last executing test programs: 1m2.079156601s ago: executing program 1 (id=121): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x2}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) sendto$inet6(r1, &(0x7f00000003c0)="87869fe61a0597a434191560dee90f8e1cf31f7e8ad592ecdd72e5736ba4c9da45cadf970ca1d9e97cdf5c35599db50088f86e895395cc913279bb66c339796d88cd465f99e794357d2118fd078bfcd1c5036c1b5f97181f0e43ebb79d6da5eb28e19f5d8abe3877b4f5a825b0eb304bb3f6c6dbd9f8fa694f28470703193f3931df5b2052e21f260c79b21375565df906066f7245482b3912579ebde8b2a6a13c05264791d92c663e98ac0f96f386350f6bc3670d3f9be7b92c32ff12ccf186e3070c0b25", 0xc5, 0x4000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x2, 0x2, 0x201, 0x6, 0xd, 0x5, 0x7, 0x3}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) 1m2.046021584s ago: executing program 1 (id=122): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f00000001c0), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) close(r1) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1m2.029906595s ago: executing program 1 (id=123): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) openat$cgroup_ro(r1, &(0x7f00000006c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000146000/0x4000)=nil) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x115) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 1m1.992570378s ago: executing program 1 (id=124): syz_mount_image$ext4(&(0x7f0000000880)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x0, &(0x7f0000000900), 0x1, 0x84d, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r0, 0x0) read(r0, &(0x7f0000001400)=""/4096, 0x1000) 1m1.703417638s ago: executing program 1 (id=126): open$dir(&(0x7f0000000040)='./file0\x00', 0x4041, 0x80) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x800005, 0x32, 0xffffffffffffffff, 0x852ac000) unshare(0x24060400) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r1, 0x73, &(0x7f00000026c0)}, 0x10) 1m1.311687535s ago: executing program 1 (id=128): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r5 = dup2(r3, r4) close_range(r5, 0xffffffffffffffff, 0x0) 1m1.311537755s ago: executing program 32 (id=128): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) close(r1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r5 = dup2(r3, r4) close_range(r5, 0xffffffffffffffff, 0x0) 48.070784999s ago: executing program 4 (id=389): socket(0x2, 0x80805, 0x0) unshare(0x600) socket$inet6_sctp(0xa, 0x1, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socket(0x25, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$kcm(0x1e, 0x4, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xffffffffffffffff, 0x400000f, 0x4, 0x0, 0x7fffffff}, 0x0, 0x0) 47.175931111s ago: executing program 4 (id=399): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) ioperm(0x0, 0x7, 0x80006) r0 = fspick(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT, @ANYBLOB="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", @ANYRESDEC, @ANYRES64, @ANYBLOB="0ea1a3ed758749a35b0cf19e7301710a8a7c5e7fe9b7c49589266bd5045f15f1817fcc4ea04eeac3f0df37b8beaeafc22a5a08a1a70024"], 0x1, 0x2c3, &(0x7f0000000180)="$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") write$binfmt_script(0xffffffffffffffff, &(0x7f00000005c0)={'#! ', './file0/file0'}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173) 46.931574629s ago: executing program 4 (id=402): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r2, 0x3328}, {r1, 0x4236}], 0x2000000000000037, 0x0, 0x0, 0x0) close(r0) 46.831293335s ago: executing program 4 (id=406): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 46.800421277s ago: executing program 4 (id=408): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) writev(r0, &(0x7f0000002380)=[{&(0x7f0000001280)="ffb1", 0x2}, {0x0}], 0x2) 46.619753501s ago: executing program 4 (id=411): r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x0, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, r0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {0xffffffffffffffff, r4, 0x1}}, 0x18) 46.585702273s ago: executing program 33 (id=411): r0 = getpgrp(0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb801b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x1, 0xf60e}, 0x0, 0x800000, 0x43a1bd76, 0x2, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, r0, 0x4000000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_gettime(0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000001c0)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000180)={0x13, 0x10, 0xfa00, {0xffffffffffffffff, r4, 0x1}}, 0x18) 24.871237827s ago: executing program 2 (id=810): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1}}}}}}}, 0x0) 24.748278266s ago: executing program 2 (id=811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0xb}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x14, 0x2, 0x4, 0x2, 0xf, 0x6, 0xb, 0x5, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x1002, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x4, 0x8, 0x4, 0x8, 0x7, 0x9, 0x5, 0x4, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 24.648259293s ago: executing program 2 (id=812): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x607b, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1}, 0x48) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4008000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000640), 0x1003, r2}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) 24.559611629s ago: executing program 2 (id=813): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5402, 0x3, 0x4) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(0x0, 0x0, 0x4000000000, 0xffffffffffffffff, 0xa) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1a, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x4000008]}) 24.170656566s ago: executing program 2 (id=816): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x400d0}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x540) 23.619395045s ago: executing program 2 (id=818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x9, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0x8}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 23.619230575s ago: executing program 34 (id=818): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x9, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0x8}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) 4.853024672s ago: executing program 7 (id=1045): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3a00052, &(0x7f0000000080)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x5, 0x7e5, &(0x7f00000018c0)="$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") semget$private(0x0, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x14}, 0x10) bind$phonet(r1, 0x0, 0x0) bind$phonet(0xffffffffffffffff, &(0x7f0000000040)={0x23, 0x14}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCX25GCAUSEDIAG(0xffffffffffffffff, 0x89e6, &(0x7f0000000080)={0x0, 0x3}) 4.474943417s ago: executing program 3 (id=1046): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4042}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r6, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x45, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r9, {0x8}, {0xffff}, {0xfff2, 0xffe1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 4.067645056s ago: executing program 3 (id=1049): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0xf8, 0x0, 0xfc, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0x45, [0x0, 0x200089ff]}}) mlockall(0x1) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0xfd, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xaf, 0xe757}]}}}}}}}, 0x0) 4.067230506s ago: executing program 7 (id=1050): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[], 0x134}}, 0x40008) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr', 0x37) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[], 0x1b8}, 0x1, 0x0, 0x0, 0x8}, 0xc4) dup(0xffffffffffffffff) write$binfmt_elf64(r1, &(0x7f0000000200)=ANY=[], 0x540) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x41c1}, 0x4008000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) 3.091400304s ago: executing program 7 (id=1056): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) 2.257570792s ago: executing program 7 (id=1058): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x3, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x101, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={0x0, r1}, 0x18) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x44004) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r4, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") 2.257420492s ago: executing program 3 (id=1059): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1000000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 2.254624612s ago: executing program 0 (id=1068): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x803e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x0) 2.083650025s ago: executing program 5 (id=1061): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) socket$netlink(0x10, 0x3, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[], 0xc) syz_genetlink_get_family_id$ieee802154(0x0, r1) r5 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, 0x0, 0x0) 1.99742225s ago: executing program 5 (id=1062): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0xc8, 0x355a, 0x401}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0xfffffffe, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0xa472}]}}]}, 0x44}}, 0x2) close(r3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r6, 0x40}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000300)='\'', 0x1}], 0x1}, 0x4041) 1.741276109s ago: executing program 5 (id=1063): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) syz_clone(0x1320011, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.680444132s ago: executing program 0 (id=1064): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x10, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x3026, 0x32, 0x43a1bd56, 0x7, 0x400, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.502205125s ago: executing program 0 (id=1066): set_mempolicy(0x1, &(0x7f00000001c0)=0x5, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0xa, 0x3, 0xff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0xdd5}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r1}, 0x38) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x80a, &(0x7f0000000340)="$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") io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x2300000000000000, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.377994964s ago: executing program 7 (id=1070): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02"], 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x10, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(r2, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.362696505s ago: executing program 3 (id=1071): creat(&(0x7f0000000040)='./bus\x00', 0x108) r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) write$binfmt_misc(r0, &(0x7f0000000340), 0x2000011a) 1.361988925s ago: executing program 6 (id=1072): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) readv(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)=""/189, 0xbd}], 0x1) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x8, 0xfffff038}, {0x20, 0xf, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) syz_clone(0x1b200000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018"], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) 1.29538587s ago: executing program 6 (id=1073): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x5, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x4101, 0x4) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c002400004000ff8400000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 1.201889456s ago: executing program 0 (id=1074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.201769476s ago: executing program 6 (id=1075): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$tun(r1, &(0x7f00000004c0)=ANY=[], 0x192) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) write$P9_RLCREATE(r1, &(0x7f0000000140)={0x18, 0xf, 0x2, {{0x20, 0x0, 0x1}, 0x8}}, 0x18) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 376.015223ms ago: executing program 5 (id=1076): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448de, &(0x7f0000000600)) timer_create(0x1, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0xb}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect$uac1(0x0, 0x9e, 0x0, 0x0) 312.848478ms ago: executing program 3 (id=1077): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}, @TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x11}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000088a8ffff1144ee162fd4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 308.946318ms ago: executing program 0 (id=1078): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x5}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 255.566932ms ago: executing program 6 (id=1079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70bd2c, 0x7fffe, {0x0, 0x0, 0x0, r6, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0xffffffff, 0x5, 0x5, 0x7, 0x0, 0xc, 0x1, 0x1, 0x1, {0xffff1c6e, 0x0, 0x7, 0xc, 0xfffffffa, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r3, &(0x7f00000001c0)="bad33075218151db00316f3a277f9580", 0x10, 0x22008001, &(0x7f0000000080)={0x11, 0x88a8, r2, 0x1, 0xda, 0x6, @multicast}, 0x14) 246.482263ms ago: executing program 5 (id=1080): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xfff3, 0x6}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 113.485892ms ago: executing program 6 (id=1081): bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xb6ac, @local, 0x10}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x3, &(0x7f0000001840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x0, 0x101, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001b00)=@generic={0x0, r1}, 0x18) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0, 0x9}, 0x6000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x44004) r4 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$selinux_create(r4, &(0x7f00000005c0)=@access={'system_u:object_r:root_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x5}, 0x48) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000000c0)={[{@usrjquota}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@delalloc}, {@nobh}, {@min_batch_time={'min_batch_time', 0x3d, 0xb656}}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x46f, &(0x7f0000000bc0)="$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") 112.847602ms ago: executing program 0 (id=1091): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5644d, 0x70bd2c, 0x7fffe, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0xf, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0xffffffff, 0x5, 0x5, 0x7, 0x0, 0xc, 0x1, 0x1, 0x1, {0xffff1c6e, 0x0, 0x7, 0xc, 0xfffffffa, 0x7583}}}}]}, 0x78}}, 0x8000) sendto$packet(r4, &(0x7f00000001c0)="bad33075218151db00316f3a277f9580a086", 0x12, 0x22008001, &(0x7f0000000080)={0x11, 0x88a8, r3, 0x1, 0xda, 0x6, @multicast}, 0x14) 112.237612ms ago: executing program 5 (id=1082): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x0, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) waitid(0x0, 0x0, 0x0, 0x41000004, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 111.812982ms ago: executing program 7 (id=1092): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3ab}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1003d1, 0x3, 0x20000000, 0x6, 0x6}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e00003c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) 51.557936ms ago: executing program 6 (id=1083): r0 = msgget$private(0x0, 0x508) setresuid(0xee01, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ppoll(&(0x7f0000000280), 0x0, 0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000100), 0x4) syz_read_part_table(0x604, &(0x7f0000000640)="$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") setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1084): socket$inet6_tcp(0xa, 0x1, 0x0) semget$private(0x0, 0x7, 0x180) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs={0x0, 0x0, 0xfffffffb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x0, 0xa, 0xfffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x1}, 0x50) kernel console output (not intermixed with test programs): 'hsr0' already exists in 'hsr' [ 28.045764][ T3308] Cannot create hsr debugfs directory [ 28.073577][ T3318] hsr_slave_0: entered promiscuous mode [ 28.080186][ T3318] hsr_slave_1: entered promiscuous mode [ 28.086088][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 28.092184][ T3318] Cannot create hsr debugfs directory [ 28.152409][ T3309] hsr_slave_0: entered promiscuous mode [ 28.158529][ T3309] hsr_slave_1: entered promiscuous mode [ 28.164624][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 28.170555][ T3309] Cannot create hsr debugfs directory [ 28.185335][ T3313] hsr_slave_0: entered promiscuous mode [ 28.191401][ T3313] hsr_slave_1: entered promiscuous mode [ 28.197517][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 28.203778][ T3313] Cannot create hsr debugfs directory [ 28.285497][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.303554][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.323097][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.344014][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.391401][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.400328][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.411294][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.422703][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.461369][ T3309] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.474696][ T3309] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.484351][ T3309] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.493586][ T3309] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.536877][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.550685][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.564577][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.576622][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.583775][ T3313] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.592342][ T3313] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.601403][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.616812][ T3313] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.625608][ T3313] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.638359][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.664567][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.683723][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.717754][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.728331][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.735509][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.744550][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.751622][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.771286][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.780973][ T834] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.788121][ T834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.796952][ T834] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.804262][ T834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.829425][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.846483][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.859919][ T210] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.867139][ T210] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.886348][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.900122][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.907335][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.924042][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.933313][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.941042][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.951454][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.959184][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.975040][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.986442][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.012373][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.019589][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.037227][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.044545][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.075355][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.091606][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.140599][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.193169][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.231514][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.262741][ T3308] veth0_vlan: entered promiscuous mode [ 29.284618][ T3308] veth1_vlan: entered promiscuous mode [ 29.303158][ T3316] veth0_vlan: entered promiscuous mode [ 29.337106][ T3316] veth1_vlan: entered promiscuous mode [ 29.379260][ T3308] veth0_macvtap: entered promiscuous mode [ 29.390041][ T3318] veth0_vlan: entered promiscuous mode [ 29.397242][ T3308] veth1_macvtap: entered promiscuous mode [ 29.410355][ T3316] veth0_macvtap: entered promiscuous mode [ 29.423836][ T3316] veth1_macvtap: entered promiscuous mode [ 29.432431][ T3318] veth1_vlan: entered promiscuous mode [ 29.439853][ T3309] veth0_vlan: entered promiscuous mode [ 29.454816][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.464841][ T3309] veth1_vlan: entered promiscuous mode [ 29.476599][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.496722][ T3313] veth0_vlan: entered promiscuous mode [ 29.503685][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.513378][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.530589][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.538325][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.547092][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.565756][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.575956][ T3309] veth0_macvtap: entered promiscuous mode [ 29.583836][ T3313] veth1_vlan: entered promiscuous mode [ 29.605458][ T40] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.621594][ T3318] veth0_macvtap: entered promiscuous mode [ 29.630757][ T3309] veth1_macvtap: entered promiscuous mode [ 29.640006][ T40] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.649620][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.671664][ T30] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.682267][ T40] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.695639][ T3318] veth1_macvtap: entered promiscuous mode [ 29.721151][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.741204][ T3478] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 29.745514][ T3313] veth0_macvtap: entered promiscuous mode [ 29.772565][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.781761][ T3313] veth1_macvtap: entered promiscuous mode [ 29.806104][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.816155][ T834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.826305][ T834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.849553][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.857460][ T40] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.879592][ T40] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.897245][ T40] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.935769][ T40] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.958996][ T40] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.989064][ T40] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.004238][ T3405] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 30.017387][ T3493] Illegal XDP return value 4291280896 on prog (id 2) dev syz_tun, expect packet loss! [ 30.030485][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.046191][ T3405] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 30.058740][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.157397][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.172147][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 30.172161][ T28] audit: type=1400 audit(1775687489.898:128): avc: denied { open } for pid=3499 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.198621][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.209127][ T28] audit: type=1400 audit(1775687489.898:129): avc: denied { kernel } for pid=3499 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.238615][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.251520][ T28] audit: type=1400 audit(1775687489.898:130): avc: denied { mounton } for pid=3318 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.274761][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.298706][ T28] audit: type=1400 audit(1775687490.018:131): avc: denied { cpu } for pid=3499 comm="syz.3.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 30.364803][ T28] audit: type=1400 audit(1775687490.018:132): avc: denied { write } for pid=3494 comm="syz.1.11" name="hidraw0" dev="devtmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 30.394352][ T28] audit: type=1400 audit(1775687490.028:133): avc: denied { name_bind } for pid=3504 comm="syz.0.14" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 30.417717][ T28] audit: type=1400 audit(1775687490.118:134): avc: denied { allowed } for pid=3494 comm="syz.1.11" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 30.422502][ T3507] syz.2.3 uses obsolete (PF_INET,SOCK_PACKET) [ 30.477111][ T3512] loop4: detected capacity change from 0 to 512 [ 30.486409][ T28] audit: type=1400 audit(1775687490.178:135): avc: denied { create } for pid=3494 comm="syz.1.11" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.510027][ T28] audit: type=1400 audit(1775687490.178:136): avc: denied { map } for pid=3494 comm="syz.1.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.535938][ T28] audit: type=1400 audit(1775687490.178:137): avc: denied { read write } for pid=3494 comm="syz.1.11" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=5125 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 30.578259][ T3512] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.614973][ T3522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 30.626549][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.639129][ T3523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.653746][ T3523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.688479][ T3529] loop4: detected capacity change from 0 to 512 [ 30.697303][ T3529] ======================================================= [ 30.697303][ T3529] WARNING: The mand mount option has been deprecated and [ 30.697303][ T3529] and is ignored by this kernel. Remove the mand [ 30.697303][ T3529] option from the mount to silence this warning. [ 30.697303][ T3529] ======================================================= [ 30.738870][ T3529] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 30.765615][ T3529] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 30.777501][ T3529] EXT4-fs (loop4): 1 truncate cleaned up [ 30.784376][ T3529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.802960][ T3529] io-wq is not configured for unbound workers [ 30.812961][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.891335][ C1] hrtimer: interrupt took 39219 ns [ 30.995269][ T3545] loop2: detected capacity change from 0 to 512 [ 31.461355][ T3583] loop2: detected capacity change from 0 to 128 [ 31.471129][ T3583] netlink: 268 bytes leftover after parsing attributes in process `syz.2.43'. [ 31.614176][ T3594] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 32.194501][ T3612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 32.215803][ T3616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 32.542097][ T3629] loop3: detected capacity change from 0 to 512 [ 32.549249][ T3629] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 32.560434][ T3629] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ee01c, mo2=0002] [ 32.568523][ T3629] System zones: 1-12 [ 32.572987][ T3629] EXT4-fs (loop3): orphan cleanup on readonly fs [ 32.579747][ T3629] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.63: invalid indirect mapped block 2 (level 2) [ 32.593349][ T3629] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 32.593626][ T3629] EXT4-fs (loop3): 1 truncate cleaned up [ 32.602922][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 32.602962][ C1] EXT4-fs (loop3): initial error at time 1775687492: ext4_free_branches:1023: inode 11 [ 32.602997][ C1] EXT4-fs (loop3): last error at time 1775687492: ext4_free_branches:1023: inode 11 [ 32.635569][ T3629] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback. [ 32.651292][ T3629] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 32.667745][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 32.718693][ T3422] IPVS: starting estimator thread 0... [ 32.819016][ T3633] IPVS: using max 2112 ests per chain, 105600 per kthread [ 32.891680][ T3648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.71'. [ 33.352025][ T3662] tipc: Started in network mode [ 33.357176][ T3662] tipc: Node identity 163805405d8a, cluster identity 4711 [ 33.364527][ T3662] tipc: Enabled bearer , priority 0 [ 33.373935][ T3662] syzkaller0: MTU too low for tipc bearer [ 33.379869][ T3662] tipc: Disabling bearer [ 33.391216][ T3664] netlink: 28 bytes leftover after parsing attributes in process `syz.1.76'. [ 33.641809][ T3692] loop2: detected capacity change from 0 to 512 [ 33.670627][ T3692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.684698][ T3692] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.697627][ T3692] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.717225][ T3700] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.879223][ T3716] loop2: detected capacity change from 0 to 1024 [ 33.890526][ T3716] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 33.903035][ T3716] System zones: 0-1, 3-36 [ 33.910335][ T3716] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.99: bad orphan inode 134217728 [ 33.921068][ T3716] loop2: lost filesystem error report for type 5 error -117 [ 33.922645][ T3716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.080014][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.130944][ T3731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 34.140041][ T3731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.103'. [ 34.791396][ T3741] syz.4.107 (3741) used greatest stack depth: 9000 bytes left [ 34.830379][ T3743] netlink: 168 bytes leftover after parsing attributes in process `syz.4.108'. [ 34.887654][ T3747] serio: Serial port ttyS3 [ 35.172414][ T3766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.180983][ T3766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.698942][ T3727] Bluetooth: hci0: command 0x1003 tx timeout [ 35.705319][ T3660] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 35.719345][ T28] kauditd_printk_skb: 108 callbacks suppressed [ 35.719388][ T28] audit: type=1400 audit(1775687495.448:246): avc: denied { read } for pid=3767 comm="syz.2.118" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.748936][ T28] audit: type=1400 audit(1775687495.448:247): avc: denied { open } for pid=3767 comm="syz.2.118" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 35.949653][ T28] audit: type=1400 audit(1775687495.678:248): avc: denied { mount } for pid=3783 comm="syz.1.123" name="/" dev="hugetlbfs" ino=5672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 35.993344][ T3786] loop1: detected capacity change from 0 to 2048 [ 36.010949][ T3786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.023821][ T3786] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.046416][ T28] audit: type=1400 audit(1775687495.768:249): avc: denied { read write open } for pid=3785 comm="syz.1.124" path="/30/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.070292][ T28] audit: type=1400 audit(1775687495.768:250): avc: denied { mounton } for pid=3785 comm="syz.1.124" path="/30/file0/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 36.098679][ T3660] Bluetooth: hci1: command 0x1003 tx timeout [ 36.098679][ T3688] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 36.100494][ T28] audit: type=1400 audit(1775687495.828:251): avc: denied { map } for pid=3785 comm="syz.1.124" path="/30/file0/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 36.137013][ T3786] loop1: detected capacity change from 2048 to 64 [ 36.143606][ T3789] syz.1.124: attempt to access beyond end of device [ 36.143606][ T3789] loop1: rw=8400896, sector=136, nr_sectors = 4 limit=64 [ 36.172986][ T3789] EXT4-fs error (device loop1): ext4_get_inode_loc:4935: inode #15: block 34: comm syz.1.124: unable to read itable block [ 36.192490][ T3789] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6291: IO failure [ 36.201730][ T3789] EXT4-fs error (device loop1): ext4_dirty_inode:6495: inode #15: comm syz.1.124: mark_inode_dirty error [ 36.213562][ T3786] syz.1.124: attempt to access beyond end of device [ 36.213562][ T3786] loop1: rw=8912896, sector=640, nr_sectors = 4 limit=64 [ 36.227729][ T3786] syz.1.124: attempt to access beyond end of device [ 36.227729][ T3786] loop1: rw=8388608, sector=640, nr_sectors = 4 limit=64 [ 36.243154][ T3786] syz.1.124: attempt to access beyond end of device [ 36.243154][ T3786] loop1: rw=8388608, sector=640, nr_sectors = 4 limit=64 [ 36.270474][ T3309] syz-executor: attempt to access beyond end of device [ 36.270474][ T3309] loop1: rw=8400896, sector=136, nr_sectors = 4 limit=64 [ 36.285006][ T3309] EXT4-fs error (device loop1): ext4_get_inode_loc:4935: inode #2: block 34: comm syz-executor: unable to read itable block [ 36.298393][ T3309] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6291: IO failure [ 36.307481][ T3309] EXT4-fs error (device loop1): ext4_dirty_inode:6495: inode #2: comm syz-executor: mark_inode_dirty error [ 36.327019][ T40] kworker/u8:2: attempt to access beyond end of device [ 36.327019][ T40] loop1: rw=8400896, sector=136, nr_sectors = 4 limit=64 [ 36.342100][ T40] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4920: inode #15: block 34: comm kworker/u8:2: unable to read itable block [ 36.357394][ T40] kworker/u8:2: attempt to access beyond end of device [ 36.357394][ T40] loop1: rw=8400896, sector=136, nr_sectors = 4 limit=64 [ 36.371352][ T40] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4920: inode #2: block 34: comm kworker/u8:2: unable to read itable block [ 36.386269][ T3309] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.420296][ T3787] kmmpd-loop1: attempt to access beyond end of device [ 36.420296][ T3787] loop1: rw=8402945, sector=320, nr_sectors = 4 limit=64 [ 36.435196][ T3787] Buffer I/O error on dev loop1, logical block 80, lost sync page write [ 36.629982][ T30] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.671768][ T30] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.679221][ T28] audit: type=1400 audit(1775687496.398:252): avc: denied { module_request } for pid=3797 comm="syz-executor" kmod="netdev-nr5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 36.731608][ T30] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.783023][ T30] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.797976][ T28] audit: type=1400 audit(1775687496.518:253): avc: denied { create } for pid=3808 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 36.824197][ T28] audit: type=1400 audit(1775687496.548:254): avc: denied { listen } for pid=3808 comm="syz.2.130" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 36.856325][ T3797] chnl_net:caif_netlink_parms(): no params data found [ 36.876748][ T28] audit: type=1400 audit(1775687496.598:255): avc: denied { write } for pid=3812 comm="syz.2.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 36.915858][ T3797] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.923143][ T3797] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.931096][ T3797] bridge_slave_0: entered allmulticast mode [ 36.937792][ T3797] bridge_slave_0: entered promiscuous mode [ 36.958017][ T3797] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.973468][ T3797] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.981021][ T3797] bridge_slave_1: entered allmulticast mode [ 36.987731][ T3797] bridge_slave_1: entered promiscuous mode [ 36.999637][ T30] bridge_slave_1: left allmulticast mode [ 37.005305][ T30] bridge_slave_1: left promiscuous mode [ 37.011786][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.019801][ T30] bridge_slave_0: left allmulticast mode [ 37.025605][ T30] bridge_slave_0: left promiscuous mode [ 37.031565][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.092573][ T30] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.102766][ T30] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.112344][ T30] bond0 (unregistering): Released all slaves [ 37.125943][ T3797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.137202][ T3797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.149437][ T30] hsr_slave_0: left promiscuous mode [ 37.155177][ T30] hsr_slave_1: left promiscuous mode [ 37.161185][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.168785][ T30] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.176237][ T30] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.183885][ T30] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.193859][ T30] veth1_macvtap: left promiscuous mode [ 37.199542][ T30] veth0_macvtap: left promiscuous mode [ 37.205188][ T30] veth1_vlan: left promiscuous mode [ 37.210590][ T30] veth0_vlan: left promiscuous mode [ 37.271531][ T30] team0 (unregistering): Port device team_slave_1 removed [ 37.281251][ T30] team0 (unregistering): Port device team_slave_0 removed [ 37.321640][ T3797] team0: Port device team_slave_0 added [ 37.328211][ T3797] team0: Port device team_slave_1 added [ 37.342397][ T3797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.349485][ T3797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.376102][ T3797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.388297][ T3797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.395507][ T3797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.422048][ T3797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.447783][ T3797] hsr_slave_0: entered promiscuous mode [ 37.453814][ T3797] hsr_slave_1: entered promiscuous mode [ 37.460089][ T3797] debugfs: 'hsr0' already exists in 'hsr' [ 37.465833][ T3797] Cannot create hsr debugfs directory [ 37.906234][ T3749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 37.919702][ T3797] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 37.949137][ T3831] tipc: Enabled bearer , priority 0 [ 37.967211][ T3797] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 38.046479][ T3839] syzkaller0: entered promiscuous mode [ 38.055187][ T3839] syzkaller0: entered allmulticast mode [ 38.069077][ T3839] tipc: Resetting bearer [ 38.088193][ T3797] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 38.129575][ T3830] tipc: Resetting bearer [ 38.151643][ T3830] tipc: Disabling bearer [ 38.161149][ T3797] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 38.233868][ T3873] hub 9-0:1.0: USB hub found [ 38.252487][ T3873] hub 9-0:1.0: 8 ports detected [ 38.258282][ T3797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.283194][ T3797] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.300715][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.307899][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.328331][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.335486][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.523761][ T3797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.838261][ T3797] veth0_vlan: entered promiscuous mode [ 38.847614][ T3797] veth1_vlan: entered promiscuous mode [ 38.873456][ T3797] veth0_macvtap: entered promiscuous mode [ 38.887923][ T3797] veth1_macvtap: entered promiscuous mode [ 38.910967][ T3797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.950013][ T3797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.985200][ T50] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.029206][ T50] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.047039][ T3946] netlink: 64 bytes leftover after parsing attributes in process `syz.2.158'. [ 39.052119][ T50] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.129382][ T50] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.262298][ T3972] bridge1: entered promiscuous mode [ 39.275888][ T3972] bridge1: entered allmulticast mode [ 39.304624][ T3972] team0: Port device bridge1 added [ 39.330562][ T3978] bridge0: port 3(team0) entered blocking state [ 39.342185][ T3978] bridge0: port 3(team0) entered disabled state [ 39.352719][ T3978] team0: entered allmulticast mode [ 39.371088][ T3978] team_slave_0: entered allmulticast mode [ 39.435469][ T3978] team_slave_1: entered allmulticast mode [ 39.460318][ T3978] team0: entered promiscuous mode [ 39.472030][ T3978] team_slave_0: entered promiscuous mode [ 39.477901][ T3978] team_slave_1: entered promiscuous mode [ 39.494412][ T3978] bridge0: port 3(team0) entered blocking state [ 39.501105][ T3978] bridge0: port 3(team0) entered forwarding state [ 39.690877][ T4009] Zero length message leads to an empty skb [ 40.096792][ T4035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 40.121736][ T4035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.183'. [ 40.216405][ T4043] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.531278][ T4060] loop3: detected capacity change from 0 to 1024 [ 40.540219][ T4060] EXT4-fs: Ignoring removed mblk_io_submit option [ 40.560267][ T4060] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.589214][ T4060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.801492][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.843967][ T4080] loop3: detected capacity change from 0 to 512 [ 40.919012][ T4080] ext4: Unknown parameter 'euid>00000000000000000000' [ 41.007131][ T4088] capability: warning: `syz.4.204' uses 32-bit capabilities (legacy support in use) [ 41.018422][ T4086] Invalid argument reading file caps for ./file0 [ 41.131670][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 41.131684][ T28] audit: type=1400 audit(1775687500.858:325): avc: denied { create } for pid=4092 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 41.188235][ T28] audit: type=1400 audit(1775687500.908:326): avc: denied { bind } for pid=4092 comm="syz.4.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 41.406263][ T28] audit: type=1400 audit(1775687501.128:327): avc: denied { read } for pid=4104 comm="syz.2.210" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 41.429838][ T28] audit: type=1400 audit(1775687501.128:328): avc: denied { open } for pid=4104 comm="syz.2.210" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 41.851247][ T4043] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.937637][ T4112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.948836][ T4112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.331831][ T4043] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.381903][ T4043] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 42.422399][ T28] audit: type=1326 audit(1775687502.148:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10ae6c819 code=0x7ffc0000 [ 42.447379][ T4123] mmap: syz.2.216 (4123) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 42.457765][ T28] audit: type=1326 audit(1775687502.148:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10ae6c819 code=0x7ffc0000 [ 42.482830][ T57] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.494333][ T57] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.510536][ T57] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.519055][ T57] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.527417][ T28] audit: type=1326 audit(1775687502.168:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10ae6c819 code=0x7ffc0000 [ 42.551629][ T28] audit: type=1326 audit(1775687502.168:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10ae6c819 code=0x7ffc0000 [ 42.576413][ T28] audit: type=1326 audit(1775687502.168:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe10ae6c819 code=0x7ffc0000 [ 42.601255][ T28] audit: type=1326 audit(1775687502.168:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4122 comm="syz.2.216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe10ae6c819 code=0x7ffc0000 [ 42.726027][ T4135] vhci_hcd vhci_hcd.0: invalid port number 0 [ 43.057952][ T4165] syzkaller0: entered promiscuous mode [ 43.064270][ T4165] syzkaller0: entered allmulticast mode [ 43.466411][ T4192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 43.619758][ T4198] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 43.839762][ T4210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.255'. [ 43.861609][ T4210] netlink: 24 bytes leftover after parsing attributes in process `syz.4.255'. [ 43.895370][ T4216] loop0: detected capacity change from 0 to 128 [ 43.922131][ T4220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 43.961792][ T4220] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 44.224433][ T4232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'. [ 44.234742][ T4232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'. [ 44.415871][ T4238] loop2: detected capacity change from 0 to 2048 [ 44.427846][ T4238] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 44.484657][ T4238] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.530269][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.946842][ T4284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.286'. [ 45.012672][ T4289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'. [ 45.045963][ T4289] netlink: 12 bytes leftover after parsing attributes in process `syz.2.288'. [ 45.068946][ T4289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 45.078139][ T4289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.288'. [ 45.165853][ T4299] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.264388][ T4299] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.357847][ T4299] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.441794][ T4299] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.529781][ T271] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.542837][ T271] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.572304][ T271] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.621218][ T271] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.206866][ T4368] veth1_to_bond: entered allmulticast mode [ 46.259427][ T4367] veth1_to_bond: left allmulticast mode [ 46.338837][ T4374] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 46.369812][ T4383] loop4: detected capacity change from 0 to 128 [ 46.383515][ T4383] EXT4-fs: test_dummy_encryption option not supported [ 46.436511][ T4383] loop4: detected capacity change from 0 to 1024 [ 46.457621][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 46.457740][ T4383] ext3: Unknown parameter 'smackfsfloor' [ 46.457681][ T28] audit: type=1400 audit(1775687506.178:468): avc: denied { mounton } for pid=4382 comm="syz.4.324" path="/syzcgroup/cpu/syz4/cpuset.cpus" dev="cgroup" ino=395 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 46.579779][ T4396] openvswitch: netlink: Missing key (keys=40, expected=80) [ 46.596957][ T28] audit: type=1400 audit(1775687506.318:469): avc: denied { name_bind } for pid=4397 comm="syz.3.329" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 46.646316][ T28] audit: type=1400 audit(1775687506.318:470): avc: denied { name_connect } for pid=4397 comm="syz.3.329" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 46.783707][ T4413] loop3: detected capacity change from 0 to 128 [ 46.955700][ T28] audit: type=1326 audit(1775687506.678:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8b88c819 code=0x7ffc0000 [ 47.051500][ T28] audit: type=1326 audit(1775687506.678:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8b88c819 code=0x7ffc0000 [ 47.076955][ T28] audit: type=1326 audit(1775687506.678:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8b88c819 code=0x7ffc0000 [ 47.103849][ T28] audit: type=1326 audit(1775687506.678:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1b8b88c819 code=0x7ffc0000 [ 47.143630][ T28] audit: type=1326 audit(1775687506.678:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8b88c819 code=0x7ffc0000 [ 47.188022][ T28] audit: type=1326 audit(1775687506.678:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8b88c819 code=0x7ffc0000 [ 47.211847][ T28] audit: type=1326 audit(1775687506.678:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4411 comm="syz.4.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1b8b88c819 code=0x7ffc0000 [ 47.241454][ T4422] loop4: detected capacity change from 0 to 512 [ 47.263316][ T4422] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2808: inode #11: comm syz.4.340: corrupted xattr block 95: invalid header [ 47.289051][ T4422] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.297971][ T4422] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 47.308651][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 47.321802][ T4422] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.340: bg 0: block 7: invalid block bitmap [ 47.327349][ C0] EXT4-fs (loop4): initial error at time 1775687507: ext4_expand_extra_isize_ea:2808: inode 11 [ 47.327383][ C0] EXT4-fs (loop4): last error at time 1775687507: ext4_expand_extra_isize_ea:2808: inode 11 [ 47.366007][ T4422] loop4: lost filesystem error report for type 5 error -117 [ 47.366238][ T4422] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6685: Corrupt filesystem [ 47.383556][ T4422] loop4: lost filesystem error report for type 5 error -117 [ 47.383842][ T4422] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2970: inode #11: comm syz.4.340: corrupted xattr block 95: invalid header [ 47.405819][ T4422] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 47.408248][ T4422] EXT4-fs warning (device loop4): ext4_evict_inode:285: xattr delete (err -117) [ 47.426701][ T4422] EXT4-fs (loop4): 1 orphan inode deleted [ 47.433235][ T4422] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.462802][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.413456][ T4320] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 48.931469][ T4493] netlink: 'syz.3.368': attribute type 1 has an invalid length. [ 48.960251][ T4495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.972658][ T4493] 8021q: adding VLAN 0 to HW filter on device bond1 [ 48.982813][ T4495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.009584][ T4499] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.016887][ T4499] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 49.028763][ T4499] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 49.228082][ T4510] loop4: detected capacity change from 0 to 128 [ 49.235156][ T4509] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 49.235156][ T4509] The task syz.3.373 (4509) triggered the difference, watch for misbehavior. [ 49.483979][ T4522] netlink: 83 bytes leftover after parsing attributes in process `syz.4.380'. [ 49.677542][ T4534] loop4: detected capacity change from 0 to 1024 [ 49.690844][ T4534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.718885][ T4534] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 49.735352][ T4534] EXT4-fs error (device loop4): ext4_map_blocks:828: inode #15: comm syz.4.386: lblock 0 mapped to illegal pblock 0 (length 5) [ 49.750234][ T4534] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 117 [ 49.762991][ T4534] EXT4-fs (loop4): This should not happen!! Data will be lost [ 49.762991][ T4534] [ 49.794767][ T3313] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 49.806761][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.051721][ T4560] loop3: detected capacity change from 0 to 1024 [ 50.091678][ T4560] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.430612][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.540747][ T4580] loop0: detected capacity change from 0 to 1024 [ 50.572308][ T4580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 50.606892][ T4580] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.629236][ T4580] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.396: bg 0: block 112: padding at end of block bitmap is not set [ 50.692854][ T271] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #15: block 3: comm kworker/u8:6: lblock 3 mapped to illegal pblock 3 (length 3) [ 50.707835][ T271] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 50.723822][ T271] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.723822][ T271] [ 50.735516][ T271] EXT4-fs error (device loop0): ext4_map_blocks:828: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 5) [ 50.750563][ T271] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 50.771098][ T271] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.771098][ T271] [ 50.783526][ T3316] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 50.806049][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 50.972629][ T4599] loop4: detected capacity change from 0 to 128 [ 50.986721][ T4599] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 50.994295][ T4599] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 51.093175][ T4626] netlink: 'syz.0.404': attribute type 4 has an invalid length. [ 51.104883][ T4626] netlink: 'syz.0.404': attribute type 4 has an invalid length. [ 51.291281][ T4635] netlink: 4 bytes leftover after parsing attributes in process `syz.5.409'. [ 51.334780][ T4635] 8021q: adding VLAN 0 to HW filter on device team1 [ 51.670470][ T4642] chnl_net:caif_netlink_parms(): no params data found [ 51.787252][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 51.787267][ T28] audit: type=1400 audit(1775687511.508:515): avc: denied { read write } for pid=4669 comm="syz.3.419" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 51.836313][ T28] audit: type=1400 audit(1775687511.508:516): avc: denied { open } for pid=4669 comm="syz.3.419" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 51.873988][ T4642] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.906343][ T4642] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.933111][ T4642] bridge_slave_0: entered allmulticast mode [ 51.963904][ T4642] bridge_slave_0: entered promiscuous mode [ 52.005337][ T4682] tipc: Started in network mode [ 52.010799][ T4682] tipc: Node identity 0265d654b57a, cluster identity 4711 [ 52.028606][ T4682] tipc: Enabled bearer , priority 0 [ 52.039474][ T4642] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.048966][ T4642] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.059706][ T4642] bridge_slave_1: entered allmulticast mode [ 52.069306][ T4642] bridge_slave_1: entered promiscuous mode [ 52.092319][ T28] audit: type=1400 audit(1775687511.818:517): avc: denied { ioctl } for pid=4679 comm="syz.2.423" path="socket:[15775]" dev="sockfs" ino=15775 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.109642][ T4682] syzkaller0: entered promiscuous mode [ 52.135764][ T4682] syzkaller0: entered allmulticast mode [ 52.144936][ T4682] tipc: Resetting bearer [ 52.154688][ T4687] syzkaller1: entered promiscuous mode [ 52.161627][ T4687] syzkaller1: entered allmulticast mode [ 52.182261][ T4681] tipc: Resetting bearer [ 52.201380][ T4681] tipc: Disabling bearer [ 52.220534][ T4642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.231283][ T4642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.264845][ T4642] team0: Port device team_slave_0 added [ 52.282928][ T4642] team0: Port device team_slave_1 added [ 52.299841][ T4642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.307086][ T4642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.334679][ T4642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.346783][ T4642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.355632][ T4642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 52.382352][ T4642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.394046][ T28] audit: type=1400 audit(1775687512.118:518): avc: denied { mounton } for pid=4712 comm="syz.5.430" path="/proc/111/cgroup" dev="proc" ino=15802 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 52.437361][ T28] audit: type=1400 audit(1775687512.148:519): avc: denied { name_bind } for pid=4715 comm="syz.0.431" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 52.442337][ T4642] hsr_slave_0: entered promiscuous mode [ 52.465093][ T4642] hsr_slave_1: entered promiscuous mode [ 52.471229][ T4642] debugfs: 'hsr0' already exists in 'hsr' [ 52.476969][ T4642] Cannot create hsr debugfs directory [ 52.539444][ T4642] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 52.547991][ T4642] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 52.557020][ T4642] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 52.565983][ T4642] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 52.601876][ T4642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.616191][ T4642] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.626432][ T271] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.633677][ T271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.644474][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.651626][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.712706][ T4642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.766932][ T4736] tipc: Started in network mode [ 52.773262][ T4736] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 52.782901][ T4736] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 52.791972][ T4736] tipc: Enabled bearer , priority 10 [ 52.824178][ T4739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 52.863093][ T4739] 8021q: adding VLAN 0 to HW filter on device team1 [ 52.947619][ T28] audit: type=1400 audit(1775687512.668:520): avc: denied { read } for pid=4757 comm="syz.3.439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 52.991721][ T4642] veth0_vlan: entered promiscuous mode [ 53.000136][ T4642] veth1_vlan: entered promiscuous mode [ 53.026897][ T4642] veth0_macvtap: entered promiscuous mode [ 53.037375][ T4642] veth1_macvtap: entered promiscuous mode [ 53.053956][ T4642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.066016][ T4642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.076671][ T40] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.085894][ T40] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.100079][ T40] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.111194][ T28] audit: type=1400 audit(1775687512.838:521): avc: denied { create } for pid=4768 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 53.132683][ T40] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.144800][ T28] audit: type=1400 audit(1775687512.878:522): avc: denied { bind } for pid=4768 comm="syz.3.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 53.187643][ T28] audit: type=1400 audit(1775687512.908:523): avc: denied { mounton } for pid=4642 comm="syz-executor" path="/root/syzkaller.C7wsUw/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=16175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 53.231934][ T28] audit: type=1400 audit(1775687512.948:524): avc: denied { read } for pid=4770 comm="syz.5.446" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 53.351551][ T4782] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 53.359247][ T4782] vhci_hcd vhci_hcd.2: default hub control req: 0300 vfffa i0005 l2 [ 53.408320][ T4790] netlink: 'syz.3.450': attribute type 4 has an invalid length. [ 53.435561][ T4790] netlink: 'syz.3.450': attribute type 4 has an invalid length. [ 53.439967][ T4792] netlink: 'syz.5.461': attribute type 7 has an invalid length. [ 53.481165][ T4796] loop5: detected capacity change from 0 to 1024 [ 53.490888][ T4796] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 53.503905][ T4796] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.526604][ T3797] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 53.760182][ T271] Bluetooth: hci0: Frame reassembly failed (-84) [ 53.908776][ T9] tipc: Node number set to 1 [ 54.051596][ T4813] SELinux: failed to load policy [ 54.314117][ T4825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.467'. [ 54.323668][ T4825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.467'. [ 54.358204][ T4827] loop3: detected capacity change from 0 to 128 [ 54.530207][ T4845] bond0: option arp_validate: invalid value (55553) [ 54.530219][ T57] bond0: (slave bond_slave_0): interface is now down [ 54.538506][ T4844] netlink: 16 bytes leftover after parsing attributes in process `syz.3.477'. [ 54.546159][ T57] bond0: (slave bond_slave_1): interface is now down [ 54.561586][ T57] bond0: now running without any active interface! [ 54.577189][ T4845] IPv6: sit1: Disabled Multicast RS [ 54.595124][ T4848] loop0: detected capacity change from 0 to 1024 [ 54.613037][ T4848] EXT4-fs: inline encryption not supported [ 54.638027][ T4848] EXT4-fs: Ignoring removed bh option [ 54.646150][ T4848] EXT4-fs (loop0): bad geometry: bigalloc file system with non-zero first_data_block [ 54.646150][ T4848] [ 54.752666][ T4853] netlink: 9 bytes leftover after parsing attributes in process `syz.2.480'. [ 55.175398][ T4879] loop2: detected capacity change from 0 to 512 [ 55.182333][ T4879] EXT4-fs: Ignoring removed orlov option [ 55.190355][ T4879] EXT4-fs error (device loop2): ext4_iget_extra_inode:5040: inode #15: comm syz.2.491: corrupted in-inode xattr: invalid ea_ino [ 55.203787][ T4879] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 55.204124][ T4879] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.491: couldn't read orphan inode 15 (err -117) [ 55.213441][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 55.213459][ C1] EXT4-fs (loop2): initial error at time 1775687514: ext4_iget_extra_inode:5040: inode 15 [ 55.213483][ C1] EXT4-fs (loop2): last error at time 1775687514: ext4_iget_extra_inode:5040: inode 15 [ 55.251733][ T4879] loop2: lost filesystem error report for type 5 error -117 [ 55.252300][ T4879] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.276675][ T4879] SELinux: Context system_u:object_r:inetd_var_run_t:s0 is not valid (left unmapped). [ 55.294808][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.346369][ T4885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.355136][ T4885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.778802][ T3660] Bluetooth: hci0: command 0x1003 tx timeout [ 55.779801][ T3688] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.858356][ T4985] loop3: detected capacity change from 0 to 256 [ 58.071586][ T5101] netlink: 24 bytes leftover after parsing attributes in process `syz.6.524'. [ 58.081271][ T5101] netlink: 24 bytes leftover after parsing attributes in process `syz.6.524'. [ 58.108589][ T5106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.117847][ T5106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.270567][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 58.270583][ T28] audit: type=1400 audit(1775687517.998:536): avc: denied { create } for pid=5133 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.331002][ T28] audit: type=1400 audit(1775687518.028:537): avc: denied { bind } for pid=5133 comm="syz.3.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.357852][ T28] audit: type=1400 audit(1775687518.058:538): avc: denied { mounton } for pid=5138 comm="syz.3.533" path="/109/file0" dev="tmpfs" ino=576 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 58.481423][ T5149] SELinux: failed to load policy [ 58.491518][ T5157] loop0: detected capacity change from 0 to 128 [ 58.544112][ T28] audit: type=1400 audit(1775687518.268:539): avc: denied { ioctl } for pid=5158 comm="syz.2.541" path="socket:[17126]" dev="sockfs" ino=17126 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 58.573923][ T28] audit: type=1400 audit(1775687518.298:540): avc: denied { listen } for pid=5158 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.595170][ T28] audit: type=1400 audit(1775687518.298:541): avc: denied { accept } for pid=5158 comm="syz.2.541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.660273][ T5164] netlink: 12 bytes leftover after parsing attributes in process `syz.3.543'. [ 58.699886][ T28] audit: type=1400 audit(1775687518.428:542): avc: denied { accept } for pid=5169 comm="syz.5.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 58.753647][ T5174] syzkaller0: entered promiscuous mode [ 58.759557][ T5174] syzkaller0: entered allmulticast mode [ 58.865441][ T5186] loop3: detected capacity change from 0 to 512 [ 58.899618][ T5186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.936205][ T5197] netlink: 44 bytes leftover after parsing attributes in process `syz.6.557'. [ 58.945658][ T5186] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.101872][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.187261][ T5207] -1: renamed from syzkaller0 [ 59.213764][ T5209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 59.222961][ T5209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.493599][ T5224] ip6gre1: entered promiscuous mode [ 59.499574][ T5224] ip6gre1: entered allmulticast mode [ 59.600820][ T5230] netlink: 'syz.6.572': attribute type 1 has an invalid length. [ 59.720812][ T5234] netlink: 68 bytes leftover after parsing attributes in process `syz.6.574'. [ 59.735383][ T5236] loop2: detected capacity change from 0 to 128 [ 59.820657][ T28] audit: type=1400 audit(1775687519.548:543): avc: denied { read } for pid=5241 comm="syz.5.578" path="socket:[17806]" dev="sockfs" ino=17806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.821012][ T28] audit: type=1400 audit(1775687519.548:544): avc: denied { connect } for pid=5241 comm="syz.5.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.910202][ T5248] syzkaller0: entered promiscuous mode [ 59.910225][ T5248] syzkaller0: entered allmulticast mode [ 59.919706][ T57] kworker/u8:4: attempt to access beyond end of device [ 59.919706][ T57] loop2: rw=1, sector=145, nr_sectors = 16 limit=128 [ 59.940234][ T57] kworker/u8:4: attempt to access beyond end of device [ 59.940234][ T57] loop2: rw=1, sector=169, nr_sectors = 8 limit=128 [ 59.940268][ T57] kworker/u8:4: attempt to access beyond end of device [ 59.940268][ T57] loop2: rw=1, sector=185, nr_sectors = 8 limit=128 [ 59.940298][ T57] kworker/u8:4: attempt to access beyond end of device [ 59.940298][ T57] loop2: rw=1, sector=201, nr_sectors = 8 limit=128 [ 59.940383][ T57] kworker/u8:4: attempt to access beyond end of device [ 59.940383][ T57] loop2: rw=1, sector=217, nr_sectors = 8 limit=128 [ 59.940448][ T57] kworker/u8:4: attempt to access beyond end of device [ 59.940448][ T57] loop2: rw=1, sector=233, nr_sectors = 8 limit=128 [ 59.940479][ T57] kworker/u8:4: attempt to access beyond end of device [ 59.940479][ T57] loop2: rw=1, sector=249, nr_sectors = 8 limit=128 [ 59.940572][ T57] kworker/u8:4: attempt to access beyond end of device [ 59.940572][ T57] loop2: rw=1, sector=265, nr_sectors = 8 limit=128 [ 59.940598][ T57] kworker/u8:4: attempt to access beyond end of device [ 59.940598][ T57] loop2: rw=1, sector=281, nr_sectors = 8 limit=128 [ 59.940693][ T57] kworker/u8:4: attempt to access beyond end of device [ 59.940693][ T57] loop2: rw=1, sector=297, nr_sectors = 8 limit=128 [ 59.998760][ T5251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.581'. [ 60.184526][ T5261] loop5: detected capacity change from 0 to 1024 [ 60.184868][ T5261] EXT4-fs: Ignoring removed mblk_io_submit option [ 60.189999][ T28] audit: type=1400 audit(1775687519.748:545): avc: denied { block_suspend } for pid=5245 comm="syz.3.580" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 60.347561][ T5261] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 60.389487][ T3797] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.849039][ T5281] netlink: 12 bytes leftover after parsing attributes in process `syz.2.589'. [ 60.935494][ T5288] loop2: detected capacity change from 0 to 512 [ 60.944588][ T5288] EXT4-fs: Ignoring removed nobh option [ 61.005960][ T5288] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #3: comm syz.2.592: corrupted inode contents [ 61.018792][ T5288] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.018942][ T5288] EXT4-fs error (device loop2): ext4_dirty_inode:6495: inode #3: comm syz.2.592: mark_inode_dirty error [ 61.039780][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 61.039813][ C1] EXT4-fs (loop2): initial error at time 1775687520: ext4_do_update_inode:5602: inode 3 [ 61.039850][ C1] EXT4-fs (loop2): last error at time 1775687520: ext4_do_update_inode:5602: inode 3 [ 61.067265][ T5288] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.084294][ T5288] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #3: comm syz.2.592: corrupted inode contents [ 61.106014][ T5288] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.106220][ T5288] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #3: comm syz.2.592: mark_inode_dirty error [ 61.107093][ T5302] loop0: detected capacity change from 0 to 256 [ 61.115945][ T5288] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 61.134518][ T5288] EXT4-fs error (device loop2): ext4_acquire_dquot:7026: comm syz.2.592: Failed to acquire dquot type 0 [ 61.156279][ T5288] loop2: lost filesystem error report for type 5 error -117 [ 61.174158][ T5288] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #16: comm syz.2.592: corrupted inode contents [ 61.195631][ T5288] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.195968][ T5288] EXT4-fs error (device loop2): ext4_dirty_inode:6495: inode #16: comm syz.2.592: mark_inode_dirty error [ 61.225888][ T5288] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.226315][ T5288] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #16: comm syz.2.592: corrupted inode contents [ 61.248826][ T5288] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.249026][ T5288] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #16: comm syz.2.592: mark_inode_dirty error [ 61.275793][ T5288] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.291194][ T5288] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #16: comm syz.2.592: corrupted inode contents [ 61.314411][ T5288] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.314552][ T5288] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 61.334194][ T5288] loop2: lost filesystem error report for type 5 error -117 [ 61.334440][ T5288] EXT4-fs error (device loop2): ext4_do_update_inode:5602: inode #16: comm syz.2.592: corrupted inode contents [ 61.354415][ T5288] loop2: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 61.354644][ T5288] EXT4-fs error (device loop2): ext4_truncate:4602: inode #16: comm syz.2.592: mark_inode_dirty error [ 61.376492][ T5288] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 61.386365][ T5288] loop2: lost filesystem error report for type 5 error -117 [ 61.387023][ T5288] EXT4-fs (loop2): 1 truncate cleaned up [ 61.400782][ T5288] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 61.414421][ T5288] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.482768][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.507423][ T5324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.516704][ T5324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.304503][ T28] kauditd_printk_skb: 101 callbacks suppressed [ 63.304539][ T28] audit: type=1400 audit(1775687523.028:645): avc: denied { read write } for pid=5413 comm="syz.0.641" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.369284][ T28] audit: type=1400 audit(1775687523.058:646): avc: denied { open } for pid=5413 comm="syz.0.641" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.438745][ T28] audit: type=1400 audit(1775687523.068:647): avc: denied { ioctl } for pid=5413 comm="syz.0.641" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.507163][ T28] audit: type=1400 audit(1775687523.228:648): avc: denied { create } for pid=5419 comm="syz.6.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.553780][ T28] audit: type=1400 audit(1775687523.258:649): avc: denied { shutdown } for pid=5419 comm="syz.6.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.599569][ T28] audit: type=1400 audit(1775687523.258:650): avc: denied { getopt } for pid=5419 comm="syz.6.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.641272][ T28] audit: type=1400 audit(1775687523.258:651): avc: denied { connect } for pid=5419 comm="syz.6.643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.702383][ T28] audit: type=1400 audit(1775687523.258:652): avc: denied { name_connect } for pid=5419 comm="syz.6.643" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 63.748843][ T28] audit: type=1400 audit(1775687523.258:653): avc: denied { write } for pid=5419 comm="syz.6.643" lport=36314 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 63.801266][ T5424] loop6: detected capacity change from 0 to 512 [ 63.807911][ T28] audit: type=1400 audit(1775687523.258:654): avc: denied { getopt } for pid=5419 comm="syz.6.643" lport=36314 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 63.864794][ T5424] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.878195][ T5424] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.942388][ T4642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.045155][ T5442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.650'. [ 64.135399][ T5444] syzkaller0: entered promiscuous mode [ 64.141964][ T5444] syzkaller0: entered allmulticast mode [ 64.245002][ T5453] netlink: 24 bytes leftover after parsing attributes in process `syz.6.656'. [ 64.269835][ T5453] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5453 comm=syz.6.656 [ 64.616570][ T5482] netlink: 'syz.5.669': attribute type 10 has an invalid length. [ 64.630549][ T5482] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 64.672045][ T5486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.671'. [ 64.693280][ T5486] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 64.711407][ T5493] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.718923][ T5493] IPv6: NLM_F_CREATE should be set when creating new route [ 64.779072][ T5497] netlink: 40 bytes leftover after parsing attributes in process `syz.2.675'. [ 64.812567][ T5497] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5497 comm=syz.2.675 [ 64.827012][ T5501] netlink: 'syz.0.677': attribute type 10 has an invalid length. [ 64.841613][ T5501] team0: Failed to send port change of device netdevsim1 via netlink (err -105) [ 64.863057][ T5501] team0: Failed to send options change via netlink (err -105) [ 64.881810][ T5501] team0: Port device netdevsim1 added [ 64.921680][ T5505] IPv6: Can't replace route, no match found [ 65.004738][ T5513] loop3: detected capacity change from 0 to 2048 [ 65.041527][ T5513] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.108707][ T5513] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.113511][ T5521] syzkaller0: entered promiscuous mode [ 65.148990][ T5521] syzkaller0: entered allmulticast mode [ 65.195342][ T5513] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 65.323933][ T5513] netlink: 28 bytes leftover after parsing attributes in process `syz.3.683'. [ 65.330771][ T5529] syzkaller0: entered promiscuous mode [ 65.338588][ T5529] syzkaller0: entered allmulticast mode [ 65.393005][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.816702][ T5548] loop3: detected capacity change from 0 to 1024 [ 65.857999][ T5548] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 65.878063][ T5548] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.926030][ T5548] EXT4-fs error (device loop3): ext4_map_blocks:828: inode #15: comm syz.3.695: lblock 0 mapped to illegal pblock 0 (length 1) [ 65.979663][ T5548] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 66.048923][ T5548] EXT4-fs (loop3): This should not happen!! Data will be lost [ 66.048923][ T5548] [ 66.060299][ T5563] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.695: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.081096][ T5563] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.695: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.089890][ T5562] loop6: detected capacity change from 0 to 4096 [ 66.104573][ T5563] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.695: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.118747][ T5563] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.695: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.123233][ T5565] loop0: detected capacity change from 0 to 2048 [ 66.132900][ T5562] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.155568][ T5563] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.695: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.171095][ T5563] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.695: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.171366][ T5562] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #15: comm syz.6.699: corrupted inode contents [ 66.185198][ T5547] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.695: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.203082][ T5562] EXT4-fs error (device loop6): ext4_dirty_inode:6495: inode #15: comm syz.6.699: mark_inode_dirty error [ 66.210372][ T5547] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.695: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.222293][ T5562] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #15: comm syz.6.699: corrupted inode contents [ 66.234660][ T5563] EXT4-fs error (device loop3): ext4_map_blocks:786: inode #15: comm syz.3.695: lblock 0 mapped to illegal pblock 0 (length 1) [ 66.254076][ T5562] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.699: mark_inode_dirty error [ 66.271415][ T5562] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #15: comm syz.6.699: corrupted inode contents [ 66.272276][ T5565] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.293626][ T5562] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #15: comm syz.6.699: mark_inode_dirty error [ 66.308133][ T5562] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #15: comm syz.6.699: corrupted inode contents [ 66.328908][ T5562] EXT4-fs error (device loop6): ext4_truncate:4602: inode #15: comm syz.6.699: mark_inode_dirty error [ 66.341506][ T5562] EXT4-fs error (device loop6) in ext4_setattr:6028: Corrupt filesystem [ 66.350667][ T5567] EXT4-fs error (device loop6): ext4_do_update_inode:5602: inode #15: comm syz.6.699: corrupted inode contents [ 66.386569][ T5565] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 66.404915][ T5565] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 578 with error 28 [ 66.417377][ T5565] EXT4-fs (loop0): This should not happen!! Data will be lost [ 66.417377][ T5565] [ 66.432260][ T5565] EXT4-fs (loop0): Total free blocks count 0 [ 66.440406][ T5565] EXT4-fs (loop0): Free/Dirty block details [ 66.440994][ T4642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.446558][ T5565] EXT4-fs (loop0): free_blocks=4096 [ 66.461367][ T5565] EXT4-fs (loop0): dirty_blocks=592 [ 66.466793][ T5565] EXT4-fs (loop0): Block reservation details [ 66.480222][ T5565] EXT4-fs (loop0): i_reserved_data_blocks=37 [ 66.543885][ T3316] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 66.560819][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.666981][ T5578] loop0: detected capacity change from 0 to 256 [ 66.697843][ T5578] loop0: detected capacity change from 0 to 764 [ 66.717648][ T5578] iso9660: Unknown parameter 'ÿ0xffffffffffffffff' [ 66.725016][ T3308] EXT4-fs warning (device loop3): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 66.750995][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 66.839764][ T5591] syzkaller0: entered promiscuous mode [ 66.858858][ T5591] syzkaller0: entered allmulticast mode [ 66.920549][ T5596] loop3: detected capacity change from 0 to 128 [ 66.952785][ T5598] loop6: detected capacity change from 0 to 1024 [ 67.002561][ T5598] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.212612][ T4642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.280749][ T5628] netlink: 'syz.3.725': attribute type 4 has an invalid length. [ 67.299387][ T5620] syzkaller0: entered promiscuous mode [ 67.331888][ T5620] syzkaller0: entered allmulticast mode [ 67.686021][ T5642] syzkaller0: entered promiscuous mode [ 67.691566][ T5642] syzkaller0: entered allmulticast mode [ 67.738502][ T5658] pimreg: entered allmulticast mode [ 67.877772][ T5663] syzkaller0: entered promiscuous mode [ 67.883414][ T5663] syzkaller0: entered allmulticast mode [ 67.924982][ T5665] syzkaller0: entered promiscuous mode [ 67.931277][ T5665] syzkaller0: entered allmulticast mode [ 68.250414][ T5682] netlink: 24 bytes leftover after parsing attributes in process `syz.6.740'. [ 68.284144][ T5682] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5682 comm=syz.6.740 [ 68.356833][ T5686] bridge_slave_0: left allmulticast mode [ 68.363523][ T5686] bridge_slave_0: left promiscuous mode [ 68.383882][ T5686] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.394225][ T5686] bridge_slave_1: left allmulticast mode [ 68.402351][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 68.402417][ T28] audit: type=1400 audit(1775687528.128:711): avc: denied { ioctl } for pid=5685 comm="syz.6.742" path="socket:[19067]" dev="sockfs" ino=19067 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.438438][ T5686] bridge_slave_1: left promiscuous mode [ 68.444414][ T5686] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.454652][ T5686] bond0: (slave bond_slave_0): Releasing backup interface [ 68.470049][ T5686] bond0: (slave bond_slave_1): Releasing backup interface [ 68.492117][ T5686] team0: Failed to send options change via netlink (err -105) [ 68.510803][ T5686] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 68.520731][ T5686] team0: Port device team_slave_0 removed [ 68.532181][ T5686] team0: Failed to send options change via netlink (err -105) [ 68.547317][ T5686] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 68.557366][ T5686] team0: Port device team_slave_1 removed [ 68.564806][ T5686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.572511][ T5686] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.582129][ T5686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.590096][ T5686] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.600550][ T5686] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 68.640381][ T5689] team0: Failed to send options change via netlink (err -105) [ 68.648385][ T5689] team0: Mode changed to "activebackup" [ 68.722283][ T5703] loop6: detected capacity change from 0 to 512 [ 68.755730][ T5697] syzkaller0: entered promiscuous mode [ 68.763701][ T5697] syzkaller0: entered allmulticast mode [ 68.829678][ T28] audit: type=1400 audit(1775687528.548:712): avc: denied { remount } for pid=5702 comm="syz.6.746" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 68.903676][ T5708] netlink: 'syz.0.748': attribute type 10 has an invalid length. [ 68.939392][ T5708] team0: Device xfrm0 is of different type [ 69.000814][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.750'. [ 69.437657][ T28] audit: type=1400 audit(1775687529.158:713): avc: denied { create } for pid=5723 comm="syz.0.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.485966][ T28] audit: type=1400 audit(1775687529.188:714): avc: denied { create } for pid=5723 comm="syz.0.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 69.567645][ T5732] loop0: detected capacity change from 0 to 1024 [ 69.621280][ T28] audit: type=1400 audit(1775687529.348:715): avc: denied { getopt } for pid=5733 comm="syz.6.758" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 69.659771][ T5732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.695959][ T28] audit: type=1400 audit(1775687529.418:716): avc: denied { execute } for pid=5731 comm="syz.0.756" path="/126/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.753399][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.825994][ T5742] syzkaller0: entered promiscuous mode [ 69.831944][ T5742] syzkaller0: entered allmulticast mode [ 69.999805][ C1] sd 0:0:1:0: [sda] tag#757 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 70.011028][ C1] sd 0:0:1:0: [sda] tag#757 CDB: Read(6) 08 00 00 00 00 00 [ 70.048187][ T28] audit: type=1400 audit(1775687529.768:717): avc: denied { bind } for pid=5748 comm="syz.0.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.092524][ T5753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.764'. [ 70.094820][ T5752] loop0: detected capacity change from 0 to 512 [ 70.117109][ T5752] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 70.130304][ T28] audit: type=1400 audit(1775687529.858:718): avc: denied { watch watch_reads } for pid=5750 comm="syz.0.765" path="/130" dev="tmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.316204][ T5768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.770'. [ 70.746612][ C1] sd 0:0:1:0: [sda] tag#758 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 70.757491][ C1] sd 0:0:1:0: [sda] tag#758 CDB: Read(6) 08 00 00 00 00 00 [ 70.764867][ C1] sd 0:0:1:0: [sda] tag#759 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 70.775347][ C1] sd 0:0:1:0: [sda] tag#759 CDB: Read(6) 08 00 00 00 00 00 [ 70.782852][ C1] sd 0:0:1:0: [sda] tag#760 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 70.793159][ C1] sd 0:0:1:0: [sda] tag#760 CDB: Read(6) 08 00 00 00 00 00 [ 70.800574][ C1] sd 0:0:1:0: [sda] tag#761 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 70.811194][ C1] sd 0:0:1:0: [sda] tag#761 CDB: Read(6) 08 00 00 00 00 00 [ 70.818742][ T3688] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 70.818791][ C1] sd 0:0:1:0: [sda] tag#762 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 70.835439][ C1] sd 0:0:1:0: [sda] tag#762 CDB: Read(6) 08 00 00 00 00 00 [ 70.843129][ C1] sd 0:0:1:0: [sda] tag#763 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 70.853759][ C1] sd 0:0:1:0: [sda] tag#763 CDB: Read(6) 08 00 00 00 00 00 [ 70.861007][ C1] sd 0:0:1:0: [sda] tag#764 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 70.871458][ C1] sd 0:0:1:0: [sda] tag#764 CDB: Read(6) 08 00 00 00 00 00 [ 70.878717][ C1] sd 0:0:1:0: [sda] tag#765 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 70.889610][ C1] sd 0:0:1:0: [sda] tag#765 CDB: Read(6) 08 00 00 00 00 00 [ 70.896841][ C1] sd 0:0:1:0: [sda] tag#704 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 70.907462][ C1] sd 0:0:1:0: [sda] tag#704 CDB: Read(6) 08 00 00 00 00 00 [ 70.923934][ T5783] netlink: 'syz.2.775': attribute type 1 has an invalid length. [ 71.188832][ T28] audit: type=1400 audit(1775687530.888:719): avc: denied { name_connect } for pid=5795 comm="syz.0.778" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 71.222211][ T5790] netlink: 'syz.5.777': attribute type 29 has an invalid length. [ 71.254712][ T28] audit: type=1400 audit(1775687530.898:720): avc: denied { accept } for pid=5795 comm="syz.0.778" laddr=fe80::13 lport=42149 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 71.344889][ T5799] loop0: detected capacity change from 0 to 512 [ 71.391243][ T5799] EXT4-fs: Ignoring removed nobh option [ 71.407552][ T5799] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 71.454214][ T5799] EXT4-fs (loop0): 1 truncate cleaned up [ 71.463261][ T5799] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.504348][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.603257][ T5816] syzkaller0: entered promiscuous mode [ 71.610387][ T5816] syzkaller0: entered allmulticast mode [ 71.631205][ T5801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.642826][ T5801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.669771][ T50] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.952104][ T5831] netlink: 67 bytes leftover after parsing attributes in process `syz.2.793'. [ 71.958909][ T5833] syzkaller0: entered promiscuous mode [ 71.978700][ T5833] syzkaller0: entered allmulticast mode [ 72.177090][ T5841] vxcan1: tx drop: invalid da for name 0x0000000000000001 [ 72.378709][ T5850] loop2: detected capacity change from 0 to 1024 [ 72.414620][ T5850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 72.448859][ T5850] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.574340][ T834] EXT4-fs error (device loop2): ext4_map_blocks:828: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 1) [ 72.593484][ T834] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 72.618214][ T834] EXT4-fs (loop2): This should not happen!! Data will be lost [ 72.618214][ T834] [ 72.638638][ T3318] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 72.650710][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 72.791592][ T5866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.805'. [ 72.821514][ T5873] netlink: 'syz.2.809': attribute type 39 has an invalid length. [ 73.395863][ T5882] loop2: detected capacity change from 0 to 8192 [ 73.541462][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 73.541477][ T28] audit: type=1400 audit(1775687533.268:740): avc: denied { mounton } for pid=5881 comm="syz.2.813" path="/203/file2/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 73.599346][ T5886] loop2: detected capacity change from 8192 to 0 [ 73.613186][ T5882] Buffer I/O error on dev loop2, logical block 33, lost sync page write [ 73.623379][ T5883] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 73.632155][ T5882] Buffer I/O error on dev loop2, logical block 2, lost sync page write [ 73.641583][ T5882] FAT-fs (loop2): unable to read inode block for updating (i_pos 1051) [ 73.650226][ T5883] FAT-fs (loop2): FAT read failed (blocknr 2) [ 73.657464][ T5883] FAT-fs (loop2): unable to read inode block for updating (i_pos 1044) [ 73.659135][ T5882] Buffer I/O error on dev loop2, logical block 282, lost async page write [ 73.666823][ T5883] FAT-fs (loop2): unable to read inode block for updating (i_pos 1044) [ 73.675217][ T5882] Buffer I/O error on dev loop2, logical block 283, lost async page write [ 73.692575][ T5882] Buffer I/O error on dev loop2, logical block 285, lost async page write [ 73.701738][ T3688] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.708169][ T5882] Buffer I/O error on dev loop2, logical block 287, lost async page write [ 73.717299][ T5882] Buffer I/O error on dev loop2, logical block 288, lost async page write [ 73.740605][ T5882] Buffer I/O error on dev loop2, logical block 290, lost async page write [ 73.749832][ T5882] Buffer I/O error on dev loop2, logical block 292, lost async page write [ 73.799197][ T3318] FAT-fs (loop2): Directory bread(block 65) failed [ 73.805792][ T3318] FAT-fs (loop2): Directory bread(block 66) failed [ 73.812491][ T3318] FAT-fs (loop2): Directory bread(block 67) failed [ 73.819518][ T3318] FAT-fs (loop2): Directory bread(block 68) failed [ 73.826100][ T3318] FAT-fs (loop2): Directory bread(block 69) failed [ 73.832914][ T3318] FAT-fs (loop2): Directory bread(block 70) failed [ 73.839639][ T3318] FAT-fs (loop2): Directory bread(block 71) failed [ 73.854398][ T40] FAT-fs (loop2): unable to read inode block for updating (i_pos 1051) [ 73.863155][ T40] FAT-fs (loop2): unable to read inode block for updating (i_pos 1044) [ 73.872233][ T3318] FAT-fs (loop2): unable to read inode block for updating (i_pos 1051) [ 73.880545][ T3318] FAT-fs (loop2): unable to read inode block for updating (i_pos 1051) [ 73.888940][ T3318] FAT-fs (loop2): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 73.902080][ T3318] FAT-fs (loop2): unable to read inode block for updating (i_pos 1044) [ 73.910701][ T3318] FAT-fs (loop2): unable to read inode block for updating (i_pos 1044) [ 73.919259][ T3318] FAT-fs (loop2): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck [ 74.338708][ T3660] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 74.341633][ T3688] Bluetooth: hci1: command 0x1003 tx timeout [ 74.352470][ T28] audit: type=1400 audit(1775687534.078:741): avc: denied { accept } for pid=5895 comm="syz.5.820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.445540][ T28] audit: type=1400 audit(1775687534.168:742): avc: denied { create } for pid=5897 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.485715][ T5900] loop0: detected capacity change from 0 to 512 [ 74.502875][ T28] audit: type=1400 audit(1775687534.168:743): avc: denied { setopt } for pid=5897 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.533239][ T5900] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #12: comm syz.0.822: missing EA_INODE flag [ 74.545122][ T5900] fserror_report: 1 callbacks suppressed [ 74.545177][ T5900] loop0: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 74.559113][ T5900] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.822: error while reading EA inode 12 err=-117 [ 74.580617][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 74.580652][ C1] EXT4-fs (loop0): initial error at time 1775687534: ext4_xattr_inode_iget:441: inode 12 [ 74.580689][ C1] EXT4-fs (loop0): last error at time 1775687534: ext4_xattr_inode_iget:441: inode 12 [ 74.597176][ T28] audit: type=1400 audit(1775687534.168:744): avc: denied { write } for pid=5897 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 74.597199][ T28] audit: type=1400 audit(1775687534.168:745): avc: denied { write } for pid=5897 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.648791][ T28] audit: type=1400 audit(1775687534.168:746): avc: denied { nlmsg_write } for pid=5897 comm="syz.3.821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 74.670628][ T28] audit: type=1400 audit(1775687534.198:747): avc: denied { mounton } for pid=5901 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 74.692711][ T5900] loop0: lost filesystem error report for type 5 error -117 [ 74.693037][ T5900] EXT4-fs (loop0): 1 orphan inode deleted [ 74.725762][ T5900] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.808474][ T28] audit: type=1400 audit(1775687534.518:748): avc: denied { shutdown } for pid=5918 comm="syz.6.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.850926][ T28] audit: type=1400 audit(1775687534.518:749): avc: denied { read } for pid=5918 comm="syz.6.825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.929395][ T5921] syzkaller0: entered promiscuous mode [ 74.935205][ T5921] syzkaller0: entered allmulticast mode [ 74.946605][ T5925] loop6: detected capacity change from 0 to 512 [ 74.963754][ T5925] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 74.982136][ T5925] EXT4-fs (loop6): 1 truncate cleaned up [ 74.988584][ T5925] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.006743][ T3316] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.054266][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 75.109038][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 75.111434][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.127138][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.134828][ T4642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.147934][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.178728][ T5901] bridge_slave_0: entered allmulticast mode [ 75.185967][ T5901] bridge_slave_0: entered promiscuous mode [ 75.202506][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.209825][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.217331][ T5901] bridge_slave_1: entered allmulticast mode [ 75.235321][ T5901] bridge_slave_1: entered promiscuous mode [ 75.236888][ T5938] fido_id[5938]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 75.324523][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.342726][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.407857][ T5901] team0: Port device team_slave_0 added [ 75.423666][ T5901] team0: Port device team_slave_1 added [ 75.461810][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.493086][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.547412][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.569395][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.578336][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 75.605436][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.635258][ T5901] hsr_slave_0: entered promiscuous mode [ 75.641941][ T5901] hsr_slave_1: entered promiscuous mode [ 75.649042][ T5901] debugfs: 'hsr0' already exists in 'hsr' [ 75.655248][ T5901] Cannot create hsr debugfs directory [ 75.738644][ T5901] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 75.747950][ T5901] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 75.757769][ T5901] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 75.767935][ T5901] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 75.794951][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.802065][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.809630][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.816729][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.855500][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.871430][ T30] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.879920][ T30] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.952363][ T5958] syzkaller0: entered promiscuous mode [ 75.958465][ T5958] syzkaller0: entered allmulticast mode [ 76.202556][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.285152][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.292318][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.325773][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.332953][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.750072][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.015271][ T5901] veth0_vlan: entered promiscuous mode [ 77.040257][ T5901] veth1_vlan: entered promiscuous mode [ 77.085651][ T5901] veth0_macvtap: entered promiscuous mode [ 77.106005][ T6003] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 77.139650][ T5901] veth1_macvtap: entered promiscuous mode [ 77.149814][ T6005] netlink: 'syz.6.847': attribute type 1 has an invalid length. [ 77.170764][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.189691][ T6005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 77.204353][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.218432][ T6005] bond1: (slave geneve2): making interface the new active one [ 77.258776][ T6005] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 77.347746][ T834] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.376225][ T834] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.408732][ T834] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.435377][ T834] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.486416][ T6022] loop5: detected capacity change from 0 to 512 [ 77.617942][ T6022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.635381][ T6022] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.701213][ T6033] loop7: detected capacity change from 0 to 512 [ 77.707864][ T6033] EXT4-fs: Ignoring removed nobh option [ 77.724204][ T6033] EXT4-fs: old and new quota format mixing [ 77.739217][ T3797] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.793109][ T6040] syzkaller0: entered promiscuous mode [ 77.807368][ T6040] syzkaller0: entered allmulticast mode [ 77.821146][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.6.859'. [ 77.881814][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.6.859'. [ 77.901842][ T6043] vlan2: entered promiscuous mode [ 77.913224][ T6043] bridge1: entered promiscuous mode [ 77.930095][ T6043] vlan2: entered allmulticast mode [ 77.935534][ T6043] bridge1: entered allmulticast mode [ 77.942684][ T6051] xt_hashlimit: size too large, truncated to 1048576 [ 78.015051][ T6056] netlink: 40 bytes leftover after parsing attributes in process `syz.6.865'. [ 78.480435][ T6079] syzkaller0: entered promiscuous mode [ 78.496498][ T6079] syzkaller0: entered allmulticast mode [ 78.707517][ T3398] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 78.732832][ T3398] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.802627][ T6090] fido_id[6090]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 79.259196][ T6096] syzkaller0: entered promiscuous mode [ 79.280279][ T6096] syzkaller0: entered allmulticast mode [ 79.473243][ T6100] syzkaller0: entered promiscuous mode [ 79.487346][ T6100] syzkaller0: entered allmulticast mode [ 79.743317][ T6111] syzkaller0: entered promiscuous mode [ 79.754613][ T6111] syzkaller0: entered allmulticast mode [ 80.218027][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 80.218040][ T28] audit: type=1400 audit(1775687539.938:774): avc: denied { setopt } for pid=6122 comm="syz.0.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.246655][ T28] audit: type=1400 audit(1775687539.978:775): avc: denied { read } for pid=6122 comm="syz.0.889" path="socket:[21070]" dev="sockfs" ino=21070 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.650795][ T6137] syzkaller0: entered promiscuous mode [ 80.656487][ T6137] syzkaller0: entered allmulticast mode [ 80.826619][ T6140] loop3: detected capacity change from 0 to 8192 [ 80.869023][ T3299] loop3: p1 p2 p3 [ 80.878452][ T3299] loop3: p3 start 100992257 is beyond EOD, truncated [ 80.894746][ T6140] loop3: p1 p2 p3 [ 80.900341][ T6140] loop3: p3 start 100992257 is beyond EOD, truncated [ 80.965874][ T28] audit: type=1400 audit(1775687540.688:776): avc: denied { mount } for pid=6153 comm="syz.0.898" name="/" dev="configfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 80.993985][ T28] audit: type=1400 audit(1775687540.718:777): avc: denied { search } for pid=6153 comm="syz.0.898" name="/" dev="configfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.017622][ T28] audit: type=1400 audit(1775687540.718:778): avc: denied { search } for pid=6153 comm="syz.0.898" name="/" dev="configfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.050065][ T28] audit: type=1400 audit(1775687540.718:779): avc: denied { watch watch_reads } for pid=6153 comm="syz.0.898" path="/" dev="configfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.074429][ T28] audit: type=1400 audit(1775687540.718:780): avc: denied { search } for pid=6153 comm="syz.0.898" name="/" dev="configfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.103332][ T28] audit: type=1400 audit(1775687540.718:781): avc: denied { read open } for pid=6153 comm="syz.0.898" path="/" dev="configfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 81.107038][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 81.138272][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 81.141237][ T6156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.899'. [ 81.169566][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 81.197475][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 81.223309][ T6156] vlan2: entered allmulticast mode [ 81.231850][ T6156] bridge1: entered allmulticast mode [ 81.254126][ T6156] bridge1: port 1(erspan0) entered blocking state [ 81.268112][ T6158] loop7: detected capacity change from 0 to 8192 [ 81.277249][ T6156] bridge1: port 1(erspan0) entered disabled state [ 81.290051][ T6156] erspan0: entered allmulticast mode [ 81.296058][ T6156] erspan0: entered promiscuous mode [ 81.301965][ T6156] bridge1: port 1(erspan0) entered blocking state [ 81.308421][ T6156] bridge1: port 1(erspan0) entered forwarding state [ 81.415324][ T6158] loop7: p1 < > p3 p4 < > [ 81.424651][ T6158] loop7: p3 size 218103808 extends beyond EOD, truncated [ 81.440152][ T28] audit: type=1400 audit(1775687541.168:782): avc: denied { connect } for pid=6169 comm="syz.0.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.468909][ T28] audit: type=1400 audit(1775687541.188:783): avc: denied { write } for pid=6169 comm="syz.0.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.768580][ T2999] loop7: p1 < > p3 p4 < > [ 81.819275][ T2999] loop7: p3 size 218103808 extends beyond EOD, truncated [ 81.926925][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 81.939759][ T3301] udevd[3301]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 81.956381][ T5257] udevd[5257]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 81.996218][ T5257] udevd[5257]: inotify_add_watch(7, /dev/loop7p4, 10) failed: No such file or directory [ 82.007493][ T3299] udevd[3299]: inotify_add_watch(7, /dev/loop7p1, 10) failed: No such file or directory [ 82.125922][ T6186] syzkaller0: entered promiscuous mode [ 82.132165][ T6186] syzkaller0: entered allmulticast mode [ 82.146828][ T6186] tipc: Started in network mode [ 82.152206][ T6186] tipc: Node identity 22200d41d4b3, cluster identity 4711 [ 82.159702][ T6186] tipc: Enabled bearer , priority 0 [ 82.172808][ T6185] tipc: Resetting bearer [ 82.262877][ T6185] tipc: Disabling bearer [ 82.369802][ T6194] syzkaller0: entered promiscuous mode [ 82.375614][ T6194] syzkaller0: entered allmulticast mode [ 82.625387][ T6200] syzkaller0: entered promiscuous mode [ 82.651080][ T6200] syzkaller0: entered allmulticast mode [ 82.807005][ T6209] syzkaller0: entered promiscuous mode [ 82.812775][ T6209] syzkaller0: entered allmulticast mode [ 83.021240][ T6216] loop5: detected capacity change from 0 to 512 [ 83.042774][ T6216] EXT4-fs: Ignoring removed nobh option [ 83.093028][ T6216] EXT4-fs (loop5): orphan cleanup on readonly fs [ 83.117217][ T6216] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.922: EA inode hash validation failed [ 83.153080][ T6216] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.170358][ T6216] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.922: corrupted inode contents [ 83.195031][ T6216] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.195526][ T6216] EXT4-fs error (device loop5): ext4_dirty_inode:6495: inode #15: comm syz.5.922: mark_inode_dirty error [ 83.205438][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 83.205516][ C1] EXT4-fs (loop5): initial error at time 1775687542: ext4_do_update_inode:5602: inode 15 [ 83.205828][ C1] EXT4-fs (loop5): last error at time 1775687542: ext4_do_update_inode:5602: inode 15 [ 83.261030][ T6216] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.262825][ T6216] EXT4-fs error (device loop5): ext4_do_update_inode:5602: inode #15: comm syz.5.922: corrupted inode contents [ 83.319143][ T6216] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.320655][ T6216] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.922: mark_inode_dirty error [ 83.352148][ T6254] netlink: 12 bytes leftover after parsing attributes in process `syz.7.932'. [ 83.353929][ T6216] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.363904][ T6216] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3002: inode #15: comm syz.5.922: mark inode dirty (error -117) [ 83.388597][ T6216] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 83.390754][ T6216] EXT4-fs warning (device loop5): ext4_evict_inode:285: xattr delete (err -117) [ 83.417473][ T6216] EXT4-fs (loop5): 1 orphan inode deleted [ 83.444346][ T6216] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 83.461201][ T6257] syzkaller0: entered promiscuous mode [ 83.468010][ T6257] syzkaller0: entered allmulticast mode [ 83.478431][ T6261] tipc: Cannot configure node identity twice [ 83.505262][ T3797] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.589496][ T6272] syzkaller0: entered promiscuous mode [ 83.595442][ T6272] syzkaller0: entered allmulticast mode [ 83.595481][ T6273] loop7: detected capacity change from 0 to 2048 [ 83.630472][ T6273] syz_tun: entered allmulticast mode [ 83.636916][ T6273] syz_tun: left allmulticast mode [ 83.696483][ T6275] loop6: detected capacity change from 0 to 1024 [ 83.707140][ T6275] EXT4-fs: Ignoring removed mblk_io_submit option [ 83.714757][ T6275] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 83.724186][ T6275] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 83.735638][ T6275] EXT4-fs error (device loop6): ext4_ext_check_inode:521: inode #11: comm syz.6.940: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 83.754459][ T6275] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 83.755088][ T6275] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.940: couldn't read orphan inode 11 (err -117) [ 83.764599][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 83.764634][ C1] EXT4-fs (loop6): initial error at time 1775687543: ext4_ext_check_inode:521: inode 11 [ 83.764657][ C1] EXT4-fs (loop6): last error at time 1775687543: ext4_ext_check_inode:521: inode 11 [ 83.803572][ T6275] loop6: lost filesystem error report for type 5 error -117 [ 83.804750][ T6275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.831140][ T6275] EXT4-fs (loop6): shut down requested (1) [ 83.839671][ T6275] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.006933][ T6282] loop3: detected capacity change from 0 to 512 [ 84.040880][ T6282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.053879][ T6282] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.163389][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.213281][ T6292] syzkaller0: entered promiscuous mode [ 84.219396][ T6292] syzkaller0: entered allmulticast mode [ 84.299244][ T6298] loop3: detected capacity change from 0 to 1024 [ 84.300063][ T6299] syzkaller0: entered promiscuous mode [ 84.306166][ T6298] EXT4-fs: Ignoring removed orlov option [ 84.311518][ T6299] syzkaller0: entered allmulticast mode [ 84.332969][ T6298] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.360936][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.452745][ T6304] syzkaller0: entered promiscuous mode [ 84.472317][ T6304] syzkaller0: entered allmulticast mode [ 85.742819][ T6343] syzkaller0: entered promiscuous mode [ 85.749101][ T6343] syzkaller0: entered allmulticast mode [ 85.828515][ T28] kauditd_printk_skb: 229 callbacks suppressed [ 85.828529][ T28] audit: type=1400 audit(1775687545.548:1013): avc: denied { create } for pid=6345 comm="syz.3.963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 85.994948][ T28] audit: type=1400 audit(1775687545.718:1014): avc: denied { map } for pid=6353 comm="syz.3.966" path="socket:[22038]" dev="sockfs" ino=22038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.035830][ T10] IPVS: starting estimator thread 0... [ 86.043656][ T28] audit: type=1400 audit(1775687545.718:1015): avc: denied { read } for pid=6353 comm="syz.3.966" path="socket:[22038]" dev="sockfs" ino=22038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.096194][ T6357] syzkaller0: entered promiscuous mode [ 86.102041][ T6357] syzkaller0: entered allmulticast mode [ 86.138688][ T6355] IPVS: using max 2448 ests per chain, 122400 per kthread [ 86.155253][ T6362] loop5: detected capacity change from 0 to 1024 [ 86.172808][ T6362] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.238980][ T6363] syzkaller0: entered promiscuous mode [ 86.255603][ T6363] syzkaller0: entered allmulticast mode [ 86.271910][ T6362] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.281017][ T6362] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.399190][ T6362] EXT4-fs error (device loop5): ext4_ext_check_inode:521: inode #11: comm syz.5.971: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 86.488130][ T6362] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 86.488260][ T6362] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.971: couldn't read orphan inode 11 (err -117) [ 86.498539][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 86.498561][ C0] EXT4-fs (loop5): initial error at time 1775687546: ext4_ext_check_inode:521: inode 11 [ 86.498596][ C0] EXT4-fs (loop5): last error at time 1775687546: ext4_ext_check_inode:521: inode 11 [ 86.998694][ T6362] loop5: lost filesystem error report for type 5 error -117 [ 87.005450][ T6362] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.099222][ T6362] EXT4-fs (loop5): shut down requested (1) [ 87.110663][ T28] audit: type=1400 audit(1775687546.828:1016): avc: denied { mounton } for pid=6371 comm="syz.7.973" path="/29/file0" dev="tmpfs" ino=171 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 87.157288][ T6372] syzkaller0: entered promiscuous mode [ 87.173059][ T6372] syzkaller0: entered allmulticast mode [ 87.189945][ T6362] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.311565][ T6375] loop3: detected capacity change from 0 to 8192 [ 87.654590][ T6385] netlink: 4 bytes leftover after parsing attributes in process `syz.7.977'. [ 88.505036][ T6405] capability: warning: `syz.7.983' uses deprecated v2 capabilities in a way that may be insecure [ 89.328598][ T28] audit: type=1400 audit(1775687549.048:1017): avc: denied { setopt } for pid=6423 comm="syz.0.989" lport=38889 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 89.491785][ T6430] netlink: 'syz.0.991': attribute type 4 has an invalid length. [ 89.537684][ T28] audit: type=1400 audit(1775687549.238:1018): avc: denied { write } for pid=6432 comm="syz.3.993" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 89.645824][ T6430] netlink: 'syz.0.991': attribute type 4 has an invalid length. [ 89.660189][ T6442] vxcan1: entered allmulticast mode [ 90.088096][ T6447] syzkaller0: entered promiscuous mode [ 90.096308][ T6447] syzkaller0: entered allmulticast mode [ 90.223534][ T6453] syzkaller0: entered promiscuous mode [ 90.238766][ T6453] syzkaller0: entered allmulticast mode [ 90.326294][ T6457] tipc: Enabling of bearer rejected, failed to enable media [ 90.534808][ T6474] syzkaller0: entered promiscuous mode [ 90.540800][ T6474] syzkaller0: entered allmulticast mode [ 90.961971][ T6491] tipc: Enabling of bearer rejected, failed to enable media [ 91.093785][ T6504] tipc: Enabling of bearer rejected, failed to enable media [ 91.581877][ T6581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1025'. [ 91.887602][ T6597] syzkaller0: entered promiscuous mode [ 91.919782][ T6597] syzkaller0: entered allmulticast mode [ 92.192269][ T6610] syzkaller0: entered promiscuous mode [ 92.197952][ T6610] syzkaller0: entered allmulticast mode [ 92.321690][ T6631] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1039'. [ 92.331498][ T6631] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1039'. [ 92.496961][ T6642] loop3: detected capacity change from 0 to 512 [ 92.512096][ T6642] EXT4-fs: Ignoring removed nobh option [ 92.610298][ T6642] EXT4-fs (loop3): orphan cleanup on readonly fs [ 92.628148][ T6642] EXT4-fs warning (device loop3): ext4_xattr_inode_get:560: inode #11: comm syz.3.1041: EA inode hash validation failed [ 92.644757][ T6642] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.1041: corrupted inode contents [ 92.657735][ T6642] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.660325][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 92.676609][ C0] EXT4-fs (loop3): initial error at time 1775687552: ext4_do_update_inode:5602: inode 15 [ 92.686545][ C0] EXT4-fs (loop3): last error at time 1775687552: ext4_do_update_inode:5602: inode 15 [ 92.754395][ T6642] EXT4-fs error (device loop3): ext4_dirty_inode:6495: inode #15: comm syz.3.1041: mark_inode_dirty error [ 92.773148][ T6642] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.781857][ T6642] EXT4-fs error (device loop3): ext4_do_update_inode:5602: inode #15: comm syz.3.1041: corrupted inode contents [ 92.806563][ T6642] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.818141][ T6642] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2999: inode #15: comm syz.3.1041: mark_inode_dirty error [ 92.845478][ T6642] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.850393][ T6642] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3002: inode #15: comm syz.3.1041: mark inode dirty (error -117) [ 92.878338][ T6642] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 92.885994][ T6642] EXT4-fs warning (device loop3): ext4_evict_inode:285: xattr delete (err -117) [ 92.917185][ T6642] EXT4-fs (loop3): 1 orphan inode deleted [ 92.948501][ T6642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 93.468260][ T6657] loop7: detected capacity change from 0 to 2048 [ 93.493695][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.525113][ T6657] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.689781][ T28] audit: type=1400 audit(1775687553.408:1019): avc: denied { create } for pid=6656 comm="syz.7.1045" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 93.719295][ T6664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1046'. [ 93.794094][ T28] audit: type=1400 audit(1775687553.408:1020): avc: denied { add_name } for pid=6656 comm="syz.7.1045" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 93.870784][ T5901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.926647][ T28] audit: type=1400 audit(1775687553.508:1021): avc: denied { map } for pid=6656 comm="syz.7.1045" path="/41/file1/file0/cgroup.controllers" dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.127684][ T28] audit: type=1400 audit(1775687553.508:1022): avc: denied { write } for pid=6656 comm="syz.7.1045" path="/41/file1/file0/cgroup.controllers" dev="loop7" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 94.201090][ T6676] batadv_slave_0: entered promiscuous mode [ 94.252169][ T6675] batadv_slave_0: left promiscuous mode [ 94.355456][ T28] audit: type=1400 audit(1775687553.508:1023): avc: denied { create } for pid=6656 comm="syz.7.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 94.525441][ T28] audit: type=1400 audit(1775687553.508:1024): avc: denied { bind } for pid=6656 comm="syz.7.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 94.787954][ T28] audit: type=1400 audit(1775687553.598:1025): avc: denied { cpu } for pid=6666 comm="syz.5.1048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 94.953768][ T28] audit: type=1400 audit(1775687554.488:1026): avc: denied { read } for pid=6681 comm="syz.0.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.849884][ T6713] hub 9-0:1.0: USB hub found [ 95.854795][ T6713] hub 9-0:1.0: 8 ports detected [ 95.891612][ T28] audit: type=1400 audit(1775687555.608:1027): avc: denied { getopt } for pid=6714 comm="syz.5.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 95.945928][ T6697] loop7: detected capacity change from 0 to 512 [ 96.057788][ T6697] EXT4-fs: Ignoring removed nobh option [ 96.205936][ T6697] EXT4-fs (loop7): orphan cleanup on readonly fs [ 96.265847][ T6697] EXT4-fs warning (device loop7): ext4_xattr_inode_get:560: inode #11: comm syz.7.1058: EA inode hash validation failed [ 96.293508][ T6697] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #15: comm syz.7.1058: corrupted inode contents [ 96.308968][ T6697] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.312079][ T6728] netlink: 'syz.0.1064': attribute type 4 has an invalid length. [ 96.318636][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 96.335658][ C0] EXT4-fs (loop7): initial error at time 1775687556: ext4_do_update_inode:5602: inode 15 [ 96.335829][ T6728] netlink: 'syz.0.1064': attribute type 4 has an invalid length. [ 96.345781][ C0] EXT4-fs (loop7): last error at time 1775687556: ext4_do_update_inode:5602: inode 15 [ 96.346670][ T6697] EXT4-fs error (device loop7): ext4_dirty_inode:6495: inode #15: comm syz.7.1058: mark_inode_dirty error [ 96.386550][ T6697] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.388213][ T6697] EXT4-fs error (device loop7): ext4_do_update_inode:5602: inode #15: comm syz.7.1058: corrupted inode contents [ 96.411509][ T6697] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.415737][ T6697] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #15: comm syz.7.1058: mark_inode_dirty error [ 96.440608][ T6697] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.441429][ T6697] EXT4-fs error (device loop7): ext4_xattr_delete_inode:3002: inode #15: comm syz.7.1058: mark inode dirty (error -117) [ 96.468321][ T6697] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.469053][ T6697] EXT4-fs warning (device loop7): ext4_evict_inode:285: xattr delete (err -117) [ 96.490566][ T6697] EXT4-fs (loop7): 1 orphan inode deleted [ 96.507305][ T6697] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 96.605262][ T5901] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.728684][ T6756] xt_hashlimit: size too large, truncated to 1048576 [ 97.702095][ T6770] syzkaller0: entered promiscuous mode [ 97.724243][ T6770] syzkaller0: entered allmulticast mode [ 97.734101][ T6781] tipc: Enabling of bearer rejected, failed to enable media [ 98.938764][ T6813] ================================================================== [ 98.947222][ T6813] BUG: KCSAN: data-race in mem_cgroup_flush_stats_ratelimited / tick_do_update_jiffies64 [ 98.957438][ T6813] [ 98.959757][ T6813] read-write to 0xffffffff86c09a00 of 8 bytes by interrupt on cpu 0: [ 98.967822][ T6813] tick_do_update_jiffies64+0x113/0x1c0 [ 98.973486][ T6813] tick_nohz_handler+0x8d/0x3d0 [ 98.978379][ T6813] __hrtimer_run_queues+0x218/0x4f0 [ 98.983730][ T6813] hrtimer_interrupt+0x269/0x810 [ 98.988692][ T6813] __sysvec_apic_timer_interrupt+0x5f/0x1f0 [ 98.994748][ T6813] sysvec_apic_timer_interrupt+0x6f/0x80 [ 99.000483][ T6813] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 99.006566][ T6813] ip_finish_output2+0x4/0x8c0 [ 99.011518][ T6813] ip_finish_output+0x112/0x290 [ 99.016466][ T6813] ip_output+0xbd/0x1c0 [ 99.020625][ T6813] ip_local_out+0xaa/0xd0 [ 99.024957][ T6813] iptunnel_xmit+0x3d8/0x6a0 [ 99.029741][ T6813] udp_tunnel_xmit_skb+0x1bd/0x220 [ 99.034882][ T6813] send4+0x4de/0x5c0 [ 99.038970][ T6813] wg_socket_send_skb_to_peer+0x95/0x130 [ 99.044721][ T6813] wg_socket_send_buffer_to_peer+0xf1/0x120 [ 99.050888][ T6813] wg_packet_handshake_send_worker+0x10d/0x160 [ 99.057203][ T6813] process_scheduled_works+0x513/0xa10 [ 99.062678][ T6813] worker_thread+0x58a/0x780 [ 99.067457][ T6813] kthread+0x22a/0x280 [ 99.071875][ T6813] ret_from_fork+0x150/0x360 [ 99.076750][ T6813] ret_from_fork_asm+0x1a/0x30 [ 99.081651][ T6813] [ 99.083971][ T6813] read to 0xffffffff86c09a00 of 8 bytes by task 6813 on cpu 1: [ 99.091602][ T6813] mem_cgroup_flush_stats_ratelimited+0x29/0x70 [ 99.097863][ T6813] count_shadow_nodes+0x6a/0x230 [ 99.102904][ T6813] do_shrink_slab+0x63/0x6a0 [ 99.107547][ T6813] shrink_slab+0x538/0x880 [ 99.112167][ T6813] shrink_node+0x6bc/0x2130 [ 99.117216][ T6813] do_try_to_free_pages+0x408/0xc80 [ 99.122431][ T6813] try_to_free_mem_cgroup_pages+0x1f5/0x470 [ 99.128362][ T6813] try_charge_memcg+0x37e/0xa10 [ 99.133311][ T6813] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 99.139481][ T6813] __swap_cache_prepare_and_add+0x67/0x460 [ 99.145576][ T6813] swap_cache_alloc_folio+0xa2/0x120 [ 99.151416][ T6813] swap_cluster_readahead+0x26e/0x3d0 [ 99.156885][ T6813] swapin_readahead+0xde/0x840 [ 99.161651][ T6813] do_swap_page+0x2fe/0x21e0 [ 99.166420][ T6813] handle_mm_fault+0xb46/0x3020 [ 99.171375][ T6813] do_user_addr_fault+0x62f/0x1050 [ 99.176607][ T6813] exc_page_fault+0x62/0xa0 [ 99.181298][ T6813] asm_exc_page_fault+0x26/0x30 [ 99.186516][ T6813] [ 99.188955][ T6813] value changed: 0x00000000ffffb133 -> 0x00000000ffffb134 [ 99.197028][ T6813] [ 99.199426][ T6813] Reported by Kernel Concurrency Sanitizer on: [ 99.206036][ T6813] CPU: 1 UID: 0 PID: 6813 Comm: syz.3.1084 Not tainted syzkaller #0 PREEMPT(full) [ 99.215595][ T6813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 99.226431][ T6813] ================================================================== [ 99.236616][ T6812] syz.3.1084 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 99.248384][ T6812] CPU: 0 UID: 0 PID: 6812 Comm: syz.3.1084 Not tainted syzkaller #0 PREEMPT(full) [ 99.248463][ T6812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 99.248486][ T6812] Call Trace: [ 99.248494][ T6812] [ 99.248503][ T6812] __dump_stack+0x1d/0x30 [ 99.248571][ T6812] dump_stack_lvl+0x95/0xd0 [ 99.248601][ T6812] dump_stack+0x15/0x1b [ 99.248622][ T6812] dump_header+0x80/0x240 [ 99.248644][ T6812] oom_kill_process+0x295/0x350 [ 99.248711][ T6812] out_of_memory+0x97d/0xb80 [ 99.248732][ T6812] try_charge_memcg+0x62e/0xa10 [ 99.248780][ T6812] __mem_cgroup_charge+0x65/0x150 [ 99.248816][ T6812] shmem_get_folio_gfp+0x47b/0xd60 [ 99.248907][ T6812] shmem_fault+0xf6/0x250 [ 99.248938][ T6812] __do_fault+0xbc/0x200 [ 99.248960][ T6812] handle_mm_fault+0x11e2/0x3020 [ 99.249083][ T6812] do_user_addr_fault+0x3fd/0x1050 [ 99.249113][ T6812] ? unix_dgram_recvmsg+0x81/0x90 [ 99.249183][ T6812] exc_page_fault+0x62/0xa0 [ 99.249207][ T6812] asm_exc_page_fault+0x26/0x30 [ 99.249229][ T6812] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 99.249277][ T6812] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 19 02 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 99.249367][ T6812] RSP: 0018:ffffc90003c4bc28 EFLAGS: 00050206 [ 99.249386][ T6812] RAX: ffff8881048bbd08 RBX: 0000000000000038 RCX: 0000000000000038 [ 99.249401][ T6812] RDX: 0000000000000001 RSI: 000020000025e000 RDI: ffffc90003c4bc88 [ 99.249413][ T6812] RBP: ffffc90003c4bd80 R08: 00000000000003e6 R09: 0000000000000000 [ 99.249425][ T6812] R10: 0001c90003c4bc88 R11: 0001c90003c4bcbf R12: ffffc90003c4bdf0 [ 99.249438][ T6812] R13: 000020000025e000 R14: ffffc90003c4bc88 R15: 000020000025e000 [ 99.249500][ T6812] _copy_from_user+0x6f/0xb0 [ 99.249533][ T6812] ___sys_recvmsg+0xaa/0x3b0 [ 99.249613][ T6812] do_recvmmsg+0x1ef/0x560 [ 99.249709][ T6812] __x64_sys_recvmmsg+0xe5/0x170 [ 99.249748][ T6812] x64_sys_call+0x80f/0x3020 [ 99.249778][ T6812] do_syscall_64+0x12c/0x370 [ 99.249829][ T6812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.249848][ T6812] RIP: 0033:0x7fb26093c819 [ 99.249869][ T6812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.249888][ T6812] RSP: 002b:00007fb25f376028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 99.249986][ T6812] RAX: ffffffffffffffda RBX: 00007fb260bb6090 RCX: 00007fb26093c819 [ 99.250000][ T6812] RDX: 0f241f1a146326c4 RSI: 00002000000000c0 RDI: 0000000000000004 [ 99.250016][ T6812] RBP: 00007fb2609d2c91 R08: 0000000000000000 R09: 0000000000000000 [ 99.250030][ T6812] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 99.250109][ T6812] R13: 00007fb260bb6128 R14: 00007fb260bb6090 R15: 00007ffff6b79408 [ 99.250130][ T6812] [ 99.544216][ T6812] memory: usage 283280kB, limit 307200kB, failcnt 11292 [ 99.551723][ T6812] memory+swap: usage 285852kB, limit 9007199254740988kB, failcnt 0 [ 99.559810][ T6812] kmem: usage 282724kB, limit 9007199254740988kB, failcnt 0 [ 99.567487][ T6812] Memory cgroup stats for /syz3: [ 99.567671][ T6812] cache 98304 [ 99.576741][ T6812] rss 110592 [ 99.580294][ T6812] shmem 0 [ 99.583928][ T6812] mapped_file 98304 [ 99.587754][ T6812] dirty 98304 [ 99.591363][ T6812] writeback 0 [ 99.594932][ T6812] workingset_refault_anon 38 [ 99.598924][ T6811] syz_tun: entered allmulticast mode [ 99.600554][ T6812] workingset_refault_file 0 [ 99.600567][ T6812] swap 2527232 [ 99.616199][ T6812] swapcached 2838528 [ 99.620955][ T6812] pgpgin 92824 [ 99.625131][ T6812] pgpgout 92761 [ 99.628590][ T6812] pgfault 94014 [ 99.629716][ T6811] syz_tun: left allmulticast mode [ 99.632353][ T6812] pgmajfault 19 [ 99.632363][ T6812] inactive_anon 16384 [ 99.645225][ T6812] active_anon 139264 [ 99.649205][ T6812] inactive_file 102400 [ 99.653369][ T6812] active_file 0 [ 99.656828][ T6812] unevictable 0 [ 99.660395][ T6812] hierarchical_memory_limit 314572800 [ 99.665759][ T6812] hierarchical_memsw_limit 9223372036854771712 [ 99.672595][ T6812] total_cache 98304 [ 99.676488][ T6812] total_rss 110592 [ 99.680384][ T6812] total_shmem 0 [ 99.684305][ T6812] total_mapped_file 98304 [ 99.688833][ T6812] total_dirty 98304 [ 99.692642][ T6812] total_writeback 0 [ 99.696577][ T6812] total_workingset_refault_anon 38 [ 99.702886][ T6812] total_workingset_refault_file 0 [ 99.708050][ T6812] total_swap 2527232 [ 99.711984][ T6812] total_swapcached 2838528 [ 99.716465][ T6812] total_pgpgin 92824 [ 99.720523][ T6812] total_pgpgout 92761 [ 99.724501][ T6812] total_pgfault 94014 [ 99.728853][ T6812] total_pgmajfault 19 [ 99.733286][ T6812] total_inactive_anon 16384 [ 99.737963][ T6812] total_active_anon 139264 [ 99.742641][ T6812] total_inactive_file 102400 [ 99.747238][ T6812] total_active_file 0 [ 99.751374][ T6812] total_unevictable 0 [ 99.755608][ T6812] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1084,pid=6805,uid=0 [ 99.771044][ T6812] Memory cgroup out of memory: Killed process 6805 (syz.3.1084) total-vm:96344kB, anon-rss:1336kB, file-rss:22232kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000