last executing test programs: 3.528371732s ago: executing program 0 (id=314): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00), 0x1, 0x78e, &(0x7f0000000ac0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000e00)='./file0\x00', 0x9001) renameat2(r0, &(0x7f0000000480)='./file0\x00', r0, &(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4) 2.937000995s ago: executing program 0 (id=319): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x2804000, &(0x7f0000000b80)={[{@init_itable}, {@usrjquota}, {@nobh}, {@resuid}]}, 0x26, 0x756, &(0x7f00000002c0)="$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") chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x86400, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a40)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) read(r0, &(0x7f0000001380)=""/186, 0xba) 2.863915797s ago: executing program 1 (id=321): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) close(r1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', @link_local}) 2.72405864s ago: executing program 0 (id=324): syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r2 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000340)={0x0, 0x3}, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.615076252s ago: executing program 1 (id=325): socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000340)) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) socket$inet6(0xa, 0x3, 0x3c) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0/..\x00', &(0x7f0000000300)={0x410002, 0x0, 0x10}, 0x2f) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000000000d00000000000000000000000a01000000000000000000000a02000000000000000000000b000000000000000000000005"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, r0, 0x4, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x50) 2.601212903s ago: executing program 4 (id=326): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000700600000000000009000000731134000000000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.544061964s ago: executing program 1 (id=327): syz_open_dev$evdev(&(0x7f0000001640), 0x2, 0x2301) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket(0x10, 0x803, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000002000)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x27d, &(0x7f0000000000)="$eJzs3cFqE0EYB/CvaZKNvdizeFjw4qmoJ69BKogBIZKDgmCgemlF2F6ipzyGT+DBR/IxeipeVppdmza2xYRs1ia/H4T9yD+7mWFgZw8zyfv7nw4PPh9/zH9+i04njWbEOM8jdqMR21HYKo+NSd2Oi8Yxv9YC5wAAy9PvD7t1t4HFff+Hz2RZd3j2zJX8lQx+VNIoAAAAAAAAAAAAKnfV+v84rXb9PwBQL+v/11+WdYc75fPbZdb/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPU5zfO7+Q2vutsHACyf+R8ANo/5HwA2j/kfADbP6zdvX3Z7vf1+mnYiTsajwWhQHIv8+Yve/qN0Ynd61sloNNg+zx8XeXo5b8VOmT+5Mm/HwwdFfpY9e9WbyZM4qL77AAAAAAAAAAAAAAAAAAAA8F/YS9PJzv+4Zn//XhLl7v3ZvKgu/D7AzP79ZtxrrqwbAAAAAAAAAAAAAAAAAAAAcKsdf/l6ODw6+pDNUdxZ6Kxril95YWkXXLBIYsVfuhXn77TKwVjSleNptY1/165vmG4oYtUjuN7FnztEo76bEwAAAAAAAAAAAAAAAAAAbJjppt+6WwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Zn+/38FRVIUETHOC3V3FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhjvwMAAP//cUGYlA==") r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.543982754s ago: executing program 4 (id=328): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 2.542820694s ago: executing program 4 (id=330): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x1, r1, 0x2c}, 0x10) 2.488598065s ago: executing program 4 (id=332): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, 0x0, 0x0) 2.371978107s ago: executing program 4 (id=333): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000b00), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x13, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @generic={0x6, 0x3, 0x8, 0xfff, 0x8}, @exit]}, &(0x7f0000000240)='GPL\x00', 0x80000001, 0x0, 0x0, 0x41100, 0x53, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x20000891) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) recvmsg$unix(0xffffffffffffffff, 0x0, 0x2002) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffff7fb}, 0x38) 2.371877927s ago: executing program 3 (id=334): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x2, @local, 0x2}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000d40)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaa3a86aabb86dd600fe10400033a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0x0) 2.371725338s ago: executing program 4 (id=335): syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040", @ANYRESHEX], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, 0x0, 0x24000800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) memfd_create(&(0x7f0000000080)='%\x00', 0x3) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) 2.303098009s ago: executing program 3 (id=336): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000200)={0x0, 0x800, 0x7, 0x5, 0xffffffff, 0x6}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) 2.153277092s ago: executing program 3 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000002100df4d000000000000000002000000000000000800000008000f00000800000c000c"], 0x38}}, 0x40) 2.060075544s ago: executing program 3 (id=338): socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20044880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3010010, &(0x7f0000000100)={[{@errors_remount}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") rmdir(&(0x7f0000000040)='./file0\x00') 1.935164607s ago: executing program 2 (id=340): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 1.80318122s ago: executing program 2 (id=341): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.750270481s ago: executing program 0 (id=342): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000600)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030303030372c646f74732c646f74732c636865636b3d72656c617865642c646f74732c636865636b3d7374726963742c6e66733d7374616c655f72772c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c646f74732c6e6f646f74732c6e6f646f74732c6e6f646f74732c646f74732c666c7573682c646f74732c646f74732c646f74732c73686f77657865632c646f74732c6e6f646f74732c636865636b3d72656c617865642c000c6182ac817759efd8ab7f70200c56bb782653"], 0x1, 0x202, &(0x7f0000000380)="$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") syz_read_part_table(0x5d9, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) 1.632009154s ago: executing program 2 (id=343): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f809ffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r3, r1, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0}}, 0x30) syz_emit_ethernet(0x5e, &(0x7f0000000240)=ANY=[], 0x0) 1.487694127s ago: executing program 2 (id=344): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 1.36962946s ago: executing program 2 (id=345): openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0xf, 0xbf1f}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000001000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x6000b20c, 0xcc0, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 807.961682ms ago: executing program 1 (id=346): socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x1ff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x10, 0x4, 0x9000, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa, 0x2, 0x0, 0x0, 0x0, 0x5, 0x2042f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x9}, 0x806, 0x0, 0x0, 0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x5, 0xb, 0x0, 0x0, 0x40, 0x0, 0x0, 0x41100, 0x3d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x10, 0x3}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000040000000c0000000c00000000000000a9b2610d6a7efdd5c5e200ecae3ee46f40e776075f5eef7543a70e9adae97b852062d0287cd8fcf03c8b4df93c8f9f26648e30231617bc18831332f2ff6afa1eee5635f0b87f9a8b0b0dfb7ef4db50f8f7785ed371ff19912932e88e5347e8aca7e408ea355a07fd5a14", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={0xffffffffffffffff, r3}, 0xc) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12) 673.089105ms ago: executing program 0 (id=347): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x30, 0x1c, 0x114236db3b607435, 0x70bd24, 0x25dfd3fe, {0x2, 0x0, 0x0, r3, 0x40, 0xa2, 0x4}, [@NDA_DST_IPV4={0x8, 0x1, @multicast2}, @NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040011}, 0x0) 475.753149ms ago: executing program 2 (id=348): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x6, 0x247, &(0x7f0000000300)="$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") open(0x0, 0x1, 0x40) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1a00040, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x355, &(0x7f0000000500)="$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") sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000001040)={[{@debug}, {@journal_dev={'journal_dev', 0x3d, 0x802}}, {@inlinecrypt}, {@nouid32}, {@grpjquota}, {@errors_continue}, {@nodiscard}, {@nodiscard}, {@nodioread_nolock}]}, 0x81, 0xbe0, &(0x7f0000000440)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aGQXAMW8soIrX8gKTiSBVkl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDkqVd/bBWGln+fOBp3ps3M+/71Ug778HuBvDMGsh+pBFHI+JSElGo708jorta642o1I5bmJ8d+WF+diSJxcXnvk0iiYhH87MjjWsl9e2heqM3Ij77dxK/fXXtuJPTM+PD5XJpot4+OXX1xsnJ6Zm/jV0dvlK6Urp26sw/hk4PnRk8O9S2XH/86vzd7//0368rP7338+3v3ngnifPRV+9bmUc9620biIGl38lKnREx3Ibr7wUd9XxW5pl0bnBSusNBAQDQUrpiDvf7KERHLE/eCvHx57kGBwAAALTFYkfEIgAAALDPJdb/AAAAsM813gfwaH52pFHyfUfC7np4ISL6a/kv1EutpzMq1W1vdEXEwUdJrPxYa1I7bdsGIuLBl2c/zEo0+RzyTqvMRcQfmt3/pJp/f/2T0KvzTyNisA3jD6xqP035n2/D+HnnD8Cz6d6F2oNs7fMvXZr/RJPnX2eTZ9eTyPv515j/LayZ/y3n39Fi/vf/TY5x6923brbqy/L/593/fNAo2fjZdltJbcHDuYg/djbLP1nKP2mR/6UNrp1E7RKFX26WWh2Td/6Lb0ccj+b5NyTrfz/RydGxcmmw9rPpGHOfDr3favy888/u/8EW+a9z/3uzfTceu1LrL/V54eLFO636Ns4//aY7eb5a667veWl4amriVER38r+1+0+vn2/jmMY10rmIE39e//+/2d9/9ppQqf9tZJnP1bdZ+5VVY/7r9q2P1ss/W/vlef8vb/3+V/e9tskx/vLJ6yda9a1c/2YlG/9BUlsLN3F404kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsK+kEdEXSVqMiKRaT9NiMeJQRPwuDqbl65NTfx29/uK1y1lfRH90paNj5dJgRBRq7SRrn6rWl9unV7X/HhFHIuLNwoFquzhyvXw57+QBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYcigi+iJJixGRRsRCIU2LxbyjAgAAANquP+8AAAAAgB1n/Q8AAAD7n/U/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO+zIsXv3k4ionDtQLZnuel9XrpEBOy3NOwAgNx15BwDkpjPvAIDcbHGNb7oA+1CyQX9vy56etscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN51/Oi9+0lEVM4dqJZMd72vq+kZx3YxOmAnpXkHAOSmY73Ozt2LA9h9T/wvfri9cQC7r/kaH3iWJBv09y4fU3m8p2ftwesuKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mvVVS5IWIyKt1tO0WIw4HBH90ZWMjpVLgxHxm4j4otDVk7V78g4aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAtpucnhkfLpdLE09SSbZ3erNKJdp8QZWnsvLy3ghjdyvJ3gijVsn7lQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDxMTs+MD5fLpYnJvCMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8jY5PTM+XC6XJjZRubOVg1dU8s4RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID8/BoAAP//YD0Mhw==") sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000180)='cgroup2\x00', 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000002540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 183.961326ms ago: executing program 0 (id=349): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xf6fc, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="d5b440aeabaea6a78de1dc67869abc299d62164fa6e99ba566c0bea0c57a4d8f37a418db196f854db9445f9009017c2fcb0493f9fb08fa5dcba8e5456a3d95ff98e97686db6cd6e209ceea01735bb88cb523789a770e0f02bff0de07b328f2f8d81cf7568a93e5a260aa82e45038abce54ddf0c55e7bbaf13c2211e7959a49181237259e20d7fd50fd900f9739f5fe2e4176a01dc35014535b36ca20cb2071a0", @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x6, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) socket$kcm(0x10, 0x400000002, 0x0) 103.822497ms ago: executing program 3 (id=350): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='mountstats\x00') writev(r0, 0x0, 0x0) 40.482949ms ago: executing program 1 (id=351): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, 0x0, 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) 481.16µs ago: executing program 3 (id=352): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002", 0x29}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 0s ago: executing program 1 (id=353): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x166127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x66, 0x80000001}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) kernel console output (not intermixed with test programs): [ 22.613988][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 22.614008][ T28] audit: type=1400 audit(1784681301.089:120): avc: denied { write } for pid=3234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 22.644710][ T28] audit: type=1400 audit(1784681301.089:121): avc: denied { write } for pid=3245 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.006275][ T28] audit: type=1400 audit(1784681301.479:122): avc: denied { write } for pid=3248 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.030131][ T28] audit: type=1400 audit(1784681301.489:123): avc: denied { write } for pid=3259 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.446246][ T28] audit: type=1400 audit(1784681301.919:124): avc: denied { write } for pid=3262 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 23.469851][ T28] audit: type=1400 audit(1784681301.929:125): avc: denied { write } for pid=3273 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. [ 28.385772][ T28] audit: type=1400 audit(1784681306.859:126): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.409772][ T28] audit: type=1400 audit(1784681306.879:127): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.410590][ T3284] cgroup: Unknown subsys name 'net' [ 28.437790][ T28] audit: type=1400 audit(1784681306.909:128): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.553559][ T3284] cgroup: Unknown subsys name 'cpuset' [ 28.560617][ T3284] cgroup: Unknown subsys name 'rlimit' [ 28.670537][ T28] audit: type=1400 audit(1784681307.139:129): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.695904][ T28] audit: type=1400 audit(1784681307.139:130): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.713135][ T3287] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.717557][ T28] audit: type=1400 audit(1784681307.139:131): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.748844][ T28] audit: type=1400 audit(1784681307.139:132): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 28.772570][ T28] audit: type=1400 audit(1784681307.149:133): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.798888][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.801947][ T28] audit: type=1400 audit(1784681307.149:134): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 28.836618][ T28] audit: type=1400 audit(1784681307.159:135): avc: denied { read } for pid=3020 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 30.153984][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.161374][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.169983][ T3299] bridge_slave_0: entered allmulticast mode [ 30.176533][ T3299] bridge_slave_0: entered promiscuous mode [ 30.198445][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.206513][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.213692][ T3299] bridge_slave_1: entered allmulticast mode [ 30.220127][ T3299] bridge_slave_1: entered promiscuous mode [ 30.231171][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.238322][ T3294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.245649][ T3294] bridge_slave_0: entered allmulticast mode [ 30.253481][ T3294] bridge_slave_0: entered promiscuous mode [ 30.260313][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.267592][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.275171][ T3297] bridge_slave_0: entered allmulticast mode [ 30.282035][ T3297] bridge_slave_0: entered promiscuous mode [ 30.299792][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.307253][ T3294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.314792][ T3294] bridge_slave_1: entered allmulticast mode [ 30.321465][ T3294] bridge_slave_1: entered promiscuous mode [ 30.327980][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.335801][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.343124][ T3297] bridge_slave_1: entered allmulticast mode [ 30.349708][ T3297] bridge_slave_1: entered promiscuous mode [ 30.376953][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.406057][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.420125][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.427445][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.434905][ T3304] bridge_slave_0: entered allmulticast mode [ 30.441469][ T3304] bridge_slave_0: entered promiscuous mode [ 30.449517][ T3294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.460519][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.474333][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.481583][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.489009][ T3298] bridge_slave_0: entered allmulticast mode [ 30.495847][ T3298] bridge_slave_0: entered promiscuous mode [ 30.502540][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.509701][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.516944][ T3304] bridge_slave_1: entered allmulticast mode [ 30.523477][ T3304] bridge_slave_1: entered promiscuous mode [ 30.531803][ T3294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.542138][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.560709][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.568202][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.575549][ T3298] bridge_slave_1: entered allmulticast mode [ 30.582362][ T3298] bridge_slave_1: entered promiscuous mode [ 30.602152][ T3299] team0: Port device team_slave_0 added [ 30.620992][ T3297] team0: Port device team_slave_0 added [ 30.627459][ T3299] team0: Port device team_slave_1 added [ 30.638667][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.648745][ T3294] team0: Port device team_slave_0 added [ 30.655235][ T3297] team0: Port device team_slave_1 added [ 30.666686][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.677111][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.687475][ T3294] team0: Port device team_slave_1 added [ 30.703066][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.729243][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.736473][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.762858][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.786855][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.794287][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.820790][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.832179][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.839456][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.866573][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.878387][ T3298] team0: Port device team_slave_0 added [ 30.885340][ T3304] team0: Port device team_slave_0 added [ 30.891477][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.898581][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.925177][ T3294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.936257][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.943431][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 30.970620][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.985382][ T3298] team0: Port device team_slave_1 added [ 30.992147][ T3304] team0: Port device team_slave_1 added [ 30.998222][ T3294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.005582][ T3294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.033712][ T3294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.077257][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.084381][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.111338][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.132350][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.139750][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.166871][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.182856][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.189880][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.216195][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.234976][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.242072][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.269159][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 31.289580][ T3294] hsr_slave_0: entered promiscuous mode [ 31.295628][ T3294] hsr_slave_1: entered promiscuous mode [ 31.303790][ T3297] hsr_slave_0: entered promiscuous mode [ 31.310032][ T3297] hsr_slave_1: entered promiscuous mode [ 31.316017][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 31.321919][ T3297] Cannot create hsr debugfs directory [ 31.330350][ T3299] hsr_slave_0: entered promiscuous mode [ 31.336835][ T3299] hsr_slave_1: entered promiscuous mode [ 31.343281][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 31.349094][ T3299] Cannot create hsr debugfs directory [ 31.400020][ T3304] hsr_slave_0: entered promiscuous mode [ 31.406463][ T3304] hsr_slave_1: entered promiscuous mode [ 31.412842][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 31.418706][ T3304] Cannot create hsr debugfs directory [ 31.426554][ T3298] hsr_slave_0: entered promiscuous mode [ 31.432688][ T3298] hsr_slave_1: entered promiscuous mode [ 31.438811][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 31.444693][ T3298] Cannot create hsr debugfs directory [ 31.644817][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 31.654656][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.662415][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 31.671053][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.678970][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 31.688060][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.695935][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 31.704782][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.730547][ T3294] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.740383][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.748424][ T3294] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.757598][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.765894][ T3294] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.775120][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.783542][ T3294] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.792535][ T3294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.820947][ T3299] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 31.830113][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.838094][ T3299] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 31.847259][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.855443][ T3299] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.864905][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 31.884798][ T3299] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.893594][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 31.928640][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.937836][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 31.956354][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.965132][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 31.974614][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.986352][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.995075][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.013143][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 32.021576][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.043542][ T3298] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 32.052493][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 32.062588][ T3298] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 32.071984][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 32.079904][ T3298] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 32.089018][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 32.098209][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.110273][ T3298] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 32.119101][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 32.129863][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.137229][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.146690][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.154101][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.183598][ T3294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.196147][ T3294] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.220484][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.227831][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.240494][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.262189][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.269773][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.283184][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.308004][ T2066] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.315419][ T2066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.335574][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.342853][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.367806][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.380607][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 32.396845][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.423619][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.430745][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.443779][ T2066] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.450914][ T2066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.463755][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 32.495097][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.502222][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.528369][ T2066] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.535787][ T2066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.631773][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.653278][ T3294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.764027][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.840958][ T3297] veth0_vlan: entered promiscuous mode [ 32.849110][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.859792][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 32.874448][ T3297] veth1_vlan: entered promiscuous mode [ 32.899288][ T3294] veth0_vlan: entered promiscuous mode [ 32.921564][ T3297] veth0_macvtap: entered promiscuous mode [ 32.930154][ T3294] veth1_vlan: entered promiscuous mode [ 32.939300][ T3297] veth1_macvtap: entered promiscuous mode [ 32.968422][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.981140][ T3294] veth0_macvtap: entered promiscuous mode [ 32.999545][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.011600][ T3294] veth1_macvtap: entered promiscuous mode [ 33.022072][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.031201][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.047849][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.056931][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.074891][ T3299] veth0_vlan: entered promiscuous mode [ 33.088013][ T3298] veth0_vlan: entered promiscuous mode [ 33.095710][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.119595][ T3298] veth1_vlan: entered promiscuous mode [ 33.131894][ T3294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.142158][ T3299] veth1_vlan: entered promiscuous mode [ 33.158374][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.168604][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.185102][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.194596][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.206129][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 33.209954][ T3298] veth0_macvtap: entered promiscuous mode [ 33.239303][ T3298] veth1_macvtap: entered promiscuous mode [ 33.258703][ T3304] veth0_vlan: entered promiscuous mode [ 33.273552][ T3299] veth0_macvtap: entered promiscuous mode [ 33.282665][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.299185][ T3304] veth1_vlan: entered promiscuous mode [ 33.311330][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.325416][ T3299] veth1_macvtap: entered promiscuous mode [ 33.335976][ T3503] Zero length message leads to an empty skb [ 33.344999][ T69] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.353975][ T69] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.369441][ T69] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.379717][ T69] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.392228][ T3304] veth0_macvtap: entered promiscuous mode [ 33.401233][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 33.407938][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 33.407954][ T28] audit: type=1400 audit(1784681311.869:165): avc: denied { prog_run } for pid=3504 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.412877][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.459254][ T3304] veth1_macvtap: entered promiscuous mode [ 36.475090][ T28] audit: type=1400 audit(1784681314.949:166): avc: denied { map_read map_write } for pid=3507 comm="syz.0.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 36.507946][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.541578][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.556694][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.570147][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.587615][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.625773][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.660485][ T28] audit: type=1400 audit(1784681315.129:167): avc: denied { read } for pid=3520 comm="syz.3.10" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.687106][ T2300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.696643][ T2300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.709300][ T28] audit: type=1400 audit(1784681315.129:168): avc: denied { open } for pid=3520 comm="syz.3.10" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.733165][ T28] audit: type=1400 audit(1784681315.129:169): avc: denied { ioctl } for pid=3520 comm="syz.3.10" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.770494][ T28] audit: type=1400 audit(1784681315.239:170): avc: denied { tracepoint } for pid=3524 comm="syz.0.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 36.800421][ T2300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.814686][ T2300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.073680][ T3535] tap0: tun_chr_ioctl cmd 1074025677 [ 37.096589][ T3535] tap0: linktype set to 6 [ 40.297019][ T28] audit: type=1400 audit(1784681318.769:171): avc: denied { write } for pid=3574 comm="syz.3.24" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.430273][ T3518] syz.0.9 (3518) used greatest stack depth: 10856 bytes left [ 40.648157][ T28] audit: type=1400 audit(1784681319.119:172): avc: denied { create } for pid=3596 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.699347][ T28] audit: type=1400 audit(1784681319.139:173): avc: denied { connect } for pid=3596 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.727571][ T3600] tap0: tun_chr_ioctl cmd 1074025677 [ 40.738845][ T3600] tap0: linktype set to 6 [ 40.749453][ T28] audit: type=1400 audit(1784681319.139:174): avc: denied { read } for pid=3596 comm="syz.1.32" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.809616][ T28] audit: type=1400 audit(1784681319.139:175): avc: denied { open } for pid=3596 comm="syz.1.32" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.856785][ T28] audit: type=1400 audit(1784681319.139:176): avc: denied { ioctl } for pid=3596 comm="syz.1.32" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 40.887361][ T28] audit: type=1400 audit(1784681319.139:177): avc: denied { ioctl } for pid=3596 comm="syz.1.32" path="socket:[4025]" dev="sockfs" ino=4025 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.917656][ T28] audit: type=1400 audit(1784681319.139:178): avc: denied { write } for pid=3596 comm="syz.1.32" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 40.937756][ T28] audit: type=1400 audit(1784681319.149:179): avc: denied { read write } for pid=3297 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.964328][ T28] audit: type=1400 audit(1784681319.149:180): avc: denied { open } for pid=3297 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 41.363675][ T3635] syzkaller0: entered promiscuous mode [ 41.391670][ T3635] syzkaller0: entered allmulticast mode [ 41.688910][ T3667] loop0: detected capacity change from 0 to 512 [ 41.720113][ T3668] Illegal XDP return value 4294967294 on prog (id 30) dev N/A, expect packet loss! [ 41.730651][ T3667] ======================================================= [ 41.730651][ T3667] WARNING: The mand mount option has been deprecated and [ 41.730651][ T3667] and is ignored by this kernel. Remove the mand [ 41.730651][ T3667] option from the mount to silence this warning. [ 41.730651][ T3667] ======================================================= [ 42.596557][ T3722] syzkaller0: entered promiscuous mode [ 42.602552][ T3722] syzkaller0: entered allmulticast mode [ 42.731016][ T3735] syzkaller0: entered promiscuous mode [ 42.736900][ T3735] syzkaller0: entered allmulticast mode [ 43.032110][ T3762] syzkaller0: entered promiscuous mode [ 43.038136][ T3762] syzkaller0: entered allmulticast mode [ 43.101612][ T3767] loop0: detected capacity change from 0 to 512 [ 43.118919][ T3769] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.126623][ T3769] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.137754][ T3769] bridge0: entered allmulticast mode [ 43.167081][ T3769] bridge_slave_1: left allmulticast mode [ 43.178441][ T3769] bridge_slave_1: left promiscuous mode [ 43.187753][ T3769] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.208831][ T3769] bridge_slave_0: left allmulticast mode [ 43.216349][ T3776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.225222][ T3769] bridge_slave_0: left promiscuous mode [ 43.231141][ T3776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.243002][ T3769] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.454920][ T3776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.466256][ T3776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.627773][ T3798] syzkaller0: entered promiscuous mode [ 43.633886][ T3798] syzkaller0: entered allmulticast mode [ 43.792250][ T392] kworker/u8:6: attempt to access beyond end of device [ 43.792250][ T392] loop0: rw=1, sector=8552, nr_sectors = 7912 limit=512 [ 44.169797][ T3821] syzkaller0: entered promiscuous mode [ 44.175534][ T3821] syzkaller0: entered allmulticast mode [ 44.408343][ T3843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.429743][ T3843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.574500][ T3853] syzkaller0: entered promiscuous mode [ 44.580207][ T3853] syzkaller0: entered allmulticast mode [ 44.646095][ T3843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.677785][ T3843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.136940][ T3874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.145881][ T3874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.310600][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 45.310619][ T28] audit: type=1400 audit(1784681323.779:205): avc: denied { create } for pid=3873 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.337663][ T28] audit: type=1400 audit(1784681323.809:206): avc: denied { ioctl } for pid=3873 comm="syz.1.153" path="socket:[5462]" dev="sockfs" ino=5462 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 45.362666][ T28] audit: type=1400 audit(1784681323.809:207): avc: denied { setopt } for pid=3873 comm="syz.1.153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.616974][ T3906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.626807][ T3906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 45.836704][ T3906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 45.845882][ T3906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 46.534233][ T28] audit: type=1400 audit(1784681324.999:208): avc: denied { create } for pid=3922 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 46.624045][ T28] audit: type=1400 audit(1784681325.099:209): avc: denied { create } for pid=3930 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 47.628205][ T3974] netlink: 'syz.3.198': attribute type 10 has an invalid length. [ 47.640831][ T3974] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 47.653808][ T3974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 47.670413][ T3974] bridge_slave_1: left allmulticast mode [ 47.677092][ T3974] bridge_slave_1: left promiscuous mode [ 47.684687][ T3974] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.714153][ T3974] bridge_slave_0: left allmulticast mode [ 47.719925][ T3974] bridge_slave_0: left promiscuous mode [ 47.726450][ T3974] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.351694][ T28] audit: type=1400 audit(1784681326.819:210): avc: denied { create } for pid=4018 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 48.448424][ T4032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.457164][ T4032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.642096][ T4044] netlink: 'syz.0.230': attribute type 10 has an invalid length. [ 48.654493][ T4044] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 48.665344][ T4044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.230'. [ 48.684383][ T4044] bridge_slave_1: left allmulticast mode [ 48.706291][ T4044] bridge_slave_1: left promiscuous mode [ 48.713739][ T4044] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.722645][ T4044] bridge_slave_0: left allmulticast mode [ 48.729019][ T4044] bridge_slave_0: left promiscuous mode [ 48.735649][ T4044] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.731029][ T28] audit: type=1400 audit(1784681330.199:211): avc: denied { create } for pid=4066 comm="syz.3.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.788856][ T4064] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.796909][ T4064] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.824725][ T4064] bridge0: entered allmulticast mode [ 51.845232][ T4064] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.852416][ T4064] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.859955][ T4064] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.867260][ T4064] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.877979][ T4064] bridge0: entered promiscuous mode [ 52.845541][ T28] audit: type=1400 audit(1784681331.319:212): avc: denied { mmap_zero } for pid=4085 comm="syz.0.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 53.015475][ T4095] loop1: detected capacity change from 0 to 2048 [ 53.093504][ T4095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.131908][ T28] audit: type=1400 audit(53.094:213): avc: denied { mount } for pid=4094 comm="syz.1.249" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 53.164290][ T28] audit: type=1400 audit(53.124:214): avc: denied { write } for pid=4094 comm="syz.1.249" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.210271][ T28] audit: type=1400 audit(53.134:215): avc: denied { add_name } for pid=4094 comm="syz.1.249" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 53.234059][ T4102] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.249: bg 0: block 345: padding at end of block bitmap is not set [ 53.351813][ T4102] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 73 with error 117 [ 53.365545][ T28] audit: type=1400 audit(53.134:216): avc: denied { create } for pid=4094 comm="syz.1.249" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.408248][ T4102] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.408248][ T4102] [ 53.429868][ T4107] loop4: detected capacity change from 0 to 256 [ 53.454612][ T28] audit: type=1400 audit(53.134:217): avc: denied { read write } for pid=4094 comm="syz.1.249" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.477676][ T4107] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 53.498142][ T28] audit: type=1400 audit(53.134:218): avc: denied { open } for pid=4094 comm="syz.1.249" path="/44/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.526820][ T28] audit: type=1400 audit(53.184:219): avc: denied { ioctl } for pid=4094 comm="syz.1.249" path="/44/file0/file1" dev="loop1" ino=15 ioctlcmd=0x660c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.554744][ T4102] syz.1.249 (4102) used greatest stack depth: 10240 bytes left [ 53.574770][ T2300] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 73 with max blocks 2 with error 28 [ 53.614675][ T28] audit: type=1400 audit(53.584:220): avc: denied { allowed } for pid=4113 comm="syz.0.256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 53.636834][ T2300] EXT4-fs (loop1): This should not happen!! Data will be lost [ 53.636834][ T2300] [ 53.657737][ T2300] EXT4-fs (loop1): Total free blocks count 0 [ 53.670495][ T2300] EXT4-fs (loop1): Free/Dirty block details [ 53.670515][ T2300] EXT4-fs (loop1): free_blocks=0 [ 53.670594][ T2300] EXT4-fs (loop1): dirty_blocks=16 [ 53.670610][ T2300] EXT4-fs (loop1): Block reservation details [ 53.671263][ T3299] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 53.683171][ T4116] loop4: detected capacity change from 0 to 512 [ 53.689755][ T4116] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 53.689785][ T4116] EXT4-fs (loop4): blocks per group (71) and clusters per group (20800) inconsistent [ 53.777967][ T4122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.806918][ T4122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.010868][ T4122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 54.019834][ T4122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.578467][ T4142] netlink: 36 bytes leftover after parsing attributes in process `syz.4.266'. [ 55.189080][ T4155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.230680][ T4155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.450333][ T4157] loop0: detected capacity change from 0 to 256 [ 55.458094][ T4157] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 55.579632][ T4157] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 55.602350][ T4157] FAT-fs (loop0): Filesystem has been set read-only [ 55.611864][ T4157] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 55.723353][ T4168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.732344][ T4168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.816199][ T4174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.825085][ T4174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.935222][ T4178] syzkaller0: entered promiscuous mode [ 55.940930][ T4178] syzkaller0: entered allmulticast mode [ 55.947646][ T4168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.966341][ T4168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 56.119672][ T4184] tipc: Started in network mode [ 56.125102][ T4184] tipc: Node identity , cluster identity 4711 [ 56.131582][ T4184] tipc: Failed to set node id, please configure manually [ 56.139057][ T4184] tipc: Enabling of bearer rejected, failed to enable media [ 56.226335][ T4192] xt_hashlimit: size too large, truncated to 1048576 [ 56.262200][ T4196] loop3: detected capacity change from 0 to 1024 [ 56.274028][ T4198] netlink: 12 bytes leftover after parsing attributes in process `syz.0.291'. [ 56.303463][ T4196] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.394791][ T4210] EXT4-fs (loop3): shut down requested (1) [ 56.445164][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.459475][ T4212] loop2: detected capacity change from 0 to 512 [ 56.479078][ T4212] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 56.521903][ T4212] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 56.540078][ T4212] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 56.566012][ T4212] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 56.572741][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 56.586177][ C0] EXT4-fs (loop2): initial error at time 56: ext4_mb_generate_buddy:1317 [ 56.594825][ C0] EXT4-fs (loop2): last error at time 56: ext4_mb_generate_buddy:1317 [ 56.603869][ T4212] EXT4-fs (loop2): 1 truncate cleaned up [ 56.610368][ T4212] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.653343][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.798822][ T4240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 56.807460][ T4240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.017886][ T4240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.027294][ T4240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.363427][ T4247] loop4: detected capacity change from 0 to 128 [ 57.419975][ T4249] loop4: detected capacity change from 0 to 1024 [ 57.461213][ T4249] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 57.489048][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 57.489066][ T28] audit: type=1400 audit(57.454:252): avc: denied { write } for pid=4248 comm="syz.4.310" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.521861][ T4255] loop3: detected capacity change from 0 to 1024 [ 57.553341][ T4255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 57.573844][ T4260] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.310: lblock 0 mapped to illegal pblock 0 (length 4) [ 57.588333][ T28] audit: type=1400 audit(57.544:253): avc: denied { write } for pid=4254 comm="syz.3.312" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.620907][ T4260] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117 [ 57.639044][ T4260] EXT4-fs (loop4): This should not happen!! Data will be lost [ 57.639044][ T4260] [ 57.671569][ T4263] loop0: detected capacity change from 0 to 2048 [ 57.690476][ T4268] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.310: lblock 0 mapped to illegal pblock 0 (length 1) [ 57.711063][ T28] audit: type=1400 audit(57.544:254): avc: denied { create } for pid=4254 comm="syz.3.312" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.730673][ T4270] xt_hashlimit: size too large, truncated to 1048576 [ 57.770648][ T4268] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.310: lblock 0 mapped to illegal pblock 0 (length 1) [ 57.784681][ T28] audit: type=1400 audit(57.544:255): avc: denied { write } for pid=4254 comm="syz.3.312" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.795253][ T4263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.806071][ T28] audit: type=1400 audit(57.544:256): avc: denied { remove_name } for pid=4254 comm="syz.3.312" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.864543][ T28] audit: type=1400 audit(57.544:257): avc: denied { rmdir } for pid=4254 comm="syz.3.312" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 57.872869][ T4268] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.310: lblock 0 mapped to illegal pblock 0 (length 1) [ 57.908942][ T28] audit: type=1400 audit(57.624:258): avc: denied { connect } for pid=4266 comm="syz.1.316" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.947308][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.965979][ T4268] EXT4-fs error (device loop4): ext4_map_blocks:791: inode #15: comm syz.4.310: lblock 0 mapped to illegal pblock 0 (length 1) [ 58.000659][ T28] audit: type=1400 audit(57.964:259): avc: denied { write } for pid=4262 comm="syz.0.314" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.001010][ T4263] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.314: bg 0: block 345: padding at end of block bitmap is not set [ 58.056541][ T28] audit: type=1400 audit(57.964:260): avc: denied { write } for pid=4262 comm="syz.0.314" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.101767][ T28] audit: type=1400 audit(57.964:261): avc: denied { rename } for pid=4262 comm="syz.0.314" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 58.169946][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.243722][ T4278] loop0: detected capacity change from 0 to 2048 [ 58.263266][ T4278] EXT4-fs: Ignoring removed nobh option [ 58.296856][ T4278] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.312248][ T30] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 4: comm kworker/u8:1: lblock 4 mapped to illegal pblock 4 (length 2) [ 58.341019][ T30] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 58.353904][ T30] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.353904][ T30] [ 58.354972][ T3294] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.375780][ T2066] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 58.399195][ T4289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.403734][ T2066] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 58.415776][ T4289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.420257][ T2066] EXT4-fs (loop4): This should not happen!! Data will be lost [ 58.420257][ T2066] [ 58.443937][ T3304] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 58.470034][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 58.606939][ T4305] loop3: detected capacity change from 0 to 512 [ 58.631670][ T4289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.654003][ T4305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.670794][ T4289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.689420][ T4305] EXT4-fs error (device loop3): ext4_generic_delete_entry:2673: inode #2: block 6: comm syz.3.331: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=4096 fake=0 [ 58.711068][ T4305] EXT4-fs error (device loop3) in ext4_delete_entry:2744: Corrupt filesystem [ 58.730015][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.742105][ T4314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.751751][ T4314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.820467][ T4317] loop1: detected capacity change from 0 to 512 [ 58.831802][ T4319] capability: warning: `syz.3.336' uses deprecated v2 capabilities in a way that may be insecure [ 58.977350][ T4323] netlink: 8 bytes leftover after parsing attributes in process `syz.3.337'. [ 59.244951][ T4331] loop3: detected capacity change from 0 to 512 [ 59.252248][ T4331] EXT4-fs: Ignoring removed nobh option [ 59.456652][ T4335] loop0: detected capacity change from 0 to 256 [ 60.145672][ T4331] EXT4-fs error (device loop3): ext4_do_update_inode:5742: inode #3: comm syz.3.338: corrupted inode contents [ 60.158571][ T4331] loop3: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 60.159060][ T4331] EXT4-fs (loop3): Remounting filesystem read-only [ 60.168498][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 60.168538][ C1] EXT4-fs (loop3): initial error at time 60: ext4_do_update_inode:5742: inode 3 [ 60.168572][ C1] EXT4-fs (loop3): last error at time 60: ext4_do_update_inode:5742: inode 3 [ 60.202990][ T4331] EXT4-fs (loop3): 1 truncate cleaned up [ 60.210015][ T4331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.367913][ T4331] syz.3.338 (4331) used greatest stack depth: 9864 bytes left [ 60.672430][ T4350] loop2: detected capacity change from 0 to 128 [ 60.691462][ T3579] udevd[3579]: incorrect ext4 checksum on /dev/loop2 [ 60.703854][ T4350] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 60.726909][ T3579] udevd[3579]: incorrect ext4 checksum on /dev/loop2 [ 61.013373][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.023554][ T4350] loop2: detected capacity change from 0 to 256 [ 61.031725][ T4350] FAT-fs (loop2): data area starts beyond volume (274 > 64) [ 61.051334][ T4350] FAT-fs (loop2): Can't find a valid FAT filesystem [ 61.097526][ T4362] netlink: 'syz.3.352': attribute type 10 has an invalid length. [ 61.115137][ T4362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 61.125626][ T4350] loop2: detected capacity change from 0 to 4096 [ 61.132980][ T2981] ================================================================== [ 61.135535][ T4350] EXT4-fs: inline encryption not supported [ 61.141194][ T2981] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 61.155524][ T2981] [ 61.157859][ T2981] write to 0xffff888105d9a030 of 8 bytes by task 4124 on cpu 1: [ 61.165686][ T2981] dentry_unlink_inode+0x65/0x260 [ 61.170915][ T2981] d_delete+0x164/0x180 [ 61.175092][ T2981] d_delete_notify+0x32/0x100 [ 61.180054][ T2981] vfs_unlink+0x287/0x490 [ 61.184488][ T2981] filename_unlinkat+0x1dc/0x410 [ 61.189523][ T2981] __se_sys_unlink+0x2b/0xe0 [ 61.194382][ T2981] __x64_sys_unlink+0x1f/0x30 [ 61.199258][ T2981] x64_sys_call+0x2eb6/0x3020 [ 61.204041][ T2981] do_syscall_64+0x136/0x3c0 [ 61.208813][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.215771][ T2981] [ 61.218117][ T2981] read to 0xffff888105d9a030 of 8 bytes by task 2981 on cpu 0: [ 61.225847][ T2981] step_into_slowpath+0x12c/0x4c0 [ 61.231078][ T2981] path_lookupat+0x2eb/0x4c0 [ 61.235858][ T2981] filename_lookup+0x18f/0x390 [ 61.240725][ T2981] do_readlinkat+0x74/0x2f0 [ 61.245519][ T2981] __x64_sys_readlink+0x47/0x60 [ 61.250471][ T2981] x64_sys_call+0x2b51/0x3020 [ 61.255248][ T2981] do_syscall_64+0x136/0x3c0 [ 61.259852][ T2981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.266011][ T2981] [ 61.268527][ T2981] value changed: 0xffff88811c11a690 -> 0x0000000000000000 [ 61.275640][ T2981] [ 61.277977][ T2981] Reported by Kernel Concurrency Sanitizer on: [ 61.284392][ T2981] CPU: 0 UID: 0 PID: 2981 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 61.293946][ T2981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 61.305040][ T2981] ================================================================== [ 61.325708][ T4350] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.337487][ T4350] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802e018, mo2=0002] [ 61.345885][ T4350] System zones: 0-5 [ 61.350637][ T4350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.842569][ T3298] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.