last executing test programs: 1m44.133681446s ago: executing program 32 (id=3142): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xb29}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1m39.903637127s ago: executing program 1 (id=3240): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r1, r3, 0x25, 0x4, @val=@iter={0x0}}, 0x20) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="69a2540a4290a9c69035e388831f", 0xe}, {&(0x7f0000000080)="ea34", 0x2}, {&(0x7f0000000040)="040171", 0x3}], 0x3) 1m39.879760239s ago: executing program 1 (id=3244): pipe(&(0x7f0000000640)) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000a80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) sendmmsg$inet(r1, &(0x7f0000002040)=[{{&(0x7f0000000080)={0x2, 0x4e1c, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x70}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000004c0)="e33ff58b03cab40e51118f16076293883a5b4de106485183c476c942f172cdd880517674db30a4f7f6558811a7faefb6122a153f46cd53867280e7894900b269752fa42c0d483868fb24f2dc886c02266d5b028aea5aec3c843025a0b82b269f32ea5cb10cdf919f6c43c77d673effffee9a53a74823671a882a41f629120000000000", 0x83}, {&(0x7f0000000680)="866dc31ecb472cfea39ad713ab773467b5b55502b0a578d11913b00d5aecc765a044360e8ff463e43e6205293a828aa4b9cd9fa2248f15ba85a5cd8efbcb67d9c3b1cba4c4f6f6336ceeee2de504aecd389ce75aa1482f4441d3b1057efcff9e4779bd346ef7332bb1ac56a9849fc7bee3c44ae73f91", 0x76}, {&(0x7f0000000340)="8bf08c30d230ef92b21a0caa95b113ac535cd462460cf91daa408b5889621333b42cb87f52a3ad8e2615954dd53712463c55372d80f6eec48125b3e167c7a132a0371e63cb554ad0ce42b3646f7dbc0723bf387b12eeb07334f12b6c9f3b7c98d993a42ad2b6fedf28ef4e43ad65868b22caf514a6e6069d321695dbebf8a5", 0x7f}, {&(0x7f0000000040)}, {0x0}], 0x5}}], 0x2, 0x2000c044) 1m39.823488083s ago: executing program 1 (id=3245): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000fc0)=[@acquire={0x40046305, 0x3}], 0x0, 0x0, 0x0}) 1m39.823290233s ago: executing program 1 (id=3246): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file3\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write$UHID_CREATE(r0, &(0x7f0000000a80)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x5, 0x4, 0x3ff, 0x10000, 0xffffffff}}, 0x120) 1m39.793945105s ago: executing program 1 (id=3247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000040601020000000200fdffffffffff020500010007"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) 1m39.577177213s ago: executing program 1 (id=3248): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x20, r0, 0x329, 0xfffffffc, 0x1000004, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) 1m39.555905945s ago: executing program 33 (id=3248): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)={0x20, r0, 0x329, 0xfffffffc, 0x1000004, {0x16}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x10000860}, 0x8004) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) 1m37.43907553s ago: executing program 3 (id=3288): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r0, &(0x7f0000000140)={0x9, 0x108, 0xfa00, {0xffffffffffffffff, 0xa, '\x00', "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"}}, 0x110) 1m37.403847993s ago: executing program 3 (id=3289): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000040)="e7c53ba1231e56594d910b568a3eb3241b", 0x11}], 0x1}}], 0x1, 0x2000c044) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x200}) 1m37.367497736s ago: executing program 3 (id=3291): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r3, r2, 0x25, 0x0, @val=@tcx}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x20040000) 1m37.366910596s ago: executing program 3 (id=3293): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file3\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000a80)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x5, 0x4, 0x3ff, 0x10000, 0xffffffff}}, 0x120) 1m37.235294396s ago: executing program 3 (id=3297): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) 1m36.992833705s ago: executing program 3 (id=3303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="001c88a807001000000040"], 0xffe) 1m36.992340205s ago: executing program 34 (id=3303): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="001c88a807001000000040"], 0xffe) 1m29.465541454s ago: executing program 5 (id=3641): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r4, r3, 0x25, 0x0, @val=@tcx}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x20040000) 1m29.443068896s ago: executing program 5 (id=3643): r0 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, 0x0, 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000140), 0x12) readv(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) 1m29.404471429s ago: executing program 5 (id=3645): socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x1, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be4220000000000dff2badc958845d800000000000000004000", 0x17}, 0x60) listen(r1, 0x81) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m29.403602289s ago: executing program 5 (id=3647): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file3\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write$UHID_CREATE(r0, &(0x7f0000000a80)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x5, 0x4, 0x3ff, 0x10000, 0xffffffff}}, 0x120) 1m29.226249213s ago: executing program 5 (id=3657): getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000800)={0x0, 0x401, "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"}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write(r0, &(0x7f0000000280)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8fda", 0xffffffe5) 1m29.150254009s ago: executing program 4 (id=3663): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000500)="14a6d62c", 0x4}], 0x2}}], 0x2, 0x48040) 1m29.125379611s ago: executing program 4 (id=3664): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) 1m29.105531803s ago: executing program 4 (id=3666): sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0}, 0x94) io_uring_register$IORING_REGISTER_FILES(r0, 0x1e, &(0x7f0000000000)=[r0], 0x1) 1m29.058678856s ago: executing program 4 (id=3668): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file3\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = open(0x0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write$UHID_CREATE(r0, &(0x7f0000000a80)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x0, 0x0, 0x5, 0x4, 0x3ff, 0x10000, 0xffffffff}}, 0x120) 1m28.997665241s ago: executing program 4 (id=3672): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1m28.838024334s ago: executing program 5 (id=3684): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xcb08, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xb}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) syz_open_pts(r1, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 1m28.818734545s ago: executing program 35 (id=3684): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xcb08, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xb}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000080)) syz_open_pts(r1, 0x2000) close_range(r0, 0xffffffffffffffff, 0x0) 1m28.75350477s ago: executing program 4 (id=3688): socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x1, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be4220000000000dff2badc958845d800000000000000004000", 0x17}, 0x60) listen(r1, 0x81) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m28.702873564s ago: executing program 36 (id=3688): socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x1, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be4220000000000dff2badc958845d800000000000000004000", 0x17}, 0x60) listen(r1, 0x81) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m27.48326553s ago: executing program 7 (id=3722): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000021}, 0x2404c0c0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x880, 0x0, 0x0) 1m27.443873153s ago: executing program 7 (id=3724): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth0_virt_wifi\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000440)={r3, r2, 0x25, 0x0, @val=@tcx}, 0x1c) sendmsg$nl_route(r0, 0x0, 0x20040000) 1m27.369920218s ago: executing program 7 (id=3727): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c000000000000000000000c850000006d00000095"], &(0x7f0000001800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1m27.296964164s ago: executing program 7 (id=3729): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file3\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write$UHID_CREATE(r0, 0x0, 0x0) 1m27.112121838s ago: executing program 7 (id=3732): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000021}, 0x2404c0c0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, 0x0, 0x0, 0x880, 0x0, 0x0) 1m26.895359086s ago: executing program 7 (id=3736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}}, 0x20}}, 0x20048010) r4 = socket(0xa, 0x3, 0x87) sendto(r4, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x10b200) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000140)={0x3, 0x0, 0x98, &(0x7f0000000080)={0x7, 0x2, 0x11}}) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 1m26.884718756s ago: executing program 37 (id=3736): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}}, 0x20}}, 0x20048010) r4 = socket(0xa, 0x3, 0x87) sendto(r4, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) r6 = syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x10b200) ioctl$BLKPG(r6, 0x1269, &(0x7f0000000140)={0x3, 0x0, 0x98, &(0x7f0000000080)={0x7, 0x2, 0x11}}) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 4.746948588s ago: executing program 6 (id=5926): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f0000000140)=0x1) close(r2) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[], 0xffdd) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 4.712102891s ago: executing program 6 (id=5927): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x6, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff1}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x3) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 3.836138349s ago: executing program 6 (id=5942): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000100)={0x20, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.284950902s ago: executing program 6 (id=5949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_FORWARD_DELAY={0x8, 0x1, 0x1c}]}}}]}, 0x3c}}, 0x20048010) r6 = socket(0xa, 0x3, 0x87) sendto(r6, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000280)=0x14) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xffffff81, {0x0, 0x0, 0x0, r9, {0xe, 0x3}, {}, {0x9, 0xfff1}}}, 0x24}}, 0x40004) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x80000000, 0x10b200) ioctl$BLKPG(r10, 0x1269, &(0x7f0000000140)={0x3, 0x0, 0x98, &(0x7f0000000080)={0x7, 0x2, 0x11}}) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100) 2.391559352s ago: executing program 6 (id=5959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) setreuid(0x0, 0xee00) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 2.279245031s ago: executing program 6 (id=5961): pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(0x3) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYRES16], 0x48}, 0x1, 0x0, 0x0, 0x8000010}, 0x20004801) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x80, 0x6) 1.876392283s ago: executing program 2 (id=5966): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.860635504s ago: executing program 2 (id=5967): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56551, 0x4, 0xfffffffb, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xb, 0x1002, 0x0, 0x2, 0xffffffff, 0x5}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}]}}}]}, 0x58}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 1.833324626s ago: executing program 8 (id=5968): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xb3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 1.357653753s ago: executing program 9 (id=5975): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x9f, 0x7fff0000}]}) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x4010744d, 0x0) syslog(0x9, 0x0, 0x0) 1.299605938s ago: executing program 9 (id=5976): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') syz_mount_image$vfat(&(0x7f0000000600), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000180)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00', @ANYRES8, @ANYRES16=0x0, @ANYRESHEX=0x0], 0x1, 0x2c3, &(0x7f00000002c0)="$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") open(&(0x7f0000000100)='./bus\x00', 0x24040, 0x10) truncate(0x0, 0x8) 1.299382778s ago: executing program 9 (id=5977): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, 0x0, 0x25, 0x8, @void}, 0x10) 1.299156598s ago: executing program 9 (id=5978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 1.287110689s ago: executing program 9 (id=5979): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380), 0xfd, 0x269, &(0x7f0000000a00)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 1.005581801s ago: executing program 2 (id=5980): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000000), 0x0}, 0x20) 931.742816ms ago: executing program 8 (id=5981): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 865.667212ms ago: executing program 2 (id=5982): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40c040, &(0x7f0000000080)={[{@data_journal}]}, 0x1, 0x53a, &(0x7f00000000c0)="$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") bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000080)="498fdc2548ce1cea9922598d5665f2fd624f6a63a384d050a72160ee132260472656b469d6d6d4b89b69053813258146679dcd654e00f48f1334eeea16f214a9e7f27813fd874f531a1b02432dc8089ed72b54bd6c49d2eb86c607498bde6bf72fa57a2e80366b", 0x0, 0x4}, 0x38) 574.941575ms ago: executing program 8 (id=5985): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x3, 0x9, 0x1, 0x800, 0x9c3, 0x4, 0x0, 0x8, 0xffffffff, 0x3, 0x8, 0x8, 0xfffffffd, 0x8, 0x8001, 0x100, 0x3, 0x0, 0x588e, 0x1, 0x1e00, 0x101, 0x7, 0x80000000, 0xf8f1, 0x0, 0x401, 0x10, 0x1, 0xc00000, 0xfffffff7, 0x400, 0x7f, 0x80000000, 0x3, 0x6ade, 0x0, 0x4, 0x401, 0x1, 0x5, 0x8, 0x1, 0x7, 0x3, 0x80, 0x7fffffff, 0x2, 0x9, 0x3, 0x80, 0x8, 0xe, 0x1c9, 0x0, 0x2, 0x4, 0xfffffffa, 0x4, 0x1, 0x4, 0x3, 0x1, 0x8, 0x2, 0xe757, 0xfffffff7, 0x8001, 0x45f, 0x1ff, 0xe, 0xd, 0x7d3, 0x4, 0xb, 0x58c4637b, 0x5, 0x0, 0x1, 0x2, 0x6, 0xb90, 0x203, 0x6, 0x200, 0x7, 0x10000, 0x4, 0xffffff25, 0xa04, 0x78da, 0x0, 0x0, 0xffffffff, 0x80000001, 0x0, 0x5, 0x465, 0x1000006, 0xcd17, 0x9, 0x6, 0x2, 0xfffffffc, 0xfffffff7, 0x7f, 0x2, 0x6, 0x1, 0x40000, 0x6, 0x6, 0x0, 0x40, 0x8, 0x3, 0x23, 0x0, 0x6, 0x1, 0x2fe, 0x96, 0x0, 0x2, 0x5, 0x2, 0x9, 0x8, 0x0, 0x0, 0x7, 0x6, 0x80, 0x100, 0x7, 0x7f, 0x2, 0x200, 0x8, 0xe330fdc7, 0x9, 0x5, 0x7e, 0x2, 0x0, 0x5, 0xffff0000, 0x2, 0x81, 0x401, 0x7, 0x8, 0xffff669d, 0xffffff94, 0x7, 0x5, 0x10001, 0x7, 0x7, 0x4, 0x5, 0xb2fb, 0x1, 0x7ff, 0x85, 0xffffffff, 0x4ac, 0xfc9, 0x80000000, 0x1, 0xfb, 0x6, 0xb, 0x3, 0x40, 0x3, 0x2, 0x83, 0x6, 0x56a, 0x0, 0x9, 0x9, 0x1, 0x7, 0x9, 0x4, 0xe, 0x6, 0x6, 0x8, 0x0, 0xfffffffe, 0x5, 0x44, 0x4, 0x2, 0x1, 0xfffffff1, 0x6, 0x80000000, 0x4, 0x100, 0xfffffff7, 0x2a8, 0x2, 0x9, 0x7f, 0x4, 0x8, 0xffffffff, 0x6ed916d9, 0xfffffff8, 0x38, 0x3, 0x2, 0xd0, 0x36a0, 0xc, 0x3, 0x2, 0x1, 0x7df0, 0x9, 0x2009, 0x5, 0xfff, 0xc, 0x87, 0x8, 0x8, 0x80000000, 0x5, 0x3, 0x800, 0x1c43, 0x7, 0xa66, 0x6, 0x18000, 0x6, 0x4, 0x86f9, 0x6, 0x80, 0x200, 0x28000, 0x401, 0xffff, 0x4d, 0x2, 0xfc, 0x7, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 574.565685ms ago: executing program 2 (id=5986): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x3, 0x0, 0x0, 0x5, 0x0, 0x3}]}}, 0x0, 0x26, 0x0, 0x1, 0x80000001}, 0x28) 538.755677ms ago: executing program 2 (id=5987): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000900)={@in={{0x2, 0x4e23, @local}}, 0x0, 0x0, 0x3, 0x0, "c892f60fe68825cb02f1be2dc0c4599b55964bc6958074263b1cca120bb879e2ddc1855aae95cdb1b6a5ab173bba8823c3fc0c94315ffcfa3b21da66fece60df5f226cda5b07323c9b569c8854ced4d1"}, 0xd8) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 492.276951ms ago: executing program 8 (id=5988): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x20400, 0xfffffffb}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 423.621656ms ago: executing program 8 (id=5989): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r1, 0x25, 0x8, @void}, 0x10) 423.127306ms ago: executing program 8 (id=5990): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x1c1002, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, 0x0, 0x0) epoll_create(0x4) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 372.244931ms ago: executing program 9 (id=5991): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xb3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 196.799124ms ago: executing program 0 (id=5994): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2a, 0x14, 0x200, 0x0, 0x4, {0xa, 0x10, 0x4}}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 131.039449ms ago: executing program 0 (id=5995): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad416085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800090000000000010000001c140000fe00000100000001"], 0x24}}, 0x0) 130.378719ms ago: executing program 0 (id=5996): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 106.892461ms ago: executing program 0 (id=5997): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x400, 0x6, 0x8, 0x10387c1f}}]}}}]}, 0x60}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 18.982748ms ago: executing program 0 (id=5998): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@union={0x3, 0x0, 0x0, 0x5, 0x0, 0x3}]}, {0x0, [0x2e, 0x5f, 0x71]}}, 0x0, 0x29, 0x0, 0x1, 0x80000001}, 0x28) 0s ago: executing program 0 (id=5999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0x2, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xffffffff, 0x3, 0x9, 0x1, 0x800, 0x9c3, 0x4, 0x0, 0x8, 0xffffffff, 0x3, 0x8, 0x8, 0xfffffffd, 0x8, 0x8001, 0x100, 0x3, 0x0, 0x588e, 0x1, 0x1e00, 0x101, 0x7, 0x80000000, 0xf8f1, 0x0, 0x401, 0x10, 0x1, 0xc00000, 0xfffffff7, 0x400, 0x7f, 0x80000000, 0x3, 0x6ade, 0x0, 0x4, 0x401, 0x1, 0x5, 0x8, 0x1, 0x7, 0x3, 0x80, 0x7fffffff, 0x2, 0x9, 0x3, 0x80, 0x8, 0xe, 0x1c9, 0x0, 0x2, 0x4, 0xfffffffa, 0x4, 0x1, 0x4, 0x3, 0x1, 0x8, 0x2, 0xe757, 0xfffffff7, 0x8001, 0x45f, 0x1ff, 0xe, 0xd, 0x7d3, 0x4, 0xb, 0x58c4637b, 0x5, 0x0, 0x1, 0x2, 0x6, 0xb90, 0x203, 0x6, 0x200, 0x7, 0x10000, 0x4, 0xffffff25, 0xa04, 0x78da, 0x0, 0x0, 0xffffffff, 0x80000001, 0x0, 0x5, 0x465, 0x1000006, 0xcd17, 0x9, 0x6, 0x2, 0xfffffffc, 0xfffffff7, 0x7f, 0x2, 0x6, 0x1, 0x40000, 0x6, 0x6, 0x0, 0x40, 0x8, 0x3, 0x23, 0x0, 0x6, 0x1, 0x2fe, 0x96, 0x0, 0x2, 0x5, 0x2, 0x9, 0x8, 0x0, 0x0, 0x7, 0x6, 0x80, 0x100, 0x7, 0x7f, 0x2, 0x200, 0x8, 0xe330fdc7, 0x9, 0x5, 0x7e, 0x2, 0x0, 0x5, 0xffff0000, 0x2, 0x81, 0x401, 0x7, 0x8, 0xffff669d, 0xffffff94, 0x7, 0x5, 0x10001, 0x7, 0x7, 0x4, 0x5, 0xb2fb, 0x1, 0x7ff, 0x85, 0xffffffff, 0x4ac, 0xfc9, 0x80000000, 0x1, 0xfb, 0x6, 0xb, 0x3, 0x40, 0x3, 0x2, 0x83, 0x6, 0x56a, 0x0, 0x9, 0x9, 0x1, 0x7, 0x9, 0x4, 0xe, 0x6, 0x6, 0x8, 0x0, 0xfffffffe, 0x5, 0x44, 0x4, 0x2, 0x1, 0xfffffff1, 0x6, 0x80000000, 0x4, 0x100, 0xfffffff7, 0x2a8, 0x2, 0x9, 0x7f, 0x4, 0x8, 0xffffffff, 0x6ed916d9, 0xfffffff8, 0x38, 0x3, 0x2, 0xd0, 0x36a0, 0xc, 0x3, 0x2, 0x1, 0x7df0, 0x9, 0x2009, 0x5, 0xfff, 0xc, 0x87, 0x8, 0x8, 0x80000000, 0x5, 0x3, 0x800, 0x1c43, 0x7, 0xa66, 0x6, 0x18000, 0x6, 0x4, 0x86f9, 0x6, 0x80, 0x200, 0x28000, 0x401, 0xffff, 0x4d, 0x2, 0xfc, 0x7, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r7, 0x1, 0xd8, 0x6, @broadcast}, 0x14) kernel console output (not intermixed with test programs): 7.480141][T12353] netlink: 'syz.4.3210': attribute type 10 has an invalid length. [ 297.489757][T12353] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3210'. [ 297.504634][ T37] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.513447][T12353] dummy0: entered promiscuous mode [ 297.519330][T12353] bridge0: port 3(dummy0) entered blocking state [ 297.525749][T12353] bridge0: port 3(dummy0) entered disabled state [ 297.532411][T12353] dummy0: entered allmulticast mode [ 297.538437][T12353] bridge0: port 3(dummy0) entered blocking state [ 297.544845][T12353] bridge0: port 3(dummy0) entered forwarding state [ 297.566893][ T37] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.609390][T12358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.622492][T12358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.631345][T12360] loop4: detected capacity change from 0 to 128 [ 297.660730][T12368] 9pnet_fd: p9_fd_create_tcp (12368): problem connecting socket to 127.0.0.1 [ 297.748414][T12376] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3222'. [ 297.847834][T12404] macvtap0: entered allmulticast mode [ 297.853469][T12404] veth0_macvtap: entered allmulticast mode [ 297.884851][T12410] loop3: detected capacity change from 0 to 128 [ 297.885465][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3234'. [ 298.175134][ T29] audit: type=1400 audit(1765543612.452:12542): avc: denied { execute } for pid=12416 comm="syz.1.3237" name="file2" dev="tmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 298.197871][ T29] audit: type=1400 audit(1765543612.452:12543): avc: denied { execute_no_trans } for pid=12416 comm="syz.1.3237" path="/136/file2" dev="tmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 298.221620][ T29] audit: type=1400 audit(1765543612.462:12544): avc: denied { mounton } for pid=12416 comm="syz.1.3237" path="/proc/301/task" dev="proc" ino=60829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 298.382989][T12438] loop1: detected capacity change from 0 to 2048 [ 298.403246][T12438] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.428237][ T29] audit: type=1400 audit(1765543612.702:12545): avc: denied { unlink } for pid=10793 comm="syz-executor" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 298.451483][ T29] audit: type=1400 audit(1765543612.702:12546): avc: denied { unlink } for pid=10793 comm="syz-executor" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 298.623154][T10793] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.633438][ T1624] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.665693][ T1624] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.715759][ T1624] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.765902][ T1624] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.839760][T12462] loop4: detected capacity change from 0 to 1024 [ 298.847419][T12464] 9pnet_virtio: no channels available for device syz [ 298.857562][T12462] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 298.879987][T12462] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 298.888422][T12466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3256'. [ 298.889388][ T1624] dummy0: left allmulticast mode [ 298.903738][ T1624] bridge0: port 3(dummy0) entered disabled state [ 298.906175][T12462] EXT4-fs (loop4): orphan cleanup on readonly fs [ 298.921779][ T1624] bridge_slave_1: left allmulticast mode [ 298.927003][T12462] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.3255: Freeing blocks not in datazone - block = 0, count = 4096 [ 298.927462][ T1624] bridge_slave_1: left promiscuous mode [ 298.946597][ T1624] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.951104][T12462] EXT4-fs (loop4): 1 orphan inode deleted [ 298.959944][T12462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.972660][ T1624] bridge_slave_0: left allmulticast mode [ 298.978423][ T1624] bridge_slave_0: left promiscuous mode [ 298.984695][ T1624] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.994443][T11665] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.276851][ T1624] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.297638][ T1624] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.330742][ T1624] bond0 (unregistering): Released all slaves [ 299.469561][ T1624] hsr_slave_0: left promiscuous mode [ 299.505546][ T1624] hsr_slave_1: left promiscuous mode [ 299.518884][ T1624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.526347][ T1624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.549921][ T1624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.557406][ T1624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.568039][ T1624] veth1_macvtap: left promiscuous mode [ 299.573602][ T1624] veth0_macvtap: left promiscuous mode [ 299.579216][ T1624] veth1_vlan: left promiscuous mode [ 299.585078][ T1624] veth0_vlan: left promiscuous mode [ 299.678834][ T1624] team0 (unregistering): Port device team_slave_1 removed [ 299.698272][ T1624] team0 (unregistering): Port device team_slave_0 removed [ 299.706409][T12489] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 299.712999][T12489] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 299.720638][T12489] vhci_hcd vhci_hcd.0: Device attached [ 299.735114][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3264'. [ 299.802258][T12490] vhci_hcd: connection closed [ 299.803290][ T31] vhci_hcd vhci_hcd.0: stop threads [ 299.813257][ T31] vhci_hcd vhci_hcd.0: release socket [ 299.818818][ T31] vhci_hcd vhci_hcd.0: disconnect device [ 299.826661][T12444] chnl_net:caif_netlink_parms(): no params data found [ 299.871236][T12444] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.878469][T12444] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.886491][T12444] bridge_slave_0: entered allmulticast mode [ 299.893447][T12444] bridge_slave_0: entered promiscuous mode [ 299.900505][T12444] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.907626][T12444] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.915452][T12444] bridge_slave_1: entered allmulticast mode [ 299.922124][T12444] bridge_slave_1: entered promiscuous mode [ 299.953483][T12444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.964423][T12444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.008079][T12444] team0: Port device team_slave_0 added [ 300.018217][T12444] team0: Port device team_slave_1 added [ 300.053594][T12444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.060643][T12444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.086620][T12444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.096670][T12512] loop2: detected capacity change from 0 to 7 [ 300.098746][T12444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.110696][T12444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.136750][T12444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.167231][T12444] hsr_slave_0: entered promiscuous mode [ 300.173445][T12444] hsr_slave_1: entered promiscuous mode [ 300.177079][T12518] loop5: detected capacity change from 0 to 128 [ 300.255463][T12444] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 300.264756][T12444] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 300.274352][T12444] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 300.288150][T12444] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 300.306958][T12444] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.314147][T12444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.321509][T12444] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.328653][T12444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.368904][T12444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.382091][ T1624] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.390343][ T1624] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.404466][T12444] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.415260][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.422381][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.434307][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.441472][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.511606][T12444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.592948][T12555] loop2: detected capacity change from 0 to 7 [ 300.634104][T12444] veth0_vlan: entered promiscuous mode [ 300.643242][T12444] veth1_vlan: entered promiscuous mode [ 300.643953][T12562] 9pnet_virtio: no channels available for device syz [ 300.662892][T12444] veth0_macvtap: entered promiscuous mode [ 300.670677][T12444] veth1_macvtap: entered promiscuous mode [ 300.685754][T12444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.700804][T12444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.714631][ T2580] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.724317][ T2580] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.734077][ T2580] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.752890][ T2580] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.869235][T12583] loop3: detected capacity change from 0 to 2048 [ 300.870676][T12585] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3294'. [ 300.894042][T12583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 300.923071][T12590] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3295'. [ 300.951736][T12583] loop3: detected capacity change from 2048 to 64 [ 300.975672][T11858] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.986427][T12586] kmmpd-loop3: attempt to access beyond end of device [ 300.986427][T12586] loop3: rw=8402945, sector=256, nr_sectors = 4 limit=64 [ 301.000220][T12586] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 301.657852][T12640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.724004][T12640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.759914][T12647] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3314'. [ 301.857531][T12617] chnl_net:caif_netlink_parms(): no params data found [ 301.908770][T12617] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.916040][T12617] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.935232][T12617] bridge_slave_0: entered allmulticast mode [ 301.942682][T12617] bridge_slave_0: entered promiscuous mode [ 301.953181][T12617] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.960293][T12617] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.968232][T12617] bridge_slave_1: entered allmulticast mode [ 301.974968][T12617] bridge_slave_1: entered promiscuous mode [ 302.024467][T12617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.083849][T12617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.116777][T12617] team0: Port device team_slave_0 added [ 302.126295][T12617] team0: Port device team_slave_1 added [ 302.144878][T12617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.151873][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.177832][T12617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.188544][ T29] audit: type=1400 audit(1765543616.452:12547): avc: denied { create } for pid=12624 comm="syz.4.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 302.191723][T12617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.208945][ T29] audit: type=1400 audit(1765543616.452:12548): avc: denied { write } for pid=12624 comm="syz.4.3309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 302.215976][T12617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.262105][T12617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.276592][T12625] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 302.310319][T12617] hsr_slave_0: entered promiscuous mode [ 302.316664][T12617] hsr_slave_1: entered promiscuous mode [ 302.322726][T12617] debugfs: 'hsr0' already exists in 'hsr' [ 302.328475][T12617] Cannot create hsr debugfs directory [ 302.334030][ T29] audit: type=1400 audit(1765543616.602:12549): avc: denied { listen } for pid=12669 comm="syz.6.3322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 302.443988][T12617] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 302.453598][T12617] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 302.463930][T12617] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 302.473561][T12617] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 302.494632][T12684] loop6: detected capacity change from 0 to 1024 [ 302.500572][T12617] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.508186][T12617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.515595][T12617] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.516476][T12684] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 302.522687][T12617] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.535246][T12684] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 302.558786][T12684] EXT4-fs (loop6): orphan cleanup on readonly fs [ 302.565871][T12684] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.3327: Freeing blocks not in datazone - block = 0, count = 4096 [ 302.576187][T12617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.582672][T12684] EXT4-fs (loop6): 1 orphan inode deleted [ 302.592204][T12684] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 302.604891][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.634543][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.643009][T12444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.663666][T12617] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.720852][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.727977][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.770076][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.777205][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.819870][T12617] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 302.830348][T12617] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.130673][T12617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.164228][T12720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.174464][T12721] loop2: detected capacity change from 0 to 7 [ 303.194330][T12720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.333669][T12617] veth0_vlan: entered promiscuous mode [ 303.345003][T12617] veth1_vlan: entered promiscuous mode [ 303.396748][T12617] veth0_macvtap: entered promiscuous mode [ 303.405675][T12617] veth1_macvtap: entered promiscuous mode [ 303.418762][T12617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.433352][T12617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.454686][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.487603][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.507733][T12747] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3344'. [ 303.523128][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.548719][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.620790][T12754] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3346'. [ 303.641370][T12759] loop2: detected capacity change from 0 to 7 [ 303.681331][T12765] netlink: 'syz.6.3351': attribute type 10 has an invalid length. [ 303.689307][T12765] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3351'. [ 303.698674][T12765] dummy0: entered promiscuous mode [ 303.723019][T12765] bridge0: port 3(dummy0) entered blocking state [ 303.729523][T12765] bridge0: port 3(dummy0) entered disabled state [ 303.737149][T12765] dummy0: entered allmulticast mode [ 303.744238][T12765] bridge0: port 3(dummy0) entered blocking state [ 303.750868][T12765] bridge0: port 3(dummy0) entered forwarding state [ 303.783180][T12777] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3357'. [ 303.922635][T12781] serio: Serial port ptm0 [ 304.039350][T12786] netlink: 56 bytes leftover after parsing attributes in process `syz.5.3360'. [ 304.234660][T12788] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 304.335011][T12801] netlink: 'syz.5.3367': attribute type 10 has an invalid length. [ 304.342999][T12801] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3367'. [ 304.368289][T12804] loop2: detected capacity change from 0 to 7 [ 304.400984][T12801] dummy0: entered promiscuous mode [ 304.411730][T12808] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3370'. [ 304.422361][T12801] bridge0: port 3(dummy0) entered blocking state [ 304.428765][T12801] bridge0: port 3(dummy0) entered disabled state [ 304.436084][T12801] dummy0: entered allmulticast mode [ 304.442335][T12801] bridge0: port 3(dummy0) entered blocking state [ 304.448756][T12801] bridge0: port 3(dummy0) entered forwarding state [ 304.484417][T12814] loop4: detected capacity change from 0 to 128 [ 304.495481][T12818] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12818 comm=syz.6.3374 [ 304.512536][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3374'. [ 304.584394][T12830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3381'. [ 304.647926][ T29] audit: type=1400 audit(1765543618.922:12550): avc: denied { setopt } for pid=12842 comm="syz.0.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 304.708835][ T29] audit: type=1400 audit(1765543618.982:12551): avc: denied { unmount } for pid=12029 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 304.911560][ T29] audit: type=1400 audit(1765543619.182:12552): avc: denied { read write } for pid=12886 comm="syz.7.3407" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 304.935122][ T29] audit: type=1400 audit(1765543619.182:12553): avc: denied { open } for pid=12886 comm="syz.7.3407" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 304.958737][ T29] audit: type=1400 audit(1765543619.182:12554): avc: denied { ioctl } for pid=12886 comm="syz.7.3407" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 305.212282][T12920] 9pnet_virtio: no channels available for device syz [ 305.222092][T12916] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 305.639830][T12949] syzkaller0: entered promiscuous mode [ 305.645442][T12949] syzkaller0: entered allmulticast mode [ 305.763215][ T29] audit: type=1400 audit(1765543620.042:12555): avc: denied { unmount } for pid=12164 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 306.027194][T12993] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 306.041830][T12993] dvmrp1: linktype set to 774 [ 306.052162][T12993] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 306.057672][T12993] dvmrp1: persist enabled [ 306.072344][T12997] syzkaller0: entered promiscuous mode [ 306.078084][T12997] syzkaller0: entered allmulticast mode [ 306.103776][ T29] audit: type=1400 audit(1765543620.382:12556): avc: denied { create } for pid=13007 comm="syz.7.3464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 306.136635][ T29] audit: type=1400 audit(1765543620.402:12557): avc: denied { ioctl } for pid=13007 comm="syz.7.3464" path="socket:[62426]" dev="sockfs" ino=62426 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 306.211509][ T29] audit: type=1400 audit(1765543620.482:12558): avc: denied { relabelfrom } for pid=13021 comm="syz.0.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 306.231588][ T29] audit: type=1400 audit(1765543620.482:12559): avc: denied { relabelto } for pid=13021 comm="syz.0.3471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 306.320100][T13022] syzkaller0: create flow: hash 522904403 index 1 [ 306.349368][T13021] syzkaller0: delete flow: hash 522904403 index 1 [ 306.565478][T13090] 9p: Bad value for 'wfdno' [ 306.658002][T13107] loop2: detected capacity change from 0 to 7 [ 306.688574][T13112] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 306.730497][ T1088] Bluetooth: hci0: Frame reassembly failed (-84) [ 306.738165][T13123] Bluetooth: hci0: Frame reassembly failed (-84) [ 306.771711][T13128] tmpfs: Unsupported parameter 'huge' [ 306.846339][T13140] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 4080 [ 306.854064][T13144] netlink: 'syz.6.3530': attribute type 10 has an invalid length. [ 306.855184][T13142] loop2: detected capacity change from 0 to 7 [ 306.862476][T13144] __nla_validate_parse: 5 callbacks suppressed [ 306.862548][T13144] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3530'. [ 307.123335][T13193] 9p: Bad value for 'rfdno' [ 307.175664][T13201] loop0: detected capacity change from 0 to 2048 [ 307.207933][T13210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13210 comm=syz.5.3559 [ 307.209662][T13201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.235440][T13210] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3559'. [ 307.257160][T12029] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.278184][T13212] syzkaller0: entered promiscuous mode [ 307.283745][T13212] syzkaller0: entered allmulticast mode [ 307.521013][T13258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.538431][T13258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.632413][T13276] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 307.638421][T13276] dvmrp1: linktype set to 774 [ 307.830369][T13293] loop2: detected capacity change from 0 to 7 [ 307.855614][T13295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13295 comm=syz.4.3600 [ 307.871478][T13295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3600'. [ 307.935925][T13296] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 307.990504][T13306] syzkaller0: entered promiscuous mode [ 307.996152][T13306] syzkaller0: entered allmulticast mode [ 308.144772][T13314] syzkaller0: entered promiscuous mode [ 308.150388][T13314] syzkaller0: entered allmulticast mode [ 308.286406][T13331] loop2: detected capacity change from 0 to 7 [ 308.369173][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3620'. [ 308.506254][T13347] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3624'. [ 308.573563][T13360] netlink: 'syz.0.3630': attribute type 10 has an invalid length. [ 308.581490][T13360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3630'. [ 308.592079][T13360] dummy0: entered promiscuous mode [ 308.609803][T13360] bridge0: port 3(dummy0) entered blocking state [ 308.616480][T13360] bridge0: port 3(dummy0) entered disabled state [ 308.633309][T13360] dummy0: entered allmulticast mode [ 308.639355][T13360] bridge0: port 3(dummy0) entered blocking state [ 308.645805][T13360] bridge0: port 3(dummy0) entered forwarding state [ 308.693386][T13375] loop2: detected capacity change from 0 to 7 [ 308.720308][T13366] syzkaller0: entered promiscuous mode [ 308.725880][T13366] syzkaller0: entered allmulticast mode [ 308.739401][T13383] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 308.746596][ T5365] Bluetooth: hci0: command 0x1003 tx timeout [ 308.749692][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 308.833380][T13396] loop5: detected capacity change from 0 to 2048 [ 308.864347][T13396] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.941733][T13396] loop5: detected capacity change from 2048 to 64 [ 308.949796][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3649'. [ 308.996691][T13425] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3658'. [ 309.006030][T13422] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 309.016589][T12164] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.039422][T13402] kmmpd-loop5: attempt to access beyond end of device [ 309.039422][T13402] loop5: rw=8402945, sector=256, nr_sectors = 4 limit=64 [ 309.053203][T13402] Buffer I/O error on dev loop5, logical block 64, lost sync page write [ 309.144173][T13432] syzkaller0: entered promiscuous mode [ 309.149829][T13432] syzkaller0: entered allmulticast mode [ 309.152105][T13447] loop4: detected capacity change from 0 to 2048 [ 309.165873][T13434] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 309.183168][T13447] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.229574][T13455] bond0: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 309.265222][T13457] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3673'. [ 309.321930][T13466] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3677'. [ 309.369066][T13475] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 309.425324][T11665] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.437710][ T1899] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.514409][ T1899] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.596446][ T1899] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.666223][ T1899] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.738902][T13481] chnl_net:caif_netlink_parms(): no params data found [ 309.804539][ T1899] dummy0: left allmulticast mode [ 309.809912][ T1899] bridge0: port 3(dummy0) entered disabled state [ 309.817349][ T1899] bridge_slave_1: left allmulticast mode [ 309.823076][ T1899] bridge_slave_1: left promiscuous mode [ 309.828837][ T1899] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.837408][ T1899] bridge_slave_0: left allmulticast mode [ 309.843143][ T1899] bridge_slave_0: left promiscuous mode [ 309.848898][ T1899] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.934456][ T1899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.944702][ T1899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.954822][ T1899] bond0 (unregistering): (slave veth0_virt_wifi): Releasing backup interface [ 309.964942][ T1899] bond0 (unregistering): Released all slaves [ 309.999062][T13534] netlink: 'syz.0.3700': attribute type 10 has an invalid length. [ 310.010800][T13481] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.018051][T13481] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.026740][T13481] bridge_slave_0: entered allmulticast mode [ 310.031697][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 310.033503][T13481] bridge_slave_0: entered promiscuous mode [ 310.049803][T13481] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.057000][T13481] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.064359][T13481] bridge_slave_1: entered allmulticast mode [ 310.070918][T13481] bridge_slave_1: entered promiscuous mode [ 310.085279][ T1899] hsr_slave_0: left promiscuous mode [ 310.091224][ T1899] hsr_slave_1: left promiscuous mode [ 310.097271][ T1899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.104789][ T1899] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.112502][ T1899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.119924][ T1899] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.132048][ T1899] veth1_macvtap: left promiscuous mode [ 310.137625][ T1899] veth0_macvtap: left allmulticast mode [ 310.143246][ T1899] veth0_macvtap: left promiscuous mode [ 310.148786][ T1899] veth1_vlan: left promiscuous mode [ 310.154127][ T1899] veth0_vlan: left promiscuous mode [ 310.229000][ T1899] team0 (unregistering): Port device team_slave_1 removed [ 310.240479][ T1899] team0 (unregistering): Port device team_slave_0 removed [ 310.296318][T13481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.324055][T13481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.334583][T13556] netlink: 'syz.0.3710': attribute type 10 has an invalid length. [ 310.359633][T13481] team0: Port device team_slave_0 added [ 310.369576][T13498] chnl_net:caif_netlink_parms(): no params data found [ 310.391032][T13481] team0: Port device team_slave_1 added [ 310.420337][T13481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.427384][T13481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.453395][T13481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.472288][T13481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.479530][T13481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.505652][T13481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.549415][T13481] hsr_slave_0: entered promiscuous mode [ 310.558204][T13481] hsr_slave_1: entered promiscuous mode [ 310.558902][T13576] loop2: detected capacity change from 0 to 7 [ 310.564244][T13481] debugfs: 'hsr0' already exists in 'hsr' [ 310.575752][T13481] Cannot create hsr debugfs directory [ 310.615835][T13498] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.623002][T13498] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.630450][T13498] bridge_slave_0: entered allmulticast mode [ 310.637075][T13498] bridge_slave_0: entered promiscuous mode [ 310.649547][T13498] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.656673][T13498] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.665324][T13498] bridge_slave_1: entered allmulticast mode [ 310.673066][T13498] bridge_slave_1: entered promiscuous mode [ 310.704975][T13498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.718834][T13498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.765040][T13498] team0: Port device team_slave_0 added [ 310.780016][T13498] team0: Port device team_slave_1 added [ 310.830276][T13481] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 310.842240][T13498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.849218][T13498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.875202][T13498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.887202][T13481] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 310.902510][T13481] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 310.916572][T13481] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 310.926512][T13498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.933644][T13498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.959795][T13498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.974777][T13603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.002036][T13498] hsr_slave_0: entered promiscuous mode [ 311.008077][T13498] hsr_slave_1: entered promiscuous mode [ 311.014322][T13498] debugfs: 'hsr0' already exists in 'hsr' [ 311.020053][T13498] Cannot create hsr debugfs directory [ 311.074839][T12617] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.087706][T13610] kmmpd-loop7: attempt to access beyond end of device [ 311.087706][T13610] loop7: rw=8402945, sector=256, nr_sectors = 4 limit=64 [ 311.097890][T13481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.101581][T13610] Buffer I/O error on dev loop7, logical block 64, lost sync page write [ 311.124979][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.144197][T13481] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.177409][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.184529][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.194766][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.201866][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.214927][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.261119][T13498] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 311.296367][T13498] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 311.310759][T13498] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 311.324052][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.340880][T13498] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 311.385642][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.412530][T13481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.484203][T13498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.511725][T13498] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.523175][ T1899] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.530330][ T1899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.539748][ T12] dummy0: left allmulticast mode [ 311.545160][ T12] bridge0: port 3(dummy0) entered disabled state [ 311.552367][ T12] bridge_slave_1: left allmulticast mode [ 311.558065][ T12] bridge_slave_1: left promiscuous mode [ 311.563792][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.572295][ T12] bridge_slave_0: left allmulticast mode [ 311.577931][ T12] bridge_slave_0: left promiscuous mode [ 311.583605][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.664142][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.674129][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.684158][ T12] bond0 (unregistering): (slave veth0_virt_wifi): Releasing backup interface [ 311.694526][ T12] bond0 (unregistering): Released all slaves [ 311.715810][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.722921][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.756783][ T12] hsr_slave_0: left promiscuous mode [ 311.762662][ T12] hsr_slave_1: left promiscuous mode [ 311.768236][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.775717][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.783678][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.791109][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.801992][ T12] veth1_macvtap: left promiscuous mode [ 311.807541][ T12] veth0_macvtap: left promiscuous mode [ 311.813141][ T12] veth1_vlan: left promiscuous mode [ 311.818407][ T12] veth0_vlan: left promiscuous mode [ 311.884378][ T12] team0 (unregistering): Port device team_slave_1 removed [ 311.894543][ T12] team0 (unregistering): Port device team_slave_0 removed [ 312.005326][T13481] veth0_vlan: entered promiscuous mode [ 312.016855][T13638] chnl_net:caif_netlink_parms(): no params data found [ 312.062807][T13481] veth1_vlan: entered promiscuous mode [ 312.085652][T13638] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.092951][T13638] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.100551][T13638] bridge_slave_0: entered allmulticast mode [ 312.107693][T13638] bridge_slave_0: entered promiscuous mode [ 312.115914][T13638] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.123155][T13638] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.130861][T13638] bridge_slave_1: entered allmulticast mode [ 312.138356][T13638] bridge_slave_1: entered promiscuous mode [ 312.160018][T13638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.173211][T13638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.185343][T13498] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.211960][T13638] team0: Port device team_slave_0 added [ 312.225093][T13638] team0: Port device team_slave_1 added [ 312.231981][T13481] veth0_macvtap: entered promiscuous mode [ 312.252653][T13638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 312.259854][T13638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.285926][T13638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 312.301093][T13481] veth1_macvtap: entered promiscuous mode [ 312.309226][T13638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.316294][T13638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.342379][T13638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.375526][T13638] hsr_slave_0: entered promiscuous mode [ 312.381660][T13638] hsr_slave_1: entered promiscuous mode [ 312.387506][T13638] debugfs: 'hsr0' already exists in 'hsr' [ 312.393365][T13638] Cannot create hsr debugfs directory [ 312.412121][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.425584][T13481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.445765][T13481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.466658][ T2215] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.479083][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.499216][ T2215] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.518055][ T2215] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.536852][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.548484][ T2215] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.574692][T13638] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.588726][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.608954][T13498] veth0_vlan: entered promiscuous mode [ 312.623681][T13498] veth1_vlan: entered promiscuous mode [ 312.635323][T13638] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.660330][T13498] veth0_macvtap: entered promiscuous mode [ 312.670063][T13498] veth1_macvtap: entered promiscuous mode [ 312.695446][T13701] set_capacity_and_notify: 2 callbacks suppressed [ 312.695461][T13701] loop2: detected capacity change from 0 to 7 [ 312.697805][T13498] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.725020][T13638] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.738318][T13498] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.744930][T13703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13703 comm=syz.8.3745 [ 312.764615][ T1899] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.776144][T13638] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.790718][ T1899] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.799779][ T12] bridge_slave_1: left allmulticast mode [ 312.805582][ T12] bridge_slave_1: left promiscuous mode [ 312.811227][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.819489][ T12] bridge_slave_0: left allmulticast mode [ 312.825187][ T12] bridge_slave_0: left promiscuous mode [ 312.831094][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.954168][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.964248][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.974156][ T12] bond0 (unregistering): (slave veth0_virt_wifi): Releasing backup interface [ 312.984344][ T12] bond0 (unregistering): Released all slaves [ 312.996067][ T1899] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.004925][ T1899] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.047742][ T12] hsr_slave_0: left promiscuous mode [ 313.055561][ T12] hsr_slave_1: left promiscuous mode [ 313.061263][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.068839][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.076730][T13717] netlink: 'syz.0.3749': attribute type 10 has an invalid length. [ 313.084632][T13717] __nla_validate_parse: 3 callbacks suppressed [ 313.084739][T13717] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3749'. [ 313.100517][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.108051][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.118694][ T12] veth1_macvtap: left promiscuous mode [ 313.124230][ T12] veth0_macvtap: left promiscuous mode [ 313.129921][ T12] veth1_vlan: left promiscuous mode [ 313.135557][ T12] veth0_vlan: left promiscuous mode [ 313.201261][ T12] team0 (unregistering): Port device team_slave_1 removed [ 313.213456][ T12] team0 (unregistering): Port device team_slave_0 removed [ 313.258939][T13638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 313.269471][T13638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 313.290208][T13638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 313.321999][T13638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 313.342300][T13727] loop2: detected capacity change from 0 to 7 [ 313.361159][T13733] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13733 comm=syz.8.3754 [ 313.446582][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 313.446600][ T29] audit: type=1400 audit(1765543627.722:12565): avc: denied { mount } for pid=13748 comm="syz.6.3761" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 313.462645][T13638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.503478][T13752] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 313.529314][T13638] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.534285][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3762'. [ 313.558645][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.565783][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.588587][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.595779][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.682642][T13775] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13775 comm=syz.6.3769 [ 313.695853][T13775] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3769'. [ 313.745134][T13638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.843633][T13802] loop2: detected capacity change from 0 to 7 [ 313.849702][T13638] veth0_vlan: entered promiscuous mode [ 313.869337][T13638] veth1_vlan: entered promiscuous mode [ 313.893642][T13638] veth0_macvtap: entered promiscuous mode [ 313.907298][T13638] veth1_macvtap: entered promiscuous mode [ 313.919843][T13638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.932058][T13638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.944316][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.967979][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.986159][ T1624] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.998578][ T1624] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.192206][T13844] tipc: Started in network mode [ 314.197178][T13844] tipc: Node identity 84e, cluster identity 4711 [ 314.203637][T13844] tipc: Node number set to 2126 [ 314.340992][T13850] syzkaller0: entered promiscuous mode [ 314.346610][T13850] syzkaller0: entered allmulticast mode [ 314.731300][T13867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13867 comm=syz.8.3808 [ 314.753768][T13867] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3808'. [ 314.837470][T13890] netlink: 'syz.9.3817': attribute type 10 has an invalid length. [ 314.845595][T13890] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3817'. [ 314.855559][T13890] dummy0: entered promiscuous mode [ 314.861614][T13890] bridge0: port 3(dummy0) entered blocking state [ 314.868059][T13890] bridge0: port 3(dummy0) entered disabled state [ 314.874820][T13890] dummy0: entered allmulticast mode [ 314.881181][T13890] bridge0: port 3(dummy0) entered blocking state [ 314.887619][T13890] bridge0: port 3(dummy0) entered forwarding state [ 314.933643][T13906] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3823'. [ 315.152073][T13930] loop2: detected capacity change from 0 to 7 [ 315.179683][T13934] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3835'. [ 315.321610][T13957] loop2: detected capacity change from 0 to 7 [ 315.395259][T13972] netlink: 40 bytes leftover after parsing attributes in process `syz.9.3853'. [ 315.548620][T14001] netlink: 'syz.0.3866': attribute type 10 has an invalid length. [ 315.556668][T14001] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3866'. [ 315.659836][T14011] loop0: detected capacity change from 0 to 1024 [ 315.683076][T14011] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 315.695258][T14011] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 315.715289][T14011] EXT4-fs (loop0): orphan cleanup on readonly fs [ 315.722228][T14011] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.3871: Freeing blocks not in datazone - block = 0, count = 4096 [ 315.737701][T14011] EXT4-fs (loop0): 1 orphan inode deleted [ 315.739507][T14018] syzkaller0: entered promiscuous mode [ 315.749044][T14018] syzkaller0: entered allmulticast mode [ 315.752246][T14011] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 315.783370][T14023] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3876'. [ 315.818723][T12029] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.952281][T14046] netlink: 'syz.8.3887': attribute type 10 has an invalid length. [ 315.976017][T14046] dummy0: entered promiscuous mode [ 315.983572][T14046] bridge0: port 3(dummy0) entered blocking state [ 315.990287][T14046] bridge0: port 3(dummy0) entered disabled state [ 316.003167][T14046] dummy0: entered allmulticast mode [ 316.009188][T14046] bridge0: port 3(dummy0) entered blocking state [ 316.015625][T14046] bridge0: port 3(dummy0) entered forwarding state [ 316.063334][T14059] loop2: detected capacity change from 0 to 7 [ 316.547005][T14127] syzkaller0: entered promiscuous mode [ 316.552542][T14127] syzkaller0: entered allmulticast mode [ 316.992074][T14156] netlink: 'syz.9.3935': attribute type 10 has an invalid length. [ 317.021805][T14160] loop2: detected capacity change from 0 to 7 [ 317.287708][T14192] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 317.450877][ T2580] syzkaller0: tun_net_xmit 76 [ 317.455741][ T2580] syzkaller0: tun_net_xmit 48 [ 317.681869][T14230] loop2: detected capacity change from 0 to 7 [ 318.399984][T14293] __nla_validate_parse: 3 callbacks suppressed [ 318.400002][T14293] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3994'. [ 319.333472][T14352] syzkaller0: entered promiscuous mode [ 319.339049][T14352] syzkaller0: entered allmulticast mode [ 320.468364][T14404] loop2: detected capacity change from 0 to 7 [ 320.765993][T14442] loop6: detected capacity change from 0 to 1024 [ 320.776363][T14442] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 320.787603][T14442] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 320.796050][T14442] EXT4-fs (loop6): orphan cleanup on readonly fs [ 320.803046][T14442] EXT4-fs error (device loop6): ext4_free_blocks:6728: comm syz.6.4057: Freeing blocks not in datazone - block = 0, count = 4096 [ 320.816964][T14442] EXT4-fs (loop6): 1 orphan inode deleted [ 320.823716][T14442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 320.911952][T12444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.176489][ T29] audit: type=1400 audit(1765543635.452:12566): avc: denied { map } for pid=14472 comm="syz.6.4070" path="socket:[69477]" dev="sockfs" ino=69477 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 321.471881][T14494] loop2: detected capacity change from 0 to 7 [ 321.532121][T14506] syzkaller0: entered promiscuous mode [ 321.537641][T14506] syzkaller0: entered allmulticast mode [ 321.845371][T14548] loop2: detected capacity change from 0 to 7 [ 322.071810][T14574] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 322.129055][T14584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14584 comm=syz.0.4120 [ 322.166701][T14588] syzkaller0: entered promiscuous mode [ 322.172280][T14588] syzkaller0: entered allmulticast mode [ 322.604444][T14614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14614 comm=syz.0.4132 [ 322.677807][T14620] syzkaller0: entered promiscuous mode [ 322.683356][T14620] syzkaller0: entered allmulticast mode [ 322.758003][T14622] netlink: 'syz.0.4136': attribute type 4 has an invalid length. [ 322.842982][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4140'. [ 322.890159][T14638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14638 comm=syz.8.4143 [ 322.938007][T14642] loop2: detected capacity change from 0 to 7 [ 323.192246][T14667] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 323.528546][T14699] loop2: detected capacity change from 0 to 1024 [ 323.555861][T14699] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 323.611456][T14699] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 323.621354][T14701] syzkaller0: entered promiscuous mode [ 323.627136][T14701] syzkaller0: entered allmulticast mode [ 323.628613][T14699] EXT4-fs (loop2): orphan cleanup on readonly fs [ 323.640230][T14699] EXT4-fs error (device loop2): ext4_free_blocks:6728: comm syz.2.4167: Freeing blocks not in datazone - block = 0, count = 4096 [ 323.654773][T14699] EXT4-fs (loop2): 1 orphan inode deleted [ 323.660998][T14699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 323.684951][T13638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.798047][ T29] audit: type=1400 audit(1765543638.072:12567): avc: denied { append } for pid=14724 comm="syz.9.4178" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 323.837080][T14727] loop2: detected capacity change from 0 to 7 [ 323.889915][T14733] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4182'. [ 324.109876][T14765] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14765 comm=syz.0.4197 [ 324.180202][T14772] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 324.265610][T14773] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 324.593259][T14778] program syz.2.4202 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 324.928538][T14799] syzkaller0: entered promiscuous mode [ 324.934102][T14799] syzkaller0: entered allmulticast mode [ 324.966872][T14803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14803 comm=syz.6.4212 [ 325.013433][T14810] program syz.8.4214 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 325.041920][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4216'. [ 325.130027][T14827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14827 comm=syz.0.4223 [ 325.206422][T14829] syzkaller0: entered promiscuous mode [ 325.212118][T14829] syzkaller0: entered allmulticast mode [ 325.303585][T14831] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 325.524362][T14838] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 325.688177][T14844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4230'. [ 325.786769][T14852] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14852 comm=syz.2.4234 [ 325.828776][T14854] syzkaller0: entered promiscuous mode [ 325.834366][T14854] syzkaller0: entered allmulticast mode [ 326.052744][T14874] loop6: detected capacity change from 0 to 8192 [ 326.224261][T14899] 9p: Bad value for 'rfdno' [ 326.318450][T14902] loop9: detected capacity change from 0 to 8192 [ 326.589007][T14931] tc_dump_action: action bad kind [ 326.638245][T14937] syzkaller0: entered promiscuous mode [ 326.643912][T14937] syzkaller0: entered allmulticast mode [ 326.737685][T14944] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 326.770565][T14949] syzkaller0: entered promiscuous mode [ 326.776216][T14949] syzkaller0: entered allmulticast mode [ 326.920895][T14956] tipc: Started in network mode [ 326.925966][T14956] tipc: Node identity 84e, cluster identity 4711 [ 326.932421][T14956] tipc: Node number set to 2126 [ 326.952749][T14958] tc_dump_action: action bad kind [ 327.020276][T14966] syzkaller0: entered promiscuous mode [ 327.025891][T14966] syzkaller0: entered allmulticast mode [ 327.156794][T14974] syzkaller0: entered promiscuous mode [ 327.160662][T14976] loop8: detected capacity change from 0 to 1024 [ 327.162511][T14974] syzkaller0: entered allmulticast mode [ 327.170374][T14976] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 327.185284][T14976] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 327.193562][T14976] EXT4-fs (loop8): orphan cleanup on readonly fs [ 327.200461][T14976] EXT4-fs error (device loop8): ext4_free_blocks:6728: comm syz.8.4293: Freeing blocks not in datazone - block = 0, count = 4096 [ 327.214175][T14976] EXT4-fs (loop8): 1 orphan inode deleted [ 327.220431][T14976] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.244119][T13481] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.350068][T14992] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14992 comm=syz.2.4300 [ 327.427067][T15002] loop0: detected capacity change from 0 to 1024 [ 327.439309][T15002] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 327.451109][T15002] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 327.466834][T15002] EXT4-fs (loop0): orphan cleanup on readonly fs [ 327.481901][T15002] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.4304: Freeing blocks not in datazone - block = 0, count = 4096 [ 327.501828][T15002] EXT4-fs (loop0): 1 orphan inode deleted [ 327.512647][T15002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.539856][T12029] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.560582][T15010] tipc: Started in network mode [ 327.565499][T15010] tipc: Node identity 84e, cluster identity 4711 [ 327.571883][T15010] tipc: Node number set to 2126 [ 327.609324][T15014] syzkaller0: entered promiscuous mode [ 327.614887][T15014] syzkaller0: entered allmulticast mode [ 327.681776][T15027] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4314'. [ 327.828461][T15051] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4326'. [ 327.859930][T15055] syzkaller0: entered promiscuous mode [ 327.865489][T15055] syzkaller0: entered allmulticast mode [ 327.919869][ T29] audit: type=1400 audit(1765543642.192:12568): avc: denied { recv } for pid=0 comm="swapper/0" saddr=10.128.0.163 src=38302 daddr=10.128.1.83 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 328.084716][T15085] syzkaller0: entered promiscuous mode [ 328.090261][T15085] syzkaller0: entered allmulticast mode [ 328.490814][T15164] syzkaller0: entered promiscuous mode [ 328.496423][T15164] syzkaller0: entered allmulticast mode [ 328.535489][T15167] loop8: detected capacity change from 0 to 8192 [ 328.637041][T15181] 9p: Bad value for 'wfdno' [ 328.847103][T15214] loop8: detected capacity change from 0 to 8192 [ 329.137810][T15231] program syz.2.4412 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 329.200120][ T29] audit: type=1400 audit(1765543643.472:12569): avc: denied { write } for pid=15234 comm="syz.2.4414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 329.220122][ T29] audit: type=1400 audit(1765543643.472:12570): avc: denied { read } for pid=15234 comm="syz.2.4414" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 329.648508][T15253] loop0: detected capacity change from 0 to 1024 [ 329.656693][T15253] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 329.669756][T15253] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 329.681074][T15253] EXT4-fs (loop0): orphan cleanup on readonly fs [ 329.689503][T15253] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.4422: Freeing blocks not in datazone - block = 0, count = 4096 [ 329.703896][T15253] EXT4-fs (loop0): 1 orphan inode deleted [ 329.710463][T15253] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 329.734197][T12029] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.132775][T15308] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 330.540886][T15319] 9p: Bad value for 'wfdno' [ 330.735384][T15343] 9p: Bad value for 'wfdno' [ 330.778393][T15347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15347 comm=syz.0.4460 [ 330.851027][T15353] 9p: Bad value for 'wfdno' [ 331.036651][T15380] 9p: Bad value for 'wfdno' [ 331.560590][T15402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15402 comm=syz.9.4484 [ 331.725999][T15412] loop8: detected capacity change from 0 to 512 [ 331.739143][T15412] FAT-fs (loop8): error, clusters badly computed (1 != 0) [ 331.792878][T15419] syzkaller0: entered promiscuous mode [ 331.798387][T15419] syzkaller0: entered allmulticast mode [ 331.806981][T15418] syzkaller0: entered promiscuous mode [ 331.812537][T15418] syzkaller0: entered allmulticast mode [ 331.847754][T15427] loop2: detected capacity change from 0 to 512 [ 331.926548][T15437] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15437 comm=syz.9.4500 [ 331.997949][ T29] audit: type=1400 audit(1765543646.272:12571): avc: denied { write } for pid=15443 comm="syz.9.4504" lport=50627 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 332.024361][ T29] audit: type=1400 audit(1765543646.272:12572): avc: denied { getopt } for pid=15443 comm="syz.9.4504" lport=50627 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 332.065965][T15449] 9p: Bad value for 'rfdno' [ 332.114892][T15457] syzkaller0: entered promiscuous mode [ 332.120424][T15457] syzkaller0: entered allmulticast mode [ 332.174149][T15467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15467 comm=syz.2.4514 [ 332.253333][T15478] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4519'. [ 332.296589][T15485] loop0: detected capacity change from 0 to 128 [ 332.369653][T15500] 9p: Bad value for 'wfdno' [ 332.439618][T15494] loop9: detected capacity change from 0 to 8192 [ 332.550674][T15526] loop9: detected capacity change from 0 to 128 [ 332.795687][T15566] loop8: detected capacity change from 0 to 512 [ 332.936570][T15581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15581 comm=syz.8.4565 [ 333.214244][T15601] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4575'. [ 333.242634][T15605] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15605 comm=syz.2.4577 [ 333.275311][T15611] 9p: Bad value for 'wfdno' [ 333.343075][T15615] loop2: detected capacity change from 0 to 8192 [ 333.440678][T15623] syzkaller0: entered promiscuous mode [ 333.446272][T15623] syzkaller0: entered allmulticast mode [ 333.453871][T15625] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4587'. [ 333.598515][T15638] loop9: detected capacity change from 0 to 512 [ 333.663890][ T29] audit: type=1400 audit(1765543647.942:12573): avc: denied { accept } for pid=15643 comm="syz.6.4596" lport=59464 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 333.716351][ T29] audit: type=1400 audit(1765543647.962:12574): avc: denied { setopt } for pid=15643 comm="syz.6.4596" lport=59464 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 333.741101][T15642] loop0: detected capacity change from 0 to 8192 [ 334.019132][T15687] 9pnet_fd: Insufficient options for proto=fd [ 334.113385][T15694] loop6: detected capacity change from 0 to 8192 [ 334.193555][T15705] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 334.200192][T15705] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 334.207748][T15705] vhci_hcd vhci_hcd.0: Device attached [ 334.219378][T15705] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4622'. [ 334.261596][T15706] vhci_hcd: connection closed [ 334.261734][ T2541] vhci_hcd vhci_hcd.6: stop threads [ 334.271777][ T2541] vhci_hcd vhci_hcd.6: release socket [ 334.277170][ T2541] vhci_hcd vhci_hcd.6: disconnect device [ 334.876490][T15741] syzkaller0: entered promiscuous mode [ 334.882076][T15741] syzkaller0: entered allmulticast mode [ 334.967989][T15757] 9pnet_fd: Insufficient options for proto=fd [ 335.224976][T15785] syzkaller0: entered promiscuous mode [ 335.230525][T15785] syzkaller0: entered allmulticast mode [ 335.670271][T15820] syzkaller0: entered promiscuous mode [ 335.675856][T15820] syzkaller0: entered allmulticast mode [ 335.792952][T15829] 9p: Bad value for 'rfdno' [ 335.849124][T15838] tipc: Started in network mode [ 335.854109][T15838] tipc: Node identity 84e, cluster identity 4711 [ 335.860452][T15838] tipc: Node number set to 2126 [ 335.885532][ T29] audit: type=1400 audit(1765543650.162:12575): avc: denied { getopt } for pid=15843 comm="syz.6.4679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 335.958091][T15849] syzkaller0: entered promiscuous mode [ 335.963675][T15849] syzkaller0: entered allmulticast mode [ 336.050213][T15863] netlink: 'syz.6.4687': attribute type 1 has an invalid length. [ 336.058840][T15863] netlink: 'syz.6.4687': attribute type 1 has an invalid length. [ 336.245619][T15891] syzkaller0: entered promiscuous mode [ 336.251149][T15891] syzkaller0: entered allmulticast mode [ 336.577403][T15931] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 336.586126][T15931] FAT-fs (loop2): Filesystem has been set read-only [ 336.883011][T15963] syzkaller0: entered promiscuous mode [ 336.888572][T15963] syzkaller0: entered allmulticast mode [ 336.914292][T15965] set_capacity_and_notify: 4 callbacks suppressed [ 336.914306][T15965] loop0: detected capacity change from 0 to 164 [ 337.046062][T15978] syzkaller0: entered promiscuous mode [ 337.051776][T15978] syzkaller0: entered allmulticast mode [ 338.098955][T16032] loop2: detected capacity change from 0 to 512 [ 338.135641][T16034] 9p: Could not find request transport: fd0x0000000000000005 [ 338.524857][T16069] loop6: detected capacity change from 0 to 8192 [ 338.603202][T16075] loop6: detected capacity change from 0 to 128 [ 338.903959][T16090] loop9: detected capacity change from 0 to 512 [ 338.953421][T16091] loop0: detected capacity change from 0 to 8192 [ 339.202954][T16119] 9pnet_fd: Insufficient options for proto=fd [ 339.540842][T16125] syzkaller0: entered promiscuous mode [ 339.546406][T16125] syzkaller0: entered allmulticast mode [ 339.579069][T16127] loop9: detected capacity change from 0 to 8192 [ 339.670926][T16143] syzkaller0: entered promiscuous mode [ 339.677010][T16143] syzkaller0: entered allmulticast mode [ 339.785494][T16160] syzkaller0: entered promiscuous mode [ 339.791292][T16160] syzkaller0: entered allmulticast mode [ 339.929481][T16172] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4821'. [ 340.199882][T16198] syzkaller0: entered promiscuous mode [ 340.205537][T16198] syzkaller0: entered allmulticast mode [ 340.499463][T16214] 9pnet_fd: Insufficient options for proto=fd [ 340.696855][T16232] netlink: 'syz.9.4847': attribute type 17 has an invalid length. [ 340.729667][T16232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=16232 comm=syz.9.4847 [ 340.766212][T16232] netlink: 52 bytes leftover after parsing attributes in process `syz.9.4847'. [ 340.792448][T16232] bridge0: port 3(dummy0) entered disabled state [ 340.798900][T16232] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.806095][T16232] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.872701][T16238] syzkaller0: entered promiscuous mode [ 340.878380][T16238] syzkaller0: entered allmulticast mode [ 341.186504][T16254] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 341.327278][T16259] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 341.386237][T16260] loop8: detected capacity change from 0 to 128 [ 341.618755][T16266] syzkaller0: entered promiscuous mode [ 341.624388][T16266] syzkaller0: entered allmulticast mode [ 341.889927][T16301] syzkaller0: entered promiscuous mode [ 341.895500][T16301] syzkaller0: entered allmulticast mode [ 341.984561][T16321] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4887'. [ 342.055293][T16332] loop8: detected capacity change from 0 to 512 [ 342.222311][T16360] syzkaller0: entered promiscuous mode [ 342.227848][T16360] syzkaller0: entered allmulticast mode [ 342.797285][T16383] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4914'. [ 342.903818][T16402] loop2: detected capacity change from 0 to 256 [ 342.948571][T16410] loop9: detected capacity change from 0 to 256 [ 342.957911][T16412] loop2: detected capacity change from 0 to 512 [ 343.086566][T16431] loop8: detected capacity change from 0 to 256 [ 343.119366][T16437] loop2: detected capacity change from 0 to 256 [ 343.317929][T16458] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 343.324480][T16458] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 343.332056][T16458] vhci_hcd vhci_hcd.0: Device attached [ 343.340636][T16458] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4950'. [ 343.369324][T16459] vhci_hcd: connection closed [ 343.369586][ T37] vhci_hcd vhci_hcd.9: stop threads [ 343.379616][ T37] vhci_hcd vhci_hcd.9: release socket [ 343.385131][ T37] vhci_hcd vhci_hcd.9: disconnect device [ 343.520415][T16470] loop8: detected capacity change from 0 to 128 [ 343.527284][T16470] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 343.543425][ T29] audit: type=1400 audit(1765543657.822:12576): avc: denied { watch watch_reads } for pid=16469 comm="syz.8.4955" path="/257/file0/file0" dev="loop8" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 343.886694][ T29] audit: type=1326 audit(1765543658.162:12577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be8e6f749 code=0x7ffc0000 [ 343.910611][ T29] audit: type=1326 audit(1765543658.162:12578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be8e6f749 code=0x7ffc0000 [ 343.934319][ T29] audit: type=1326 audit(1765543658.162:12579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1be8e6f749 code=0x7ffc0000 [ 343.958460][ T29] audit: type=1326 audit(1765543658.162:12580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be8e6f749 code=0x7ffc0000 [ 343.982271][ T29] audit: type=1326 audit(1765543658.162:12581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be8e6f749 code=0x7ffc0000 [ 344.005898][ T29] audit: type=1326 audit(1765543658.162:12582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1be8e6f749 code=0x7ffc0000 [ 344.029554][ T29] audit: type=1326 audit(1765543658.162:12583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be8e6f749 code=0x7ffc0000 [ 344.053172][ T29] audit: type=1326 audit(1765543658.162:12584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f1be8e6f749 code=0x7ffc0000 [ 344.076898][ T29] audit: type=1326 audit(1765543658.162:12585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16474 comm="syz.9.4957" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1be8e6f749 code=0x7ffc0000 [ 344.185990][T16488] loop0: detected capacity change from 0 to 8192 [ 344.207350][T16494] loop9: detected capacity change from 0 to 256 [ 344.268155][T16504] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4971'. [ 344.278032][T16504] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4971'. [ 344.465608][T16521] loop0: detected capacity change from 0 to 256 [ 344.648077][ T3753] kernel read not supported for file /883/loginuid (pid: 3753 comm: kworker/1:14) [ 345.277310][T16582] syzkaller0: left promiscuous mode [ 345.282590][T16582] syzkaller0: left allmulticast mode [ 345.624230][T16624] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 345.630269][T16626] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 346.407982][T16693] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 346.530809][T16703] xt_HMARK: proto mask must be zero with L3 mode [ 346.768032][T16720] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.114069][T16748] set_capacity_and_notify: 9 callbacks suppressed [ 347.114137][T16748] loop6: detected capacity change from 0 to 256 [ 347.155712][ T4055] kernel read not supported for file /505/loginuid (pid: 4055 comm: kworker/0:14) [ 347.306410][ T3561] kernel read not supported for file /562/loginuid (pid: 3561 comm: kworker/1:9) [ 347.426187][T16803] loop6: detected capacity change from 0 to 128 [ 347.433952][T16803] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 347.472239][ T3561] kernel read not supported for file /815/loginuid (pid: 3561 comm: kworker/1:9) [ 347.606429][T16827] loop6: detected capacity change from 0 to 256 [ 347.656015][ T3561] kernel read not supported for file /831/loginuid (pid: 3561 comm: kworker/1:9) [ 347.693952][T16843] loop8: detected capacity change from 0 to 128 [ 348.377441][ T4055] kernel read not supported for file /578/loginuid (pid: 4055 comm: kworker/0:14) [ 348.681055][ T23] kernel read not supported for file /596/loginuid (pid: 23 comm: kworker/1:0) [ 348.720071][T16918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.729095][T16918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.737024][ T29] audit: type=1400 audit(1765543663.012:12586): avc: denied { associate } for pid=16919 comm="syz.2.5157" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 349.020158][T16940] loop0: detected capacity change from 0 to 128 [ 349.027067][T16940] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 349.046992][ T29] audit: type=1400 audit(1765543663.322:12587): avc: denied { watch watch_reads } for pid=16939 comm="syz.0.5166" path="/429/file0/file0" dev="loop0" ino=157 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 349.770429][T16973] loop8: detected capacity change from 0 to 128 [ 349.777244][T16973] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 350.215665][T17004] loop9: detected capacity change from 0 to 128 [ 350.222851][T17004] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 350.847862][T17035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.856513][T17035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.327438][T17059] 9p: Bad value for 'rfdno' [ 351.700159][T17101] loop9: detected capacity change from 0 to 128 [ 351.707210][T17101] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 352.258812][T17138] 9p: Bad value for 'rfdno' [ 353.309891][T17214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.318969][T17214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.406276][ T23] kernel read not supported for file /642/loginuid (pid: 23 comm: kworker/1:0) [ 353.678753][T17255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.690549][T17255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.700611][T17255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.709154][T17255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.920563][T17255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.933382][T17261] 9p: Bad value for 'rfdno' [ 353.963557][T17255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.651285][T17297] 9p: Bad value for 'rfdno' [ 355.877351][T17346] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 355.883910][T17346] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 355.891602][T17346] vhci_hcd vhci_hcd.0: Device attached [ 355.899938][T17346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5330'. [ 355.928232][T17347] vhci_hcd: connection closed [ 355.928306][ T2580] vhci_hcd vhci_hcd.2: stop threads [ 355.938272][ T2580] vhci_hcd vhci_hcd.2: release socket [ 355.943804][ T2580] vhci_hcd vhci_hcd.2: disconnect device [ 356.517711][T17363] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 356.684659][T17373] netlink: 68 bytes leftover after parsing attributes in process `syz.9.5339'. [ 356.787230][T17379] bridge0: entered promiscuous mode [ 356.794858][T17379] bridge0: port 3(vlan2) entered blocking state [ 356.801220][T17379] bridge0: port 3(vlan2) entered disabled state [ 356.809979][T17379] vlan2: entered allmulticast mode [ 356.815247][T17379] bridge0: entered allmulticast mode [ 356.831146][T17379] vlan2: left allmulticast mode [ 356.836160][T17379] bridge0: left allmulticast mode [ 356.842455][T17379] bridge0: left promiscuous mode [ 356.924972][T17385] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5340'. [ 357.167236][T17394] loop8: detected capacity change from 0 to 256 [ 357.231517][T17394] FAT-fs (loop8): codepage cp936 not found [ 357.313243][T17398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.323599][T17398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.896187][T17424] siw: device registration error -23 [ 357.936623][T17430] netlink: 'syz.8.5361': attribute type 1 has an invalid length. [ 357.950838][T17430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.969621][T17430] macvlan2: entered promiscuous mode [ 357.975061][T17430] macvlan2: entered allmulticast mode [ 357.981925][T17430] bond1: entered promiscuous mode [ 357.987208][T17430] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 357.995493][T17430] bond1: left promiscuous mode [ 358.030976][T17436] bond1: (slave ip6gretap1): making interface the new active one [ 358.055017][T17436] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 358.271807][T17463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5375'. [ 358.369347][T17477] No control pipe specified [ 359.029210][T17499] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5389'. [ 359.174333][T17517] loop8: detected capacity change from 0 to 128 [ 359.305183][T17528] loop0: detected capacity change from 0 to 1024 [ 359.321690][T17528] EXT4-fs: test_dummy_encryption option not supported [ 360.772165][T17577] loop2: detected capacity change from 0 to 512 [ 360.797637][T17577] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 360.847551][T17577] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 360.871905][T17577] ext4 filesystem being mounted at /336/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 360.933777][ T29] audit: type=1400 audit(1765543675.212:12588): avc: denied { read append } for pid=17576 comm="syz.2.5423" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 360.956912][ T29] audit: type=1400 audit(1765543675.212:12589): avc: denied { open } for pid=17576 comm="syz.2.5423" path="/336/bus/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 361.006513][ T29] audit: type=1400 audit(1765543675.252:12590): avc: denied { write } for pid=17576 comm="syz.2.5423" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 361.047549][ T29] audit: type=1400 audit(1765543675.322:12591): avc: denied { ioctl } for pid=17576 comm="syz.2.5423" path="/336/bus/file1" dev="loop2" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 361.090968][T13638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.988984][T17635] loop6: detected capacity change from 0 to 164 [ 362.074808][T17641] loop6: detected capacity change from 0 to 2048 [ 362.084191][T17641] syz_tun: entered allmulticast mode [ 362.090445][T17641] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 362.099037][T17641] mroute: pending queue full, dropping entries [ 362.284033][T17657] loop0: detected capacity change from 0 to 256 [ 362.319843][T17657] FAT-fs (loop0): codepage cp863 not found [ 362.443588][T17668] loop0: detected capacity change from 0 to 1024 [ 362.458428][T17668] EXT4-fs: Ignoring removed nomblk_io_submit option [ 362.477083][T17668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.677495][T12029] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.036396][ T29] audit: type=1400 audit(1765543677.312:12592): avc: denied { connect } for pid=17689 comm="syz.2.5466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 363.803489][T17720] loop8: detected capacity change from 0 to 164 [ 363.877704][T17727] netlink: 'syz.8.5480': attribute type 1 has an invalid length. [ 363.893078][T17727] 8021q: adding VLAN 0 to HW filter on device bond2 [ 363.904736][T17727] bond2: up delay (35976) is not a multiple of miimon (100), value rounded to 35900 ms [ 363.915134][T17727] bond2: entered allmulticast mode [ 363.975097][T17737] tipc: Enabled bearer , priority 0 [ 363.984657][T17737] syzkaller0: entered promiscuous mode [ 363.990191][T17737] syzkaller0: entered allmulticast mode [ 364.001779][T17737] tipc: Resetting bearer [ 364.010394][T17736] tipc: Resetting bearer [ 364.020602][T17736] tipc: Disabling bearer [ 364.026242][T17747] loop9: detected capacity change from 0 to 164 [ 364.077233][T17749] netlink: 'syz.9.5489': attribute type 1 has an invalid length. [ 364.108208][T17749] bond1: entered promiscuous mode [ 364.113550][T17749] 8021q: adding VLAN 0 to HW filter on device bond1 [ 364.137402][T17749] bond1: (slave bridge3): making interface the new active one [ 364.144995][T17749] bridge3: entered promiscuous mode [ 364.152413][T17749] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 365.692660][T17844] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5529'. [ 365.711930][T17844] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5529'. [ 365.734858][T17842] Cannot find map_set index 0 as target [ 365.776459][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5528'. [ 365.785384][T17848] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5528'. [ 365.804791][T17850] loop8: detected capacity change from 0 to 128 [ 366.035294][T17852] loop8: detected capacity change from 0 to 8192 [ 366.468571][T17870] lo speed is unknown, defaulting to 1000 [ 366.474443][T17870] lo speed is unknown, defaulting to 1000 [ 366.480542][T17870] lo speed is unknown, defaulting to 1000 [ 366.488036][T17870] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 366.552756][T17870] lo speed is unknown, defaulting to 1000 [ 366.559226][T17870] lo speed is unknown, defaulting to 1000 [ 366.565537][T17870] lo speed is unknown, defaulting to 1000 [ 366.572058][T17870] lo speed is unknown, defaulting to 1000 [ 366.578692][T17870] lo speed is unknown, defaulting to 1000 [ 366.585454][T17870] lo speed is unknown, defaulting to 1000 [ 366.591854][T17870] lo speed is unknown, defaulting to 1000 [ 366.654297][ T29] audit: type=1400 audit(1765543680.922:12593): avc: denied { create } for pid=17872 comm="syz.0.5540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 366.806692][ T29] audit: type=1400 audit(1765543680.962:12594): avc: denied { setopt } for pid=17872 comm="syz.0.5540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 366.826460][ T29] audit: type=1400 audit(1765543681.032:12595): avc: denied { bind } for pid=17872 comm="syz.0.5540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 366.845889][ T29] audit: type=1400 audit(1765543681.032:12596): avc: denied { write } for pid=17872 comm="syz.0.5540" path="socket:[80906]" dev="sockfs" ino=80906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 366.937156][T17886] syzkaller0: entered promiscuous mode [ 366.942745][T17886] syzkaller0: entered allmulticast mode [ 366.981548][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 367.131019][T17893] netlink: 9 bytes leftover after parsing attributes in process `syz.8.5547'. [ 367.259211][T17907] program syz.8.5553 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.462388][T17915] syzkaller0: entered promiscuous mode [ 367.467948][T17915] syzkaller0: entered allmulticast mode [ 367.642031][T17932] loop9: detected capacity change from 0 to 164 [ 367.819207][ T29] audit: type=1400 audit(1765543682.092:12597): avc: denied { connect } for pid=17943 comm="syz.6.5570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 367.855609][ T29] audit: type=1400 audit(1765543682.122:12598): avc: denied { bind } for pid=17943 comm="syz.6.5570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 367.986630][T17958] loop6: detected capacity change from 0 to 164 [ 368.014376][T17960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.023111][T17960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.132315][T17965] loop0: detected capacity change from 0 to 8192 [ 368.481510][T17981] loop2: detected capacity change from 0 to 512 [ 368.488163][T17981] EXT4-fs: Ignoring removed oldalloc option [ 368.494622][T17981] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 368.506274][T17981] EXT4-fs error (device loop2): ext4_init_orphan_info:620: comm syz.2.5585: orphan file block 0: bad magic [ 368.518499][T17981] EXT4-fs (loop2): mount failed [ 370.456650][T18019] bridge0: port 4(gretap0) entered blocking state [ 370.463296][T18019] bridge0: port 4(gretap0) entered disabled state [ 370.470189][T18019] gretap0: entered allmulticast mode [ 370.476868][T18019] gretap0: entered promiscuous mode [ 370.821530][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.012247][T18027] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5601'. [ 371.035603][T18032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.067339][T18032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.303253][T18032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.377287][T18032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.680404][T18056] loop6: detected capacity change from 0 to 1024 [ 371.754779][T18056] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 371.779906][T18056] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 371.971576][T18059] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 372.062053][ T29] audit: type=1400 audit(1765543686.322:12599): avc: denied { map } for pid=18055 comm="syz.6.5611" path="socket:[82167]" dev="sockfs" ino=82167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 372.085587][ T29] audit: type=1400 audit(1765543686.322:12600): avc: denied { read } for pid=18055 comm="syz.6.5611" path="socket:[82167]" dev="sockfs" ino=82167 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 372.571840][T12444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.627381][T18075] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5617'. [ 372.636705][T18075] netlink: 'syz.6.5617': attribute type 7 has an invalid length. [ 372.644513][T18075] netlink: 'syz.6.5617': attribute type 8 has an invalid length. [ 372.652412][T18075] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5617'. [ 372.667626][T18077] loop2: detected capacity change from 0 to 2048 [ 372.674351][T18077] EXT4-fs: Ignoring removed i_version option [ 372.692551][T18077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.706183][T18077] ext4 filesystem being mounted at /363/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.827086][T18081] vxcan1: entered promiscuous mode [ 373.575448][T13638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.674432][T18103] netlink: 68 bytes leftover after parsing attributes in process `syz.2.5625'. [ 373.683497][T18103] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5625'. [ 373.804490][ T29] audit: type=1400 audit(1765543688.082:12601): avc: denied { write } for pid=18114 comm="syz.6.5631" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 373.848060][T18120] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5632'. [ 373.857077][T18120] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5632'. [ 373.937643][T18121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5626'. [ 374.145201][T18134] netlink: 'syz.6.5638': attribute type 27 has an invalid length. [ 374.192547][T18134] bridge0: port 3(dummy0) entered disabled state [ 374.199154][T18134] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.206434][T18134] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.231069][T18134] vxcan1: left promiscuous mode [ 374.277124][T18134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.289525][T18134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.346428][ T1891] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.355482][ T1056] syz2: Port: 1 Link DOWN [ 374.355560][ T1891] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.369058][ T1891] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.384488][ T1891] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.613257][T18154] netlink: 'syz.2.5646': attribute type 1 has an invalid length. [ 374.620831][T18156] netlink: 'syz.9.5647': attribute type 1 has an invalid length. [ 374.637892][T18156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.647630][T18156] bond2: (slave vcan0): Device is not bonding slave [ 374.654296][T18156] bond2: option active_slave: invalid value (vcan0) [ 374.714214][ T29] audit: type=1400 audit(1765543688.992:12602): avc: denied { setattr } for pid=18164 comm="syz.9.5651" name="NETLINK" dev="sockfs" ino=82335 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 374.790822][ T1056] kernel read not supported for file /773/loginuid (pid: 1056 comm: kworker/1:2) [ 374.948064][T18185] loop8: detected capacity change from 0 to 512 [ 374.957018][T18185] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.5659: bg 0: block 393: padding at end of block bitmap is not set [ 374.972390][T18185] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 374.983988][T18185] EXT4-fs (loop8): 2 truncates cleaned up [ 374.990538][T18185] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.034430][T18188] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5657'. [ 375.053720][ T29] audit: type=1400 audit(1765543689.282:12603): avc: denied { remove_name } for pid=18184 comm="syz.8.5659" name="file0" dev="loop8" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 375.076396][ T29] audit: type=1400 audit(1765543689.282:12604): avc: denied { rmdir } for pid=18184 comm="syz.8.5659" name="file0" dev="loop8" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 375.101724][T13481] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.337994][T18194] syzkaller0: entered promiscuous mode [ 375.343643][T18194] syzkaller0: entered allmulticast mode [ 375.350290][ T4055] syz2: Port: 1 Link ACTIVE [ 375.482373][T18202] tipc: Enabled bearer , priority 0 [ 375.494016][T18202] syzkaller0: entered promiscuous mode [ 375.499541][T18202] syzkaller0: entered allmulticast mode [ 375.540075][T18202] tipc: Resetting bearer [ 375.554380][T18201] tipc: Resetting bearer [ 375.561948][T18201] tipc: Disabling bearer [ 376.532492][T18229] x_tables: ip_tables: CT.1 target: invalid size 72 (kernel) != (user) 0 [ 376.978477][ T29] audit: type=1400 audit(1765543691.252:12605): avc: denied { mount } for pid=18244 comm="syz.0.5681" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 377.227644][T18250] syzkaller0: left promiscuous mode [ 377.233128][T18250] syzkaller0: left allmulticast mode [ 377.257850][T18252] syzkaller0: entered promiscuous mode [ 377.263479][T18252] syzkaller0: entered allmulticast mode [ 377.289025][T18254] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 377.295583][T18254] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 377.303348][T18254] vhci_hcd vhci_hcd.0: Device attached [ 377.541450][ T3485] usb 13-1: new low-speed USB device number 2 using vhci_hcd [ 377.582269][T18255] vhci_hcd: connection reset by peer [ 377.591954][ T31] vhci_hcd vhci_hcd.6: stop threads [ 377.597202][ T31] vhci_hcd vhci_hcd.6: release socket [ 377.602656][ T31] vhci_hcd vhci_hcd.6: disconnect device [ 377.701324][T18265] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5688'. [ 377.715441][T18267] netlink: 10 bytes leftover after parsing attributes in process `syz.8.5689'. [ 377.858506][T18272] loop8: detected capacity change from 0 to 128 [ 378.061337][T18281] syzkaller0: entered promiscuous mode [ 378.066981][T18281] syzkaller0: entered allmulticast mode [ 378.318866][T18299] pimreg: entered allmulticast mode [ 378.332407][T18299] pimreg: left allmulticast mode [ 378.337690][ T29] audit: type=1400 audit(1765543692.612:12606): avc: denied { create } for pid=18301 comm="syz.8.5701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 378.357737][ T29] audit: type=1400 audit(1765543692.612:12607): avc: denied { sys_admin } for pid=18301 comm="syz.8.5701" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 378.384576][T18306] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5702'. [ 378.903406][T18320] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 378.909992][T18320] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 378.917625][T18320] vhci_hcd vhci_hcd.0: Device attached [ 379.015921][T18321] vhci_hcd: connection closed [ 379.016567][ T1891] vhci_hcd vhci_hcd.2: stop threads [ 379.026659][ T1891] vhci_hcd vhci_hcd.2: release socket [ 379.032168][ T1891] vhci_hcd vhci_hcd.2: disconnect device [ 379.194256][T18334] syzkaller0: left promiscuous mode [ 380.207432][T18348] netlink: 168 bytes leftover after parsing attributes in process `syz.8.5716'. [ 380.257515][T18355] tipc: Enabled bearer , priority 0 [ 380.265008][T18355] syzkaller0: entered promiscuous mode [ 380.288749][T18361] program syz.8.5721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 380.330937][ T29] audit: type=1400 audit(1765543694.602:12608): avc: denied { map } for pid=18357 comm="syz.2.5722" path="/dev/qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 380.371321][T18374] random: crng reseeded on system resumption [ 380.371322][ T29] audit: type=1400 audit(1765543694.642:12609): avc: denied { write } for pid=18373 comm="syz.2.5726" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 380.383055][T18374] netlink: 'syz.2.5726': attribute type 10 has an invalid length. [ 380.400921][ T29] audit: type=1400 audit(1765543694.652:12610): avc: denied { ioctl } for pid=18373 comm="syz.2.5726" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 380.412226][T18374] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.441866][T18375] netlink: 'syz.2.5726': attribute type 10 has an invalid length. [ 380.443442][T18374] bond0: (slave team0): Enslaving as an active interface with an up link [ 380.462555][T18375] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 380.489402][T18374] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 380.640733][T18381] loop2: detected capacity change from 0 to 512 [ 380.649023][T18381] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.5728: inode has both inline data and extents flags [ 380.662782][T18381] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.5728: couldn't read orphan inode 15 (err -117) [ 380.675175][T18381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 380.700099][T13638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.772998][T18391] loop2: detected capacity change from 0 to 2048 [ 380.783236][T18391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.795607][T18391] ext4 filesystem being mounted at /380/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 380.808076][T18391] EXT4-fs (loop2): Online resizing not supported with bigalloc [ 380.825002][T13638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.898035][T18396] syzkaller0: entered promiscuous mode [ 380.903625][T18396] syzkaller0: entered allmulticast mode [ 381.008847][T18398] netlink: 'syz.9.5734': attribute type 1 has an invalid length. [ 381.023865][T18398] 8021q: adding VLAN 0 to HW filter on device bond3 [ 381.040039][T18398] bond3: (slave geneve2): making interface the new active one [ 381.049254][T18398] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 381.095022][T18401] syz.9.5735 (18401) used greatest stack depth: 9000 bytes left [ 381.246669][ T29] audit: type=1400 audit(1765543695.522:12611): avc: denied { read } for pid=18406 comm="syz.9.5738" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 381.271139][ T29] audit: type=1400 audit(1765543695.522:12612): avc: denied { open } for pid=18406 comm="syz.9.5738" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 381.316050][T18424] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5745'. [ 381.328447][ T29] audit: type=1400 audit(1765543695.582:12613): avc: denied { ioctl } for pid=18406 comm="syz.9.5738" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 381.342948][T18426] netlink: 'syz.0.5746': attribute type 1 has an invalid length. [ 381.445448][T18426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 381.544107][T18432] bond1: (slave geneve2): making interface the new active one [ 381.582596][T18432] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 381.763367][T18450] syzkaller0: entered promiscuous mode [ 381.768917][T18450] syzkaller0: entered allmulticast mode [ 382.373840][T18463] loop6: detected capacity change from 0 to 2048 [ 382.501219][T18475] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5763'. [ 382.530529][T18473] syzkaller0: left promiscuous mode [ 382.536022][T18473] syzkaller0: left allmulticast mode [ 382.544209][T18473] tipc: Resetting bearer [ 382.545991][T18477] loop9: detected capacity change from 0 to 512 [ 382.557567][T18477] EXT4-fs: Ignoring removed bh option [ 382.564209][T18477] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 382.581491][ T3485] usb 13-1: enqueue for inactive port 0 [ 382.583086][T18477] EXT4-fs (loop9): 1 truncate cleaned up [ 382.587278][ T3485] usb 13-1: enqueue for inactive port 0 [ 382.599097][T18477] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 382.671519][ T3485] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 382.692068][T18490] loop6: detected capacity change from 0 to 2048 [ 382.766780][T13498] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.811426][T18495] syzkaller0: entered promiscuous mode [ 382.817027][T18495] syzkaller0: entered allmulticast mode [ 382.825731][T18495] tipc: Resetting bearer [ 383.211676][T18501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.220356][T18501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.457674][T18509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5776'. [ 383.594613][T18527] loop6: detected capacity change from 0 to 512 [ 383.601598][T18527] EXT4-fs: dax option not supported [ 383.681858][T18536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.690865][T18536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.439725][ T29] audit: type=1400 audit(1765543698.712:12614): avc: denied { watch } for pid=18557 comm="syz.6.5798" path="/syzcgroup/unified/syz6" dev="cgroup2" ino=189 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 384.489651][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5800'. [ 384.516667][T18565] loop6: detected capacity change from 0 to 164 [ 384.538624][T18565] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 384.767996][T18579] loop6: detected capacity change from 0 to 1024 [ 384.776658][T18581] team_slave_0: entered promiscuous mode [ 384.782387][T18581] team_slave_1: entered promiscuous mode [ 384.788721][T18579] EXT4-fs (loop6): bad geometry: block count 519 exceeds size of device (512 blocks) [ 384.789701][T18581] netlink: 'syz.9.5808': attribute type 10 has an invalid length. [ 384.806889][T18581] team_slave_0: left promiscuous mode [ 384.812405][T18581] team_slave_1: left promiscuous mode [ 384.826847][T18581] team0 (unregistering): Port device team_slave_0 removed [ 384.846578][T18581] team0 (unregistering): Port device team_slave_1 removed [ 385.165470][ T29] audit: type=1400 audit(1765543699.442:12615): avc: denied { read } for pid=18609 comm="syz.8.5821" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 385.347469][T18618] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5825'. [ 385.357369][T18619] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5824'. [ 385.388558][T18618] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5825'. [ 385.397576][T18618] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5825'. [ 385.406644][T18618] netlink: 128 bytes leftover after parsing attributes in process `syz.8.5825'. [ 385.454893][T18623] syzkaller0: entered promiscuous mode [ 385.460440][T18623] syzkaller0: entered allmulticast mode [ 385.619927][T18631] syzkaller0: entered promiscuous mode [ 385.625541][T18631] syzkaller0: entered allmulticast mode [ 385.838067][T18645] loop8: detected capacity change from 0 to 512 [ 385.955147][T18645] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 386.691963][T18645] EXT4-fs (loop8): 1 truncate cleaned up [ 386.717874][T18645] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.804681][T13481] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.671213][T18702] program syz.2.5855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.681076][T18700] syzkaller0: entered promiscuous mode [ 388.686617][T18700] syzkaller0: entered allmulticast mode [ 388.708419][T18704] syzkaller0: entered promiscuous mode [ 388.714040][T18704] syzkaller0: entered allmulticast mode [ 388.801723][T18707] loop2: detected capacity change from 0 to 512 [ 388.809368][T18707] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 388.821271][T18707] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5857: invalid indirect mapped block 4294967295 (level 0) [ 388.835914][T18707] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #16: comm syz.2.5857: invalid indirect mapped block 4294967295 (level 1) [ 388.853827][T18707] EXT4-fs (loop2): 1 orphan inode deleted [ 388.859571][T18707] EXT4-fs (loop2): 1 truncate cleaned up [ 388.865927][T18707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.881169][T18707] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 388.923318][T13638] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.946431][T18714] syzkaller0: entered promiscuous mode [ 388.951958][T18714] syzkaller0: entered allmulticast mode [ 388.970924][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5862'. [ 388.994792][T18720] netlink: 'syz.8.5863': attribute type 1 has an invalid length. [ 389.008501][T18720] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.076088][T18730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.084912][T18730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.090269][T18729] syzkaller0: entered promiscuous mode [ 389.098248][T18729] syzkaller0: entered allmulticast mode [ 389.232406][T18743] netlink: 38 bytes leftover after parsing attributes in process `syz.8.5872'. [ 389.257270][T18745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.265973][T18745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.136563][T18779] tipc: Enabled bearer , priority 0 [ 390.138647][T18781] loop2: detected capacity change from 0 to 128 [ 390.143959][T18779] syzkaller0: entered promiscuous mode [ 390.155116][T18779] syzkaller0: entered allmulticast mode [ 390.156483][T18781] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 54) [ 390.169309][T18781] FAT-fs (loop2): Filesystem has been set read-only [ 390.178480][T18779] tipc: Resetting bearer [ 390.187934][T18778] tipc: Resetting bearer [ 390.194850][T18783] usb usb5: usbfs: process 18783 (syz.2.5888) did not claim interface 0 before use [ 390.205068][T18778] tipc: Disabling bearer [ 390.220066][T18785] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5889'. [ 390.938996][ T29] audit: type=1400 audit(1765543705.212:12616): avc: denied { sqpoll } for pid=18811 comm="syz.0.5900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 391.379507][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5901'. [ 391.409147][T18822] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 391.415726][T18822] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 391.423501][T18822] vhci_hcd vhci_hcd.0: Device attached [ 391.453996][T18822] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5902'. [ 391.485416][T18843] netlink: 38 bytes leftover after parsing attributes in process `syz.9.5904'. [ 391.514926][T18825] vhci_hcd: connection closed [ 391.537356][T18854] vhci_hcd vhci_hcd.6: stop threads [ 391.547366][T18854] vhci_hcd vhci_hcd.6: release socket [ 391.552886][T18854] vhci_hcd vhci_hcd.6: disconnect device [ 391.764478][T18886] loop9: detected capacity change from 0 to 128 [ 391.818895][T18886] EXT4-fs: test_dummy_encryption option not supported [ 391.985485][T18897] syzkaller0: entered promiscuous mode [ 391.991050][T18897] syzkaller0: entered allmulticast mode [ 392.040664][T18900] loop6: detected capacity change from 0 to 512 [ 392.051338][T18901] siw: device registration error -23 [ 392.076456][T18900] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.102435][T18906] netlink: 38 bytes leftover after parsing attributes in process `syz.9.5915'. [ 392.133319][T18900] ext4 filesystem being mounted at /580/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 392.198806][ T29] audit: type=1400 audit(1765543706.472:12617): avc: denied { setattr } for pid=18899 comm="syz.6.5914" path="/580/bus/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 392.254332][T12444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.335774][T18914] loop6: detected capacity change from 0 to 512 [ 392.361910][T18914] EXT4-fs: Ignoring removed bh option [ 392.381532][T18914] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 392.392239][ T29] audit: type=1400 audit(1765543706.672:12618): avc: denied { bind } for pid=18916 comm="syz.9.5920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 392.402813][T18914] EXT4-fs (loop6): 1 truncate cleaned up [ 392.418494][T18914] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.464300][T12444] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.489450][T18920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.501416][T18920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.531026][T18922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.540438][T18920] ------------[ cut here ]------------ [ 392.545989][T18920] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0) [ 392.563962][T18920] WARNING: kernel/bpf/verifier.c:2748 at 0x0, CPU#0: syz.9.5922/18920 [ 392.572303][T18920] Modules linked in: [ 392.576308][T18920] CPU: 0 UID: 0 PID: 18920 Comm: syz.9.5922 Not tainted syzkaller #0 PREEMPT(voluntary) [ 392.587101][T18920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 392.597559][T18920] RIP: 0010:reg_bounds_sanity_check+0x27d/0x660 [ 392.604174][T18920] Code: 24 78 4c 8b 44 24 70 4c 8b 4c 24 60 41 ff 74 24 20 41 55 53 ff 74 24 68 ff 74 24 78 ff b4 24 90 00 00 00 ff b4 24 b0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 4c 8b ac 24 98 00 00 00 49 8d 85 80 08 [ 392.623855][T18920] RSP: 0018:ffffc900034df3a0 EFLAGS: 00010246 [ 392.629984][T18920] RAX: ffff8881036d5d10 RBX: 0000000000000000 RCX: 0000000004000000 [ 392.638062][T18920] RDX: ffffffff865fb92d RSI: ffffffff865d03f9 RDI: ffffffff86db6ad0 [ 392.646114][T18920] RBP: ffff88811093cae0 R08: 0000000000000000 R09: 0000000004000000 [ 392.654150][T18920] R10: ffffffff88ee7a88 R11: 0000000080000000 R12: ffff88811093caa0 [ 392.662177][T18920] R13: 0000000000000000 R14: ffff88811093caec R15: ffff88811093cad8 [ 392.670238][T18920] FS: 00007f1be78d76c0(0000) GS:ffff8882aedc3000(0000) knlGS:0000000000000000 [ 392.679224][T18920] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.685920][T18920] CR2: 000000110c2911fa CR3: 00000001051d0000 CR4: 00000000003506f0 [ 392.693936][T18920] Call Trace: [ 392.697237][T18920] [ 392.700200][T18920] reg_set_min_max+0x21c/0x260 [ 392.705054][T18920] check_cond_jmp_op+0x1367/0x1a80 [ 392.710298][T18920] do_check+0x3347/0x81f0 [ 392.714724][T18920] do_check_common+0xccf/0x1300 [ 392.719670][T18920] bpf_check+0x2f98/0xc860 [ 392.724184][T18920] ? __alloc_frozen_pages_noprof+0x18f/0x360 [ 392.730228][T18920] ? alloc_pages_bulk_noprof+0x4b9/0x540 [ 392.735965][T18920] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 392.741967][T18926] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 392.742039][T18920] ? try_charge_memcg+0x215/0xa10 [ 392.748516][T18926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 392.753583][T18920] ? pcpu_block_update+0x232/0x3b0 [ 392.761043][T18926] vhci_hcd vhci_hcd.0: Device attached [ 392.766202][T18920] ? pcpu_block_refresh_hint+0x157/0x170 [ 392.777310][T18920] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 392.783470][T18920] ? css_rstat_updated+0xb7/0x240 [ 392.788538][T18920] ? mod_memcg_state+0x182/0x270 [ 392.793550][T18920] ? __rcu_read_unlock+0x4f/0x70 [ 392.797464][T18930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5924'. [ 392.798688][T18920] ? pcpu_memcg_post_alloc_hook+0xec/0x170 [ 392.810248][T18922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.813481][T18920] ? bpf_prog_alloc+0x5b/0x150 [ 392.826000][T18920] ? pcpu_alloc_noprof+0xd0d/0x1240 [ 392.831225][T18920] ? should_fail_ex+0x30/0x280 [ 392.836064][T18920] ? __kmalloc_noprof+0x2b4/0x5a0 [ 392.841169][T18920] ? security_bpf_prog_load+0x60/0x140 [ 392.846710][T18920] ? selinux_bpf_prog_load+0xad/0xd0 [ 392.852072][T18920] ? security_bpf_prog_load+0x9e/0x140 [ 392.857640][T18920] bpf_prog_load+0xf6e/0x1140 [ 392.862394][T18920] ? security_bpf+0x2b/0x90 [ 392.866935][T18920] __sys_bpf+0x469/0x7c0 [ 392.871265][T18920] __x64_sys_bpf+0x41/0x50 [ 392.875756][T18920] x64_sys_call+0x28e1/0x3000 [ 392.880475][T18920] do_syscall_64+0xd8/0x2a0 [ 392.885225][T18920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.887351][T18927] vhci_hcd: connection closed [ 392.891157][T18920] RIP: 0033:0x7f1be8e6f749 [ 392.891864][T18855] vhci_hcd vhci_hcd.0: stop threads [ 392.895898][T18920] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.900292][T18855] vhci_hcd vhci_hcd.0: release socket [ 392.900312][T18855] vhci_hcd vhci_hcd.0: disconnect device [ 392.936420][T18920] RSP: 002b:00007f1be78d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.944901][T18920] RAX: ffffffffffffffda RBX: 00007f1be90c5fa0 RCX: 00007f1be8e6f749 [ 392.952927][T18920] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 392.960918][T18920] RBP: 00007f1be8ef3f91 R08: 0000000000000000 R09: 0000000000000000 [ 392.961429][ T1056] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 392.968993][T18920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 392.983278][T18920] R13: 00007f1be90c6038 R14: 00007f1be90c5fa0 R15: 00007ffff259b5e8 [ 392.991395][T18920] [ 392.994511][T18920] ---[ end trace 0000000000000000 ]--- [ 393.231438][T18934] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.281057][T18934] hub 6-0:1.0: USB hub found [ 393.285863][T18934] hub 6-0:1.0: 8 ports detected [ 393.843168][T18950] loop9: detected capacity change from 0 to 512 [ 393.850177][T18950] EXT4-fs: Ignoring removed bh option [ 393.856295][T18950] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 393.873468][T18950] EXT4-fs (loop9): 1 truncate cleaned up [ 393.879805][T18950] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.907165][T13498] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.143930][T18953] tipc: Started in network mode [ 394.148855][T18953] tipc: Node identity 12ae563aea18, cluster identity 4711 [ 394.156066][T18953] tipc: Enabled bearer , priority 0 [ 394.164771][T18953] tipc: Resetting bearer [ 394.172491][T18952] tipc: Disabling bearer [ 394.229591][ T29] audit: type=1400 audit(1765543708.502:12619): avc: denied { connect } for pid=18954 comm="syz.9.5934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 394.250372][T18957] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5935'. [ 394.311428][T18963] netlink: 30 bytes leftover after parsing attributes in process `syz.9.5938'. [ 394.389904][T18971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.398652][T18969] loop9: detected capacity change from 0 to 2048 [ 394.398787][T18971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.423206][T18969] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 394.435661][T18969] ext4 filesystem being mounted at /397/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 394.473625][T13498] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.739465][T18988] tipc: Enabled bearer , priority 0 [ 394.746424][T18988] syzkaller0: entered promiscuous mode [ 394.751981][T18988] syzkaller0: entered allmulticast mode [ 394.760318][T18988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5947'. [ 394.771220][T18988] tipc: Resetting bearer [ 394.777719][T18987] tipc: Resetting bearer [ 394.784906][T18987] tipc: Disabling bearer [ 394.857477][T18990] loop2: detected capacity change from 0 to 512 [ 394.864494][T18990] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 394.873744][T18990] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 394.911976][T18990] FAT-fs (loop2): FAT read failed (blocknr 128) [ 394.952894][T18994] tipc: Enabled bearer , priority 0 [ 394.959970][T18994] syzkaller0: entered promiscuous mode [ 394.965476][T18994] syzkaller0: entered allmulticast mode [ 394.976360][T18994] tipc: Resetting bearer [ 394.983786][T18993] tipc: Resetting bearer [ 394.991239][T18993] tipc: Disabling bearer [ 395.121425][T19003] syzkaller0: entered promiscuous mode [ 395.127129][T19003] syzkaller0: entered allmulticast mode [ 395.146541][T19006] bridge3: entered promiscuous mode [ 395.151832][T19006] bridge3: entered allmulticast mode [ 395.541620][T19012] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5958'. [ 395.882328][T19018] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 395.888872][T19018] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 395.896538][T19018] vhci_hcd vhci_hcd.0: Device attached [ 395.949223][T19024] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5960'. [ 395.989578][T19019] vhci_hcd: connection closed [ 395.989945][T18874] vhci_hcd vhci_hcd.9: stop threads [ 396.000068][T18874] vhci_hcd vhci_hcd.9: release socket [ 396.005483][T18874] vhci_hcd vhci_hcd.9: disconnect device [ 396.278534][T19028] tipc: Enabled bearer , priority 0 [ 396.285550][T19028] syzkaller0: entered promiscuous mode [ 396.291115][T19028] syzkaller0: entered allmulticast mode [ 396.302421][T19028] tipc: Resetting bearer [ 396.308362][T19032] syz_tun: entered allmulticast mode [ 396.314034][T19027] tipc: Resetting bearer [ 396.321909][T19027] tipc: Disabling bearer [ 396.690399][T19044] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5970'. [ 396.715860][T19046] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5971'. [ 396.787106][T19050] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5973'. [ 396.877728][T19056] loop9: detected capacity change from 0 to 256 [ 396.933560][T19062] loop9: detected capacity change from 0 to 128 [ 396.941752][T19062] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 396.954249][T19062] ext4 filesystem being mounted at /412/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 397.358280][T19072] loop2: detected capacity change from 0 to 512 [ 397.366527][T19072] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 397.376426][T19072] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 397.385508][T19072] EXT4-fs (loop2): Couldn't mount because of unsupported optional features (fffc1829) [ 397.652166][T19079] syzkaller0: entered promiscuous mode [ 397.657681][T19079] syzkaller0: entered allmulticast mode [ 397.729948][T19086] netlink: 'syz.8.5988': attribute type 4 has an invalid length. [ 397.841642][T19092] loop8: detected capacity change from 0 to 1024 [ 397.848538][T13498] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 397.869446][T19092] EXT4-fs: Ignoring removed orlov option [ 397.884581][T19092] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.061211][T19105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5995'. [ 398.114402][T19109] tipc: Enabling of bearer rejected, failed to enable media [ 398.224583][T19119] syzkaller0: entered promiscuous mode [ 398.230205][T19119] syzkaller0: entered allmulticast mode [ 398.279357][T19092] ================================================================== [ 398.287527][T19092] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 398.295524][T19092] [ 398.297851][T19092] write to 0xffff88811b027bd4 of 4 bytes by task 19096 on cpu 1: [ 398.305576][T19092] xas_set_mark+0x12b/0x140 [ 398.310117][T19092] __folio_start_writeback+0x155/0x340 [ 398.315608][T19092] ext4_bio_write_folio+0x5ad/0x9f0 [ 398.320861][T19092] mpage_process_page_bufs+0x4a1/0x620 [ 398.326344][T19092] mpage_prepare_extent_to_map+0x7a3/0xc20 [ 398.332184][T19092] ext4_do_writepages+0x9f6/0x27e0 [ 398.337323][T19092] ext4_writepages+0x179/0x300 [ 398.342111][T19092] do_writepages+0x1c6/0x310 [ 398.346732][T19092] file_write_and_wait_range+0x156/0x2c0 [ 398.352393][T19092] generic_buffers_fsync_noflush+0x45/0x130 [ 398.358313][T19092] ext4_sync_file+0x1ab/0x690 [ 398.363016][T19092] vfs_fsync_range+0x10d/0x130 [ 398.367803][T19092] ext4_buffered_write_iter+0x34f/0x3c0 [ 398.373384][T19092] ext4_file_write_iter+0x387/0xf60 [ 398.378678][T19092] iter_file_splice_write+0x66b/0xa20 [ 398.384107][T19092] direct_splice_actor+0x156/0x2a0 [ 398.389233][T19092] splice_direct_to_actor+0x312/0x680 [ 398.394624][T19092] do_splice_direct+0xda/0x150 [ 398.399410][T19092] do_sendfile+0x380/0x650 [ 398.403867][T19092] __x64_sys_sendfile64+0x105/0x150 [ 398.409096][T19092] x64_sys_call+0x2db1/0x3000 [ 398.413801][T19092] do_syscall_64+0xd8/0x2a0 [ 398.418340][T19092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.424249][T19092] [ 398.426583][T19092] read to 0xffff88811b027bd4 of 4 bytes by task 19092 on cpu 0: [ 398.434226][T19092] file_write_and_wait_range+0x10e/0x2c0 [ 398.439881][T19092] generic_buffers_fsync_noflush+0x45/0x130 [ 398.445820][T19092] ext4_sync_file+0x1ab/0x690 [ 398.450522][T19092] vfs_fsync_range+0x10d/0x130 [ 398.455315][T19092] ext4_buffered_write_iter+0x34f/0x3c0 [ 398.460876][T19092] ext4_file_write_iter+0x387/0xf60 [ 398.466101][T19092] iter_file_splice_write+0x66b/0xa20 [ 398.471495][T19092] direct_splice_actor+0x156/0x2a0 [ 398.476624][T19092] splice_direct_to_actor+0x312/0x680 [ 398.482020][T19092] do_splice_direct+0xda/0x150 [ 398.486799][T19092] do_sendfile+0x380/0x650 [ 398.491233][T19092] __x64_sys_sendfile64+0x105/0x150 [ 398.496455][T19092] x64_sys_call+0x2db1/0x3000 [ 398.501175][T19092] do_syscall_64+0xd8/0x2a0 [ 398.505708][T19092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.511616][T19092] [ 398.513948][T19092] value changed: 0x0a000021 -> 0x04000021 [ 398.519671][T19092] [ 398.521999][T19092] Reported by Kernel Concurrency Sanitizer on: [ 398.528178][T19092] CPU: 0 UID: 0 PID: 19092 Comm: syz.8.5990 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 398.539584][T19092] Tainted: [W]=WARN [ 398.543404][T19092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 398.553491][T19092] ================================================================== [ 398.763404][T13481] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.