b\x00', @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 387.687667ms ago: executing program 4 (id=362): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}, 0x700) 374.997508ms ago: executing program 0 (id=363): socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r1, &(0x7f0000001980)=[{&(0x7f0000000240)="f9", 0x1}], 0x1) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) writev(r0, &(0x7f0000001980)=[{&(0x7f0000000240)="f9", 0x1}], 0x1) 333.992159ms ago: executing program 1 (id=364): r0 = io_uring_setup(0x2be0, &(0x7f0000000000)={0x0, 0x6503, 0x10, 0x3, 0xffffffff}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e21, @local}], 0x10) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x5, 0x30}, 0xc) r2 = dup(r1) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x7, 0x5404, 0x204, 0x5, 0x4, 0x1, 0x2, 0x80000001}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x5}}, 0xffe0) close_range(r0, 0xffffffffffffffff, 0x0) 333.564599ms ago: executing program 3 (id=365): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x75, 0x140341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$USBDEVFS_DISCSIGNAL(r0, 0x8010550e, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0x1, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r1}, 0x38) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$packet(0xffffffffffffffff, 0x0, 0x5f, 0x24048885, &(0x7f00000000c0)={0x11, 0x11, 0x0, 0x1, 0x70, 0x6, @broadcast}, 0x14) 325.226879ms ago: executing program 0 (id=366): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280), 0x0) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 324.956039ms ago: executing program 1 (id=367): close(0x3) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f0000001480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/4096, 0x1000}, 0x3}], 0x1, 0x40010102, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000000c0)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553780081e7465c883ac4dd9b3e59b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de00000000000000", 0x80) 266.509971ms ago: executing program 4 (id=368): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000fe8000000000000000000000000000aa0000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00001000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffdfff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001010401000000074400050000000000000000000000000000000001000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r2, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 265.757321ms ago: executing program 3 (id=369): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 252.376421ms ago: executing program 4 (id=370): r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmctl$IPC_RMID(r0, 0x0) 242.102682ms ago: executing program 0 (id=371): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x9) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0x1, 0xc1, 0x0, 0x0) 145.049845ms ago: executing program 1 (id=372): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f0000000600010000000000080005", @ANYRES32=r1, @ANYBLOB='\b\x00', @ANYRES32=r0], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 66.472887ms ago: executing program 1 (id=373): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f00000022c0)=""/4089, 0xff9, 0x10002, 0x0, 0x0) sendto(r1, &(0x7f00000007c0), 0x0, 0x8001, 0x0, 0x0) 56.864418ms ago: executing program 4 (id=374): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0xad}}, 0x7, 0x1, 0x457, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x100000000, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000840)={'#! ', './file0', [], 0xa, "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"}, 0x400) 6.548389ms ago: executing program 0 (id=375): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a000000020000", 0x7) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000ac0)={0x0, 0x0, 0x1, "c8"}, 0x9) 0s ago: executing program 0 (id=376): signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$key(0xf, 0x3, 0x2) syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000880)={{0x12, 0x1, 0x200, 0x7, 0x1, 0x3, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0x5, 0x3, 0xd}}}}}]}}]}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000240), 0x80480, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x111, 0x5}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x2277e77d6087cdc2}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) kernel console output (not intermixed with test programs): [ 24.340295][ T28] audit: type=1400 audit(1782031816.664:103): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.362466][ T28] audit: type=1400 audit(1782031816.664:104): avc: denied { search } for pid=3178 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=482 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.832239][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 24.832257][ T28] audit: type=1400 audit(1782031817.154:114): avc: denied { write } for pid=3192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.867095][ T28] audit: type=1400 audit(1782031817.194:115): avc: denied { write } for pid=3203 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.943154][ T28] audit: type=1400 audit(1782031817.274:116): avc: denied { write } for pid=3206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 24.973360][ T28] audit: type=1400 audit(1782031817.304:117): avc: denied { write } for pid=3218 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.048390][ T28] audit: type=1400 audit(1782031817.374:118): avc: denied { write } for pid=3221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.079112][ T28] audit: type=1400 audit(1782031817.404:119): avc: denied { write } for pid=3232 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.154412][ T28] audit: type=1400 audit(1782031817.484:120): avc: denied { write } for pid=3235 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.185004][ T28] audit: type=1400 audit(1782031817.514:121): avc: denied { write } for pid=3246 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.260521][ T28] audit: type=1400 audit(1782031817.584:122): avc: denied { write } for pid=3249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 25.291074][ T28] audit: type=1400 audit(1782031817.614:123): avc: denied { write } for pid=3260 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.244' (ED25519) to the list of known hosts. [ 30.841270][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 30.841288][ T28] audit: type=1400 audit(1782031823.164:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.870562][ T28] audit: type=1400 audit(1782031823.194:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.873132][ T3285] cgroup: Unknown subsys name 'net' [ 30.898490][ T28] audit: type=1400 audit(1782031823.224:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.993927][ T3285] cgroup: Unknown subsys name 'cpuset' [ 31.000202][ T3285] cgroup: Unknown subsys name 'rlimit' [ 31.131291][ T28] audit: type=1400 audit(1782031823.454:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.154688][ T28] audit: type=1400 audit(1782031823.454:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.187999][ T28] audit: type=1400 audit(1782031823.454:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.208633][ T28] audit: type=1400 audit(1782031823.454:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 31.229148][ T28] audit: type=1400 audit(1782031823.484:133): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.244993][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 31.254199][ T28] audit: type=1400 audit(1782031823.484:134): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 31.286124][ T28] audit: type=1400 audit(1782031823.504:135): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 31.336714][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 32.666491][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.673709][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.680976][ T3297] bridge_slave_0: entered allmulticast mode [ 32.687494][ T3297] bridge_slave_0: entered promiscuous mode [ 32.711609][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.718767][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.726043][ T3297] bridge_slave_1: entered allmulticast mode [ 32.732525][ T3297] bridge_slave_1: entered promiscuous mode [ 32.777833][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.785138][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.792454][ T3298] bridge_slave_0: entered allmulticast mode [ 32.799421][ T3298] bridge_slave_0: entered promiscuous mode [ 32.815777][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.828278][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.837870][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.845220][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.852465][ T3298] bridge_slave_1: entered allmulticast mode [ 32.859170][ T3298] bridge_slave_1: entered promiscuous mode [ 32.902426][ T3297] team0: Port device team_slave_0 added [ 32.913655][ T3297] team0: Port device team_slave_1 added [ 32.944134][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.970726][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.989912][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.996927][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.022904][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.040972][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.048184][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.055420][ T3303] bridge_slave_0: entered allmulticast mode [ 33.062020][ T3303] bridge_slave_0: entered promiscuous mode [ 33.072062][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.079146][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.105103][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.128537][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.135670][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.142913][ T3303] bridge_slave_1: entered allmulticast mode [ 33.149745][ T3303] bridge_slave_1: entered promiscuous mode [ 33.169411][ T3298] team0: Port device team_slave_0 added [ 33.190505][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.197642][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.204876][ T3302] bridge_slave_0: entered allmulticast mode [ 33.211390][ T3302] bridge_slave_0: entered promiscuous mode [ 33.218547][ T3298] team0: Port device team_slave_1 added [ 33.224331][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.231449][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.238693][ T3301] bridge_slave_0: entered allmulticast mode [ 33.245255][ T3301] bridge_slave_0: entered promiscuous mode [ 33.252361][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.259577][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.266764][ T3301] bridge_slave_1: entered allmulticast mode [ 33.273195][ T3301] bridge_slave_1: entered promiscuous mode [ 33.280945][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.290372][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.297603][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.304854][ T3302] bridge_slave_1: entered allmulticast mode [ 33.311390][ T3302] bridge_slave_1: entered promiscuous mode [ 33.333108][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.369967][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.377013][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.403076][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.416278][ T3297] hsr_slave_0: entered promiscuous mode [ 33.422457][ T3297] hsr_slave_1: entered promiscuous mode [ 33.429739][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.445302][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.454738][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.461972][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.487968][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.503215][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.513258][ T3303] team0: Port device team_slave_0 added [ 33.520241][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.540101][ T3302] team0: Port device team_slave_0 added [ 33.551279][ T3303] team0: Port device team_slave_1 added [ 33.568059][ T3302] team0: Port device team_slave_1 added [ 33.610397][ T3301] team0: Port device team_slave_0 added [ 33.623030][ T3298] hsr_slave_0: entered promiscuous mode [ 33.629156][ T3298] hsr_slave_1: entered promiscuous mode [ 33.635116][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 33.640870][ T3298] Cannot create hsr debugfs directory [ 33.654882][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.662118][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.688121][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.699613][ T3301] team0: Port device team_slave_1 added [ 33.705543][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.712610][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.738751][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.756782][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.763842][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.790007][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.806557][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.813590][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.839788][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.870584][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.877615][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.903560][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.935422][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.942417][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.968490][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.004741][ T3302] hsr_slave_0: entered promiscuous mode [ 34.010812][ T3302] hsr_slave_1: entered promiscuous mode [ 34.016791][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 34.022524][ T3302] Cannot create hsr debugfs directory [ 34.064969][ T3303] hsr_slave_0: entered promiscuous mode [ 34.071110][ T3303] hsr_slave_1: entered promiscuous mode [ 34.077102][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 34.082890][ T3303] Cannot create hsr debugfs directory [ 34.106682][ T3301] hsr_slave_0: entered promiscuous mode [ 34.112963][ T3301] hsr_slave_1: entered promiscuous mode [ 34.119015][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 34.124878][ T3301] Cannot create hsr debugfs directory [ 34.191645][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.200482][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.222640][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.231374][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.239274][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.248059][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.268357][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.276993][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.344506][ T3298] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.353972][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.361864][ T3298] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.370962][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.378703][ T3298] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.387452][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.395353][ T3298] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.404132][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.438543][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.447520][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.455536][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.464390][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.472505][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.481890][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.489704][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.498670][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.540839][ T3302] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.549875][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.557767][ T3302] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.566626][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.574510][ T3302] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.583135][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.590879][ T3302] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.599764][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.656077][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.675093][ T3303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.683814][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.699383][ T3303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.708037][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.716033][ T3303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.724725][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.736340][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.744167][ T3303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.753231][ T3303] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.768710][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.778274][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.796198][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.804089][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.817683][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.824830][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.834773][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.843759][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.851191][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.866146][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.873281][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.881934][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.889079][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.901242][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.908503][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.933350][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.940511][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.953490][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.989796][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.996921][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.009603][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.016727][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.091260][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.116232][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.135217][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.142378][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.166471][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.173632][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.296963][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.387698][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.411640][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.433098][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.547351][ T3297] veth0_vlan: entered promiscuous mode [ 35.566468][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.575124][ T3297] veth1_vlan: entered promiscuous mode [ 35.617115][ T3297] veth0_macvtap: entered promiscuous mode [ 35.633014][ T3298] veth0_vlan: entered promiscuous mode [ 35.644054][ T3297] veth1_macvtap: entered promiscuous mode [ 35.662331][ T3301] veth0_vlan: entered promiscuous mode [ 35.671372][ T3298] veth1_vlan: entered promiscuous mode [ 35.685044][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.699513][ T3301] veth1_vlan: entered promiscuous mode [ 35.708064][ T3302] veth0_vlan: entered promiscuous mode [ 35.718319][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.737472][ T3302] veth1_vlan: entered promiscuous mode [ 35.744365][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.753573][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.772175][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.781007][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.791886][ T3298] veth0_macvtap: entered promiscuous mode [ 35.805530][ T3301] veth0_macvtap: entered promiscuous mode [ 35.812413][ T3298] veth1_macvtap: entered promiscuous mode [ 35.836531][ T3301] veth1_macvtap: entered promiscuous mode [ 35.843271][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 35.843330][ T28] audit: type=1400 audit(1782031828.164:150): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.kjhz2Z/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 35.846427][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.855923][ T28] audit: type=1400 audit(1782031828.174:151): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/root/syzkaller.kjhz2Z/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 35.882527][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.902965][ T28] audit: type=1400 audit(1782031828.174:152): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 35.941148][ T28] audit: type=1400 audit(1782031828.264:153): avc: denied { mounton } for pid=3297 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 35.965984][ T28] audit: type=1400 audit(1782031828.264:154): avc: denied { mount } for pid=3297 comm="syz-executor" name="/" dev="gadgetfs" ino=4637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 35.994982][ T3302] veth0_macvtap: entered promiscuous mode [ 35.995805][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 36.018828][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.029530][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.039921][ T3302] veth1_macvtap: entered promiscuous mode [ 36.055905][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.064993][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.072248][ T28] audit: type=1400 audit(1782031828.394:155): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.101965][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.110143][ T28] audit: type=1400 audit(1782031828.394:156): avc: denied { open } for pid=3297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.135162][ T28] audit: type=1400 audit(1782031828.404:157): avc: denied { ioctl } for pid=3297 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 36.157065][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.168081][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.187063][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.212166][ T28] audit: type=1400 audit(1782031828.534:158): avc: denied { map_create } for pid=3504 comm="syz.1.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.234867][ T28] audit: type=1400 audit(1782031828.534:159): avc: denied { bpf } for pid=3504 comm="syz.1.6" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 36.259274][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.269029][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.285176][ T3303] veth0_vlan: entered promiscuous mode [ 36.307484][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.316884][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.344614][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.353529][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.369376][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.382414][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.403408][ T3511] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 36.403408][ T3511] The task syz.1.7 (3511) triggered the difference, watch for misbehavior. [ 36.426709][ T3303] veth1_vlan: entered promiscuous mode [ 36.476783][ T3303] veth0_macvtap: entered promiscuous mode [ 36.486251][ T3303] veth1_macvtap: entered promiscuous mode [ 36.504482][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.534574][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.578088][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.590104][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.621191][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.630914][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.734647][ T3533] loop4: detected capacity change from 0 to 512 [ 36.777592][ T3533] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.5: bad orphan inode 15 [ 36.789283][ T3533] loop4: lost filesystem error report for type 5 error -117 [ 36.789493][ T3533] ext4_test_bit(bit=14, block=13) = 0 [ 36.796869][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 36.796890][ C0] EXT4-fs (loop4): initial error at time 1782031829: ext4_orphan_get:1425 [ 36.796916][ C0] EXT4-fs (loop4): last error at time 1782031829: ext4_orphan_get:1425 [ 36.828991][ T3533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.846978][ T3538] loop3: detected capacity change from 0 to 512 [ 36.857354][ T3538] EXT4-fs: Ignoring removed nomblk_io_submit option [ 36.869178][ T3538] EXT4-fs error (device loop3): ext4_iget_extra_inode:5180: inode #15: comm syz.3.13: corrupted in-inode xattr: invalid ea_ino [ 36.930403][ T3538] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 36.931614][ T3538] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.13: couldn't read orphan inode 15 (err -117) [ 36.940895][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 36.940941][ C1] EXT4-fs (loop3): initial error at time 1782031829: ext4_iget_extra_inode:5180: inode 15 [ 36.940987][ C1] EXT4-fs (loop3): last error at time 1782031829: ext4_iget_extra_inode:5180: inode 15 [ 36.979971][ T3538] loop3: lost filesystem error report for type 5 error -117 [ 36.984671][ T3303] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.985072][ T3538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.020524][ T3543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.034984][ T68] Bluetooth: hci0: Frame reassembly failed (-84) [ 37.041912][ T3541] Bluetooth: hci0: Frame reassembly failed (-90) [ 37.043497][ T3543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.069510][ T3543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.079679][ T3543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.097306][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.145359][ T3551] loop3: detected capacity change from 0 to 512 [ 37.164427][ T3551] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 37.215526][ T3555] syz.1.19 (3555) used greatest stack depth: 11288 bytes left [ 37.282486][ T3559] loop1: detected capacity change from 0 to 256 [ 37.337630][ T3551] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 37.352683][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 37.359186][ C0] EXT4-fs (loop3): initial error at time 1782031829: ext4_mb_generate_buddy:1317 [ 37.365259][ T3551] EXT4-fs error (device loop3): ext4_acquire_dquot:7041: comm syz.3.17: Failed to acquire dquot type 1 [ 37.368410][ C0] EXT4-fs (loop3): last error at time 1782031829: ext4_mb_generate_buddy:1317 [ 37.388696][ T3551] loop3: lost filesystem error report for type 5 error -28 [ 37.391371][ T3551] EXT4-fs (loop3): 1 truncate cleaned up [ 37.405181][ T3564] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22'. [ 37.433708][ T3551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.456051][ T3551] ======================================================= [ 37.456051][ T3551] WARNING: The mand mount option has been deprecated and [ 37.456051][ T3551] and is ignored by this kernel. Remove the mand [ 37.456051][ T3551] option from the mount to silence this warning. [ 37.456051][ T3551] ======================================================= [ 37.517100][ T3551] EXT4-fs error (device loop3): __ext4_remount:6844: comm syz.3.17: Abort forced by user [ 37.537656][ T3551] EXT4-fs (loop3): Remounting filesystem read-only [ 37.545284][ T3551] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 37.577155][ T3551] syz.3.17 (3551) used greatest stack depth: 9808 bytes left [ 37.600716][ T3298] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.744917][ T3584] Zero length message leads to an empty skb [ 37.760004][ T3586] capability: warning: `syz.0.32' uses deprecated v2 capabilities in a way that may be insecure [ 37.819705][ T3589] Illegal XDP return value 4294967274 on prog (id 3) dev syz_tun, expect packet loss! [ 37.968294][ T3598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.980162][ T3598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.051210][ T3598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.074529][ T3598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.177203][ T3602] loop4: detected capacity change from 0 to 4096 [ 38.198795][ T3602] EXT4-fs: Ignoring removed i_version option [ 38.227109][ T3602] EXT4-fs (loop4): Couldn't mount because of unsupported optional features (40000) [ 38.371917][ T3612] netlink: 28 bytes leftover after parsing attributes in process `syz.1.44'. [ 38.495674][ T3624] loop1: detected capacity change from 0 to 128 [ 38.531883][ T3624] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.551615][ T3624] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.072869][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 39.235136][ T3655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.243890][ T3655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.252562][ T3655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.261395][ T3655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.376900][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.404097][ T3659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'. [ 39.417652][ T3659] macvtap1: entered promiscuous mode [ 39.430228][ T3659] macvtap1: entered allmulticast mode [ 39.436077][ T3659] veth1_vlan: entered allmulticast mode [ 39.579233][ T3673] loop4: detected capacity change from 0 to 128 [ 39.590162][ T3673] EXT4-fs: test_dummy_encryption option not supported [ 39.743079][ T3682] netlink: 68 bytes leftover after parsing attributes in process `syz.0.75'. [ 39.753171][ T3682] tipc: Started in network mode [ 39.758386][ T3682] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 39.767815][ T3682] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 39.776153][ T3682] tipc: Enabled bearer , priority 10 [ 40.604541][ T3715] netlink: 12 bytes leftover after parsing attributes in process `syz.4.84'. [ 40.670144][ T3715] macvtap1: entered promiscuous mode [ 40.699067][ T3715] macvtap1: entered allmulticast mode [ 40.719863][ T3715] veth1_vlan: entered allmulticast mode [ 40.923988][ T28] kauditd_printk_skb: 75 callbacks suppressed [ 40.924002][ T28] audit: type=1400 audit(1782031833.254:231): avc: denied { shutdown } for pid=3720 comm="syz.2.87" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 40.928716][ T3391] tipc: Node number set to 1 [ 40.965246][ T3723] loop4: detected capacity change from 0 to 128 [ 40.979857][ T28] audit: type=1400 audit(1782031833.304:232): avc: denied { mounton } for pid=3722 comm="syz.4.88" path="/19/file1/file0" dev="loop4" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 41.051617][ T28] audit: type=1400 audit(1782031833.374:233): avc: denied { ioctl } for pid=3728 comm="syz.3.92" path="socket:[6149]" dev="sockfs" ino=6149 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 41.105067][ T28] audit: type=1400 audit(1782031833.384:234): avc: denied { mount } for pid=3729 comm="syz.4.91" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.108382][ T3735] loop2: detected capacity change from 0 to 512 [ 41.140079][ T3735] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 41.192110][ T3735] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 41.212679][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 41.219284][ C1] EXT4-fs (loop2): initial error at time 1782031833: ext4_mb_generate_buddy:1317 [ 41.228478][ C1] EXT4-fs (loop2): last error at time 1782031833: ext4_mb_generate_buddy:1317 [ 41.236754][ T3735] Quota error (device loop2): write_blk: dquota write failed [ 41.245542][ T3735] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 41.256368][ T3735] Quota error (device loop2): write_blk: dquota write failed [ 41.264431][ T3735] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 41.274444][ T3735] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.94: Failed to acquire dquot type 1 [ 41.285837][ T3735] loop2: lost filesystem error report for type 5 error -28 [ 41.287366][ T3735] EXT4-fs (loop2): 1 truncate cleaned up [ 41.301709][ T3735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.323623][ T3735] EXT4-fs (loop2): shut down requested (2) [ 41.329111][ T28] audit: type=1400 audit(1782031833.654:235): avc: denied { read } for pid=2963 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 41.330426][ T3735] EXT4-fs: Cannot specify journal on remount [ 41.387281][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.401542][ T28] audit: type=1400 audit(1782031833.654:236): avc: denied { search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.461664][ T3759] loop4: detected capacity change from 0 to 128 [ 41.477792][ T3761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.100'. [ 41.538387][ T3761] macvtap1: entered promiscuous mode [ 41.554305][ T3761] macvtap1: entered allmulticast mode [ 41.564806][ T3761] veth1_vlan: entered allmulticast mode [ 42.278503][ T3790] loop0: detected capacity change from 0 to 512 [ 42.289281][ T3790] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 42.314864][ T3790] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 48 vs 41 free clusters [ 42.329562][ T3790] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.114: Failed to acquire dquot type 1 [ 42.332747][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 42.341191][ T3790] loop0: lost filesystem error report for type 5 error -28 [ 42.347373][ C1] EXT4-fs (loop0): initial error at time 1782031834: ext4_mb_generate_buddy:1317 [ 42.356416][ T3790] EXT4-fs (loop0): 1 truncate cleaned up [ 42.363869][ C1] EXT4-fs (loop0): last error at time 1782031834: ext4_acquire_dquot:7041 [ 42.371140][ T3790] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.393382][ T3790] EXT4-fs (loop0): shut down requested (2) [ 42.399700][ T3790] EXT4-fs: Cannot specify journal on remount [ 42.416551][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.505097][ T3797] netlink: 68 bytes leftover after parsing attributes in process `syz.0.116'. [ 43.120040][ T3827] loop3: detected capacity change from 0 to 128 [ 44.182891][ T3853] netlink: 68 bytes leftover after parsing attributes in process `syz.4.139'. [ 45.030743][ T3877] loop2: detected capacity change from 0 to 512 [ 45.037878][ T3877] EXT4-fs: Ignoring removed bh option [ 45.654278][ T3877] EXT4-fs error (device loop2): ext4_iget_extra_inode:5180: inode #15: comm syz.2.149: corrupted in-inode xattr: e_value size too large [ 45.759011][ T3877] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 45.762677][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 45.778427][ C1] EXT4-fs (loop2): initial error at time 1782031838: ext4_iget_extra_inode:5180: inode 15 [ 45.788416][ C1] EXT4-fs (loop2): last error at time 1782031838: ext4_iget_extra_inode:5180: inode 15 [ 45.994424][ T3889] netlink: 28 bytes leftover after parsing attributes in process `syz.1.152'. [ 46.008990][ T3877] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.149: couldn't read orphan inode 15 (err -117) [ 46.052737][ T3877] loop2: lost filesystem error report for type 5 error -117 [ 46.053780][ T3877] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.458590][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 46.458665][ T28] audit: type=1400 audit(1782031838.784:257): avc: denied { write } for pid=3876 comm="syz.2.149" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.576123][ T3901] ip6gre1: entered promiscuous mode [ 46.645061][ T3901] ip6gre1: entered allmulticast mode [ 46.668060][ T3904] loop1: detected capacity change from 0 to 1024 [ 46.688057][ T28] audit: type=1400 audit(1782031838.824:258): avc: denied { create } for pid=3876 comm="syz.2.149" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 46.813852][ T3904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.028879][ T28] audit: type=1400 audit(1782031838.824:259): avc: denied { write } for pid=3876 comm="syz.2.149" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.050832][ T28] audit: type=1400 audit(1782031839.194:260): avc: denied { write } for pid=3903 comm="syz.1.157" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.381176][ T28] audit: type=1400 audit(1782031839.704:261): avc: denied { write } for pid=3903 comm="syz.1.157" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.545806][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.123966][ T28] audit: type=1400 audit(1782031840.084:262): avc: denied { write } for pid=3876 comm="syz.2.149" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.145573][ T28] audit: type=1400 audit(1782031840.084:263): avc: denied { write } for pid=3876 comm="syz.2.149" path="/22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.224727][ T28] audit: type=1400 audit(1782031840.084:264): avc: denied { write } for pid=3876 comm="syz.2.149" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.279616][ T28] audit: type=1400 audit(1782031840.084:265): avc: denied { bind } for pid=3876 comm="syz.2.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 48.299590][ T28] audit: type=1400 audit(1782031840.314:266): avc: denied { setopt } for pid=3876 comm="syz.2.149" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 48.350949][ T3936] netlink: 28 bytes leftover after parsing attributes in process `syz.3.167'. [ 48.374996][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.466379][ T3948] netlink: 'syz.0.171': attribute type 10 has an invalid length. [ 48.474499][ T3948] syz_tun: entered promiscuous mode [ 48.485789][ T3948] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 49.132396][ T3970] netlink: 28 bytes leftover after parsing attributes in process `syz.4.180'. [ 50.164637][ T4003] netlink: 28 bytes leftover after parsing attributes in process `syz.0.192'. [ 50.184859][ T4003] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 51.067343][ T4024] netlink: 96 bytes leftover after parsing attributes in process `syz.2.201'. [ 51.146133][ T4032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.155686][ T4032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.196867][ T4032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.210875][ T4032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.286340][ T4045] netlink: 68 bytes leftover after parsing attributes in process `syz.3.211'. [ 51.298151][ T4045] tipc: Started in network mode [ 51.304189][ T4045] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 51.313515][ T4045] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 51.322055][ T4045] tipc: Enabled bearer , priority 10 [ 51.400235][ T4057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.216'. [ 51.423337][ T4057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.216'. [ 52.099202][ T4077] netlink: 68 bytes leftover after parsing attributes in process `syz.0.225'. [ 52.115148][ T4077] tipc: Enabling of bearer rejected, already enabled [ 52.220905][ T4091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.229567][ T4091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.238358][ T4091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.247128][ T4091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.274598][ T4093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.233'. [ 52.338216][ T3412] tipc: Node number set to 1 [ 52.436005][ T4106] tipc: Started in network mode [ 52.448478][ T4106] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 52.468730][ T4106] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 52.477737][ T4106] tipc: Enabled bearer , priority 10 [ 53.158830][ T4142] tipc: Enabling of bearer rejected, already enabled [ 53.234023][ T4149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.242830][ T4149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.251729][ T4149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.260387][ T4149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.566376][ T4169] __nla_validate_parse: 5 callbacks suppressed [ 53.566394][ T4169] netlink: 60 bytes leftover after parsing attributes in process `syz.2.267'. [ 53.584104][ T4169] tipc: Started in network mode [ 53.590224][ T4169] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 53.600418][ T4169] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 53.609296][ T4169] tipc: Enabled bearer , priority 10 [ 53.620412][ T3391] tipc: Node number set to 1 [ 53.765966][ T4178] netlink: 28 bytes leftover after parsing attributes in process `syz.4.272'. [ 54.158494][ T4201] netlink: 60 bytes leftover after parsing attributes in process `syz.2.281'. [ 54.191424][ T4201] tipc: Enabling of bearer rejected, already enabled [ 54.221002][ T4204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.253688][ T4204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.280914][ T4204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.380757][ T4204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.466731][ T4210] netlink: 28 bytes leftover after parsing attributes in process `syz.2.286'. [ 54.629002][ T4230] netlink: 60 bytes leftover after parsing attributes in process `syz.1.295'. [ 54.640122][ T4230] tipc: Started in network mode [ 54.645537][ T4230] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 54.655285][ T4230] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 54.664094][ T4230] tipc: Enabled bearer , priority 10 [ 54.763151][ T3377] tipc: Node number set to 1 [ 54.997881][ T4242] loop1: detected capacity change from 0 to 128 [ 55.505513][ T4255] loop0: detected capacity change from 0 to 128 [ 55.610021][ T4259] macvtap1: entered promiscuous mode [ 55.617741][ T4259] macvtap1: entered allmulticast mode [ 55.623592][ T4259] veth1_vlan: entered allmulticast mode [ 55.663036][ T282] tipc: Node number set to 1 [ 55.694687][ T4266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.703796][ T4266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.712805][ T4266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.721594][ T4266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.761260][ T4269] netlink: 68 bytes leftover after parsing attributes in process `syz.1.312'. [ 55.771469][ T4269] tipc: Enabling of bearer rejected, already enabled [ 56.412299][ T4292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.321'. [ 56.452854][ T4296] netlink: 68 bytes leftover after parsing attributes in process `syz.0.324'. [ 56.465897][ T4296] tipc: Enabling of bearer rejected, already enabled [ 56.584524][ T4308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.596326][ T4308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.606288][ T4308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.623065][ T4308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.784181][ T4310] loop3: detected capacity change from 0 to 128 [ 57.116283][ T4323] netlink: 68 bytes leftover after parsing attributes in process `syz.2.335'. [ 57.128069][ T4323] tipc: Enabling of bearer rejected, already enabled [ 57.159177][ T4327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.336'. [ 57.645737][ T4360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.654458][ T4360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.664021][ T4360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.683858][ T4360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.368773][ T4380] loop2: detected capacity change from 0 to 128 [ 58.568089][ T4419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.578268][ T4419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.587975][ T4419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.597821][ T4419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.893770][ T4406] ================================================================== [ 58.901937][ T4406] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 58.909892][ T4406] [ 58.912260][ T4406] write to 0xffff888105e0bf2c of 4 bytes by task 4380 on cpu 1: [ 58.919926][ T4406] xas_set_mark+0x12b/0x140 [ 58.924487][ T4406] tag_pages_for_writeback+0xe3/0x2e0 [ 58.929901][ T4406] writeback_iter+0x332/0x7c0 [ 58.934618][ T4406] __mpage_writepages+0x8a/0x1370 [ 58.939706][ T4406] fat_writepages+0x26/0x30 [ 58.944274][ T4406] do_writepages+0x1b9/0x300 [ 58.948918][ T4406] file_write_and_wait_range+0x178/0x2f0 [ 58.954804][ T4406] mmb_fsync_noflush+0x48/0x140 [ 58.959727][ T4406] fat_file_fsync+0x98/0x110 [ 58.964373][ T4406] vfs_fsync_range+0xc5/0xe0 [ 58.969016][ T4406] generic_file_write_iter+0x1a3/0x1f0 [ 58.974535][ T4406] iter_file_splice_write+0x6a0/0xa60 [ 58.979958][ T4406] direct_splice_actor+0x156/0x280 [ 58.985118][ T4406] splice_direct_to_actor+0x2f9/0x680 [ 58.990627][ T4406] do_splice_direct+0x119/0x1a0 [ 58.995519][ T4406] do_sendfile+0x37d/0x640 [ 58.999978][ T4406] __x64_sys_sendfile64+0x105/0x150 [ 59.005212][ T4406] x64_sys_call+0x2dc4/0x3020 [ 59.009943][ T4406] do_syscall_64+0x136/0x3c0 [ 59.014572][ T4406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.020558][ T4406] [ 59.022916][ T4406] read to 0xffff888105e0bf2c of 4 bytes by task 4406 on cpu 0: [ 59.030494][ T4406] __writeback_single_inode+0x1fb/0x660 [ 59.036094][ T4406] writeback_single_inode+0x16d/0x400 [ 59.041653][ T4406] sync_inode_metadata+0x6e/0xa0 [ 59.046649][ T4406] mmb_fsync_noflush+0xfa/0x140 [ 59.051556][ T4406] fat_file_fsync+0x98/0x110 [ 59.056188][ T4406] vfs_fsync_range+0xc5/0xe0 [ 59.060822][ T4406] generic_file_write_iter+0x1a3/0x1f0 [ 59.066480][ T4406] iter_file_splice_write+0x6a0/0xa60 [ 59.071926][ T4406] direct_splice_actor+0x156/0x280 [ 59.077078][ T4406] splice_direct_to_actor+0x2f9/0x680 [ 59.082518][ T4406] do_splice_direct+0x119/0x1a0 [ 59.087412][ T4406] do_sendfile+0x37d/0x640 [ 59.091931][ T4406] __x64_sys_sendfile64+0x105/0x150 [ 59.097184][ T4406] x64_sys_call+0x2dc4/0x3020 [ 59.101934][ T4406] do_syscall_64+0x136/0x3c0 [ 59.106579][ T4406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.112522][ T4406] [ 59.114866][ T4406] value changed: 0x02000021 -> 0x04000021 [ 59.120600][ T4406] [ 59.122946][ T4406] Reported by Kernel Concurrency Sanitizer on: [ 59.129134][ T4406] CPU: 0 UID: 0 PID: 4406 Comm: syz.2.359 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.138366][ T4406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 59.148450][ T4406] ==================================================================