last executing test programs: 2.549709801s ago: executing program 3 (id=1896): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.517652222s ago: executing program 0 (id=1897): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2020, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) writev(r1, &(0x7f0000000340)=[{0x0}], 0x1) 2.266268326s ago: executing program 3 (id=1898): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 2.223795848s ago: executing program 1 (id=1900): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='consume_skb\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 2.198887328s ago: executing program 1 (id=1901): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3ac3209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b135ab6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385beef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6c30ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88372091cd397b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000007925d0f1256330b9e2aa9a18cea8e009116f63c6c7d8f7f95bf0f6731e5eb1dcdc534f357b9f08e7a9a3aebeca145d695053b5bef004ca24e6c57ed10f01488d38b8b0b68d93e3cf630837915d518fde2115e66615786fe7b9216de958119cf762cac77ac829a02f48e72c0d2841880b2c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) 1.990518822s ago: executing program 4 (id=1906): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = gettid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x1, 0x6}, 0x8c2, 0x4, 0x2, 0x7, 0x2, 0x63b, 0xfffe, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xc, 0xffffffffffffffff, 0x1) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_BLKTRACETEARDOWN(r2, 0x1276, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, &(0x7f00000001c0)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffff88}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000360000003b000000000000001400000000000000290000000b000000000000020000000028"], 0x58}}], 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r3) socketpair(0x2b, 0x2, 0x8, &(0x7f0000000040)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1ffb}]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r5, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x8c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0}, 0x94) r6 = timerfd_create(0x8, 0x0) timerfd_settime(r6, 0x1, &(0x7f00000020c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r7, 0x5) accept4(r7, &(0x7f0000000240)=@x25, 0x0, 0x80800) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffe}, 0x1c) 1.744703386s ago: executing program 2 (id=1907): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.711452827s ago: executing program 2 (id=1908): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x8000, 0x1c05}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_REMOTE={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x12) 1.635375149s ago: executing program 2 (id=1909): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.595016959s ago: executing program 4 (id=1910): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.413730163s ago: executing program 0 (id=1911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000680), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x8, 0x4, &(0x7f0000000100)="caf9e515f3c6d7c362263f2123fe320ca6ad929000150adfe7905af0a81b8918ad689571578e98ada63aec414d551d2f9c48ab66c2257075b8a8b8899805094ac1309534f0c66c8cedc03d27c0263b8e7077bfe0cc788f590a008cbe7f8405a988fce21084cda5563c9664e2c6d937f2d5aac69aa8b917e7cd453240446d0fc598640d9aa6919f018e5c0c73ba7e2a451a2532b87475f4a70f8b1167b2fc72c615f00fee7228f4d3fa13fe72"}) 1.363049864s ago: executing program 2 (id=1912): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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") 1.307282925s ago: executing program 0 (id=1913): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000003000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r3, 0x402, 0x8000003d) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) 1.289689205s ago: executing program 1 (id=1914): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000680)='sched_switch\x00', r0}, 0x10) socketpair(0x15, 0x4, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x141141, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x831, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xff}, 0x0, 0xfffdffdfffffffff, 0xffffffffffffffff, 0x0) 1.189481937s ago: executing program 3 (id=1915): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000680), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304, 0x36}, "1a88ef816c4b42ed", "a5fdeb69a751e94df50ad7e9fb434d1665e9298b01e49419567b443803cf578f", "6d02cd81", "066580001e00"}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x8, 0x4, &(0x7f0000000100)="caf9e515f3c6d7c362263f2123fe320ca6ad929000150adfe7905af0a81b8918ad689571578e98ada63aec414d551d2f9c48ab66c2257075b8a8b8899805094ac1309534f0c66c8cedc03d27c0263b8e7077bfe0cc788f590a008cbe7f8405a988fce21084cda5563c9664e2c6d937f2d5aac69aa8b917e7cd453240446d0fc598640d9aa6919f018e5c0c73ba7e2a451a2532b87475f4a70f8b1167b2fc72c615f00fee7228f4d3fa13fe72"}) 1.113702509s ago: executing program 0 (id=1916): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) recvfrom$inet(r0, 0x0, 0xa8fe, 0x40000002, 0x0, 0x0) sendto$inet(r0, &(0x7f00000003c0)="e14a97c24b2dc90ae41f83441e9b42a80ab14942a6096a408f102245681e742487095b95ad3fd42580d9c45d3fa4a4e3938c68f967bbdce0c774d98bb8e5d205a005f3562d45fdd343107d95563731de457d0fb2fd41c2db5b666353eac086e46868b296811606421ae1bd02cb4db0efcbcb842d06ddaaea287479c74b59fd4144675ff850fa04c27ef1f30990ea574a7614f603b357dea1fc2cfc1e6ba51b654659faf7e380b3fb8e7cca68f2ed6ebdeec2f9bfe801841894d2de8fe791babc7c06b7491e978957", 0xfffffffffffffdef, 0x40000, 0x0, 0x36) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) 1.06371845s ago: executing program 1 (id=1917): socket$netlink(0x10, 0x3, 0xa) socket$packet(0x11, 0x2, 0x300) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200407fc, &(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0x1801, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_open_procfs(0x0, &(0x7f0000000300)='net/route\x00') 1.016251791s ago: executing program 3 (id=1918): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$tipc(0x1e, 0x5, 0x0) pipe(0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000082000400000000f4ff00070c000c95000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x86a305) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0x15, &(0x7f0000000040)=0x38, 0x4) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x56, 0xfffa, 0x0, {0x0, 0x1}, {0x80, 0xffff}, @const={0x0, {0xfff, 0x0, 0x2, 0x403}}}) syz_open_dev$evdev(&(0x7f0000000000), 0x18, 0x800) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCGKEY(r4, 0x80404518, &(0x7f0000000100)=""/240) 961.283692ms ago: executing program 2 (id=1919): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c40000070082", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32=r5, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x0) 657.306438ms ago: executing program 4 (id=1920): socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r9], 0x4) 640.908278ms ago: executing program 1 (id=1921): bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[], 0x50) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) read$watch_queue(r0, &(0x7f0000000540)=""/4096, 0x1000) 593.753879ms ago: executing program 2 (id=1922): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r2, &(0x7f00000000c0), 0x0, 0x4000, 0x0) 560.00406ms ago: executing program 4 (id=1923): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0xffe6, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 460.575611ms ago: executing program 4 (id=1924): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24040ffd, &(0x7f0000000440)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x182, 0x0, 0x27) 441.023642ms ago: executing program 4 (id=1925): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x7ffff000) 440.340612ms ago: executing program 1 (id=1926): socket$inet6_tcp(0xa, 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000240)="98c6a5", 0x3}], 0x1) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2, 0x0, 0x8}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x8000002000, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x20000007fffffff, 0xfffffffffffffffc}, 0x0, 0x0) 261.777265ms ago: executing program 0 (id=1927): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="180000000003000000"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x4) fcntl$notify(r3, 0x402, 0x8000003d) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', r2}, 0x18) 250.438446ms ago: executing program 0 (id=1928): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000001040)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) 97.996309ms ago: executing program 3 (id=1929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r10, {}, {0x2, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 3 (id=1930): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) kernel console output (not intermixed with test programs): , priority 0 [ 58.909627][ T4828] syzkaller0: entered promiscuous mode [ 58.915409][ T4828] syzkaller0: entered allmulticast mode [ 58.961962][ T4828] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 59.037850][ T4826] tipc: Resetting bearer [ 59.100573][ T4826] tipc: Disabling bearer [ 59.143211][ T4883] @: renamed from vlan0 (while UP) [ 59.212056][ T4885] pim6reg1: entered promiscuous mode [ 59.217662][ T4885] pim6reg1: entered allmulticast mode [ 59.224943][ T4887] loop2: detected capacity change from 0 to 512 [ 59.249431][ T4887] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 59.286529][ T4887] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 59.303933][ T4887] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.316973][ T4897] netlink: 4 bytes leftover after parsing attributes in process `syz.3.528'. [ 59.326038][ C1] vcan0: j1939_session_tx_dat: 0xffff88811adf2e00: queue data error: -100 [ 59.327509][ T4887] Quota error (device loop2): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8 [ 59.334745][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.345410][ T4887] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 59.353064][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.363198][ T4887] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.524: Failed to acquire dquot type 0 [ 59.370863][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.389901][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.397765][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.405632][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.413524][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.421360][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.429215][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.437061][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.444928][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.452755][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.460603][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.468452][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.476308][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.484153][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.492089][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.499891][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.507732][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.515581][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.523425][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.531284][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.539101][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.546942][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.554810][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.562670][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.570521][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.578388][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.586297][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.594179][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.602044][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.609889][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.617772][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.625617][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.633574][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.641413][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.649260][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.657124][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.664980][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.672809][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.680660][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.688490][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.696359][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.704209][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.712060][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.719878][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.727720][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.735557][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.743418][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.751281][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.759096][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.766948][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.774799][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.782632][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.790456][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.798306][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.806160][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.813983][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.821833][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.829632][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.837468][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.845347][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.853209][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.861023][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.868872][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.876728][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.884584][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.892514][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.900352][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.908203][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.916053][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.923901][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.931737][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.939563][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.947414][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.955258][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.963198][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.971029][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.978995][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 59.986862][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 59.994729][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 60.002567][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 60.010416][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 60.018295][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 60.026180][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 60.034011][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 60.046023][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 60.090418][ T4903] tipc: Enabled bearer , priority 0 [ 60.100992][ T4903] syzkaller0: entered promiscuous mode [ 60.106638][ T4903] syzkaller0: entered allmulticast mode [ 60.136425][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.533'. [ 60.167746][ T4902] tipc: Resetting bearer [ 60.198209][ T4902] tipc: Disabling bearer [ 60.249660][ T4912] tipc: Enabled bearer , priority 0 [ 60.272763][ T4912] syzkaller0: entered promiscuous mode [ 60.278337][ T4912] syzkaller0: entered allmulticast mode [ 60.326516][ T4918] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 60.336623][ T4911] tipc: Resetting bearer [ 60.345440][ T4911] tipc: Disabling bearer [ 60.436435][ T3383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3383 comm=kworker/0:3 [ 60.470489][ T4923] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 60.603892][ T4941] netlink: 'syz.4.547': attribute type 1 has an invalid length. [ 60.624510][ T29] audit: type=1400 audit(1757469720.956:234): avc: denied { getopt } for pid=4942 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 60.676838][ T4951] tipc: Enabled bearer , priority 0 [ 60.697350][ T4951] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 60.710044][ T4951] tipc: Resetting bearer [ 60.724939][ T4950] tipc: Disabling bearer [ 61.008526][ T5000] tipc: Enabled bearer , priority 0 [ 61.015987][ T5000] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 61.032253][ T5000] tipc: Resetting bearer [ 61.044032][ T4999] tipc: Disabling bearer [ 61.139503][ T4973] 9pnet_fd: Insufficient options for proto=fd [ 61.214797][ T5023] loop4: detected capacity change from 0 to 128 [ 61.230817][ T5023] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 61.261158][ T5023] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.286872][ T1035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1035 comm=kworker/1:2 [ 61.300632][ T3305] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 61.303461][ T5031] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 61.334220][ T5033] netlink: 'syz.3.588': attribute type 1 has an invalid length. [ 61.354201][ T5035] loop4: detected capacity change from 0 to 128 [ 61.417920][ T29] audit: type=1400 audit(1757469721.746:235): avc: denied { read } for pid=5042 comm="syz.2.593" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 61.440997][ T29] audit: type=1400 audit(1757469721.746:236): avc: denied { open } for pid=5042 comm="syz.2.593" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 61.880180][ T5067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.953572][ T5067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 62.006998][ T5073] loop0: detected capacity change from 0 to 512 [ 62.022862][ T5073] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.606: casefold flag without casefold feature [ 62.036744][ T5073] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.606: couldn't read orphan inode 15 (err -117) [ 62.049369][ T5073] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.230988][ T5093] __nla_validate_parse: 1 callbacks suppressed [ 62.231006][ T5093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.613'. [ 62.452010][ T5105] loop1: detected capacity change from 0 to 764 [ 62.649447][ T5105] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 62.676261][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 62.676322][ T29] audit: type=1400 audit(1757469723.006:238): avc: denied { mount } for pid=5102 comm="syz.1.617" name="/" dev="loop1" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 62.860370][ T29] audit: type=1400 audit(1757469723.106:239): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 62.872770][ T5114] syzkaller0: entered promiscuous mode [ 62.886006][ T5114] syzkaller0: entered allmulticast mode [ 62.896070][ T5114] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 62.930046][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.957255][ T29] audit: type=1400 audit(1757469723.286:240): avc: denied { setopt } for pid=5120 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.984339][ T29] audit: type=1400 audit(1757469723.316:241): avc: denied { connect } for pid=5120 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.003846][ T29] audit: type=1400 audit(1757469723.316:242): avc: denied { bind } for pid=5120 comm="syz.0.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 63.023086][ T29] audit: type=1400 audit(1757469723.316:243): avc: denied { block_suspend } for pid=5120 comm="syz.0.624" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.071418][ T5129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.629'. [ 63.115203][ T29] audit: type=1400 audit(1757469723.446:244): avc: denied { create } for pid=5139 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.138012][ T5140] netlink: 580 bytes leftover after parsing attributes in process `syz.1.631'. [ 63.185741][ T29] audit: type=1400 audit(1757469723.466:245): avc: denied { write } for pid=5139 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.205803][ T29] audit: type=1400 audit(1757469723.466:246): avc: denied { nlmsg_write } for pid=5139 comm="syz.1.631" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.301624][ T5155] pim6reg1: entered promiscuous mode [ 63.306963][ T5155] pim6reg1: entered allmulticast mode [ 63.334079][ T5150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.633'. [ 63.370104][ T29] audit: type=1400 audit(1757469723.676:247): avc: denied { execmem } for pid=5154 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 63.398353][ T1035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1035 comm=kworker/1:2 [ 63.470547][ T5167] loop1: detected capacity change from 0 to 1024 [ 63.479668][ T5165] syzkaller0: entered promiscuous mode [ 63.485314][ T5165] syzkaller0: entered allmulticast mode [ 63.492753][ T5167] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.529891][ T5165] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 63.566864][ T5167] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.579209][ T5167] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.586875][ T5167] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.640: Freeing blocks not in datazone - block = 0, count = 4096 [ 63.602371][ T5167] EXT4-fs (loop1): 1 orphan inode deleted [ 63.610148][ T5167] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 63.988261][ T5187] loop4: detected capacity change from 0 to 128 [ 64.058242][ T5189] loop0: detected capacity change from 0 to 128 [ 64.379782][ T5193] loop2: detected capacity change from 0 to 1024 [ 64.412247][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.427075][ T5193] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 64.462622][ T5193] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.478810][ T5193] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 64.492117][ T5193] EXT4-fs (loop2): orphan cleanup on readonly fs [ 64.504917][ T5193] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.649: Freeing blocks not in datazone - block = 0, count = 4096 [ 64.518719][ T5193] EXT4-fs (loop2): Remounting filesystem read-only [ 64.524331][ T5197] netlink: 4 bytes leftover after parsing attributes in process `syz.1.650'. [ 64.525715][ T5193] EXT4-fs (loop2): 1 orphan inode deleted [ 64.540462][ T5193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.589580][ T5206] netlink: 536 bytes leftover after parsing attributes in process `syz.1.654'. [ 64.764094][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.865787][ T5220] @: renamed from vlan0 (while UP) [ 64.977884][ T5224] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5224 comm=syz.2.662 [ 65.004701][ T5229] loop0: detected capacity change from 0 to 512 [ 65.042305][ T5229] ======================================================= [ 65.042305][ T5229] WARNING: The mand mount option has been deprecated and [ 65.042305][ T5229] and is ignored by this kernel. Remove the mand [ 65.042305][ T5229] option from the mount to silence this warning. [ 65.042305][ T5229] ======================================================= [ 65.124740][ T5234] netlink: 4 bytes leftover after parsing attributes in process `syz.4.666'. [ 65.148487][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 65.154987][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.162858][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.170696][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.178581][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.186472][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.194348][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.202194][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.210055][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.217923][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.225762][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.233587][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.241444][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.249278][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.257143][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.265020][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.272887][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.280706][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.288565][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.296415][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.304284][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.312134][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.319971][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.327800][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.335642][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.343524][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.351403][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.359227][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.367079][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.374911][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.382774][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.390611][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.398479][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.406312][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.414167][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.422009][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.429845][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.437674][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.445538][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.453400][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.461258][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.469080][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.476926][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.484762][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.492606][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.500421][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.508282][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.516136][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.524006][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.531860][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.539710][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.547595][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.555444][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.563294][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.571162][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.579004][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.586850][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.594701][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.602596][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.610435][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.618312][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.626164][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.634020][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.641866][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.650396][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.658263][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.666115][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.673975][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.681816][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.689648][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.697506][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.705357][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.713221][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.721088][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.728925][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.736753][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.744586][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.752418][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.760315][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.768211][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.776059][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.783891][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.791772][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.799594][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.807444][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.815276][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.823124][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.830946][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.838875][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.846729][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.854598][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.862454][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.870275][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.878105][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.885979][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.893813][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.901665][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.909496][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.917343][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.925196][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 65.933039][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 65.940870][ C1] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 66.054645][ T5247] tipc: Enabled bearer , priority 0 [ 66.062333][ T5247] syzkaller0: entered promiscuous mode [ 66.067895][ T5247] syzkaller0: entered allmulticast mode [ 66.079008][ T5243] tipc: Resetting bearer [ 66.090821][ T5243] tipc: Disabling bearer [ 66.151897][ T5251] loop2: detected capacity change from 0 to 128 [ 66.417193][ T5263] loop4: detected capacity change from 0 to 1024 [ 66.434247][ T5263] EXT4-fs: Ignoring removed bh option [ 66.460297][ T5263] EXT4-fs: Mount option(s) incompatible with ext3 [ 66.602708][ T5269] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.631803][ T5269] netlink: 27 bytes leftover after parsing attributes in process `syz.2.681'. [ 66.711253][ T1035] IPVS: starting estimator thread 0... [ 66.811596][ T5271] IPVS: using max 2448 ests per chain, 122400 per kthread [ 67.073956][ T5275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.098911][ T5275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.517381][ T5288] 9pnet_fd: Insufficient options for proto=fd [ 67.725886][ T5298] Illegal XDP return value 4294967274 on prog (id 126) dev syz_tun, expect packet loss! [ 67.770388][ T5300] loop2: detected capacity change from 0 to 1024 [ 67.804702][ T5300] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.808576][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 67.808596][ T29] audit: type=1326 audit(1757469728.136:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5303 comm="syz.1.695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcef6fdeba9 code=0x0 [ 67.851310][ T5300] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 67.859719][ T5300] EXT4-fs (loop2): orphan cleanup on readonly fs [ 67.862752][ T5307] pim6reg1: entered promiscuous mode [ 67.871429][ T5307] pim6reg1: entered allmulticast mode [ 67.891311][ T5300] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.693: Freeing blocks not in datazone - block = 0, count = 4096 [ 67.910123][ T5300] EXT4-fs (loop2): 1 orphan inode deleted [ 67.942583][ T5300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.961603][ T5300] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.005095][ T5312] loop0: detected capacity change from 0 to 128 [ 68.018954][ T5314] netlink: 40 bytes leftover after parsing attributes in process `syz.3.699'. [ 68.850196][ T5333] bridge0: entered promiscuous mode [ 68.855606][ T5333] macvlan2: entered promiscuous mode [ 69.061906][ T5345] process 'syz.1.711' launched './file0' with NULL argv: empty string added [ 69.437040][ T5355] macvtap1: entered allmulticast mode [ 69.442543][ T5355] veth0_macvtap: entered allmulticast mode [ 69.935276][ T29] audit: type=1400 audit(1757469730.156:256): avc: denied { create } for pid=5358 comm="syz.4.716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.076482][ T5370] pim6reg1: entered promiscuous mode [ 70.081876][ T5370] pim6reg1: entered allmulticast mode [ 70.196873][ T5371] hub 8-0:1.0: USB hub found [ 70.211638][ T5371] hub 8-0:1.0: 8 ports detected [ 70.425565][ T29] audit: type=1400 audit(1757469730.736:257): avc: denied { name_connect } for pid=5372 comm="syz.3.720" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 70.590648][ T29] audit: type=1400 audit(1757469730.826:258): avc: denied { checkpoint_restore } for pid=5374 comm="syz.2.721" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 70.612434][ T29] audit: type=1400 audit(1757469730.886:259): avc: denied { read } for pid=5372 comm="syz.3.720" lport=42170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.644969][ T29] audit: type=1326 audit(1757469730.976:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5379 comm="syz.0.722" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7ed1beba9 code=0x0 [ 70.668665][ T5375] random: crng reseeded on system resumption [ 70.687968][ T5383] loop1: detected capacity change from 0 to 1024 [ 70.703065][ T5383] EXT4-fs: Ignoring removed nobh option [ 70.708765][ T5383] EXT4-fs: Ignoring removed bh option [ 70.740765][ T29] audit: type=1400 audit(1757469731.006:261): avc: denied { write } for pid=5374 comm="syz.2.721" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.745530][ T5394] loop2: detected capacity change from 0 to 1024 [ 70.776632][ T5394] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 70.789319][ T5395] netlink: 580 bytes leftover after parsing attributes in process `syz.3.726'. [ 70.806126][ T5394] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 70.814294][ T5394] EXT4-fs (loop2): orphan cleanup on readonly fs [ 70.816182][ T29] audit: type=1400 audit(1757469731.146:262): avc: denied { ioctl } for pid=5396 comm="syz.4.729" path="socket:[10020]" dev="sockfs" ino=10020 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.820954][ T5394] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.727: Freeing blocks not in datazone - block = 0, count = 4096 [ 70.845143][ T29] audit: type=1400 audit(1757469731.146:263): avc: denied { setopt } for pid=5396 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.863355][ T5383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.877681][ T29] audit: type=1400 audit(1757469731.146:264): avc: denied { read } for pid=5396 comm="syz.4.729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.892878][ T5394] EXT4-fs (loop2): 1 orphan inode deleted [ 70.915446][ T5394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 70.979816][ T5408] syzkaller0: entered promiscuous mode [ 70.985505][ T5408] syzkaller0: entered allmulticast mode [ 70.999007][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.110758][ T5427] capability: warning: `syz.3.733' uses deprecated v2 capabilities in a way that may be insecure [ 71.316569][ T5448] netlink: 96 bytes leftover after parsing attributes in process `syz.3.739'. [ 71.476869][ T5458] hub 9-0:1.0: USB hub found [ 71.481982][ T5458] hub 9-0:1.0: 8 ports detected [ 71.669540][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.742122][ T5461] loop0: detected capacity change from 0 to 1024 [ 71.787983][ T5461] EXT4-fs: Ignoring removed nobh option [ 71.793742][ T5461] EXT4-fs: Ignoring removed bh option [ 71.872887][ T5461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.983799][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.132161][ T5476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.748'. [ 72.370383][ T5489] netlink: 36 bytes leftover after parsing attributes in process `syz.2.753'. [ 72.391363][ T5488] pim6reg1: entered promiscuous mode [ 72.396703][ T5488] pim6reg1: entered allmulticast mode [ 73.403940][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 73.403956][ T29] audit: type=1400 audit(1757469733.736:284): avc: denied { connect } for pid=5500 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.430440][ T29] audit: type=1400 audit(1757469733.766:285): avc: denied { read } for pid=5500 comm="syz.2.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.465622][ T5505] loop0: detected capacity change from 0 to 256 [ 73.487298][ T29] audit: type=1400 audit(1757469733.816:286): avc: denied { ioctl } for pid=5500 comm="syz.2.756" path="socket:[10152]" dev="sockfs" ino=10152 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.577408][ T5505] FAT-fs (loop0): codepage cp936 not found [ 73.594437][ T29] audit: type=1400 audit(1757469733.916:287): avc: denied { write } for pid=5500 comm="syz.2.756" path="socket:[10155]" dev="sockfs" ino=10155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 73.694219][ T5516] netlink: 84 bytes leftover after parsing attributes in process `syz.0.762'. [ 73.956057][ T5530] netlink: 36 bytes leftover after parsing attributes in process `syz.0.765'. [ 73.972377][ T5531] pim6reg1: entered promiscuous mode [ 73.977715][ T5531] pim6reg1: entered allmulticast mode [ 73.978616][ T5534] loop4: detected capacity change from 0 to 1024 [ 74.381935][ T5544] tipc: Enabled bearer , priority 0 [ 74.393070][ T5544] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 74.404882][ T5544] tipc: Resetting bearer [ 74.417342][ T5543] tipc: Disabling bearer [ 74.466081][ T5534] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.501131][ T5534] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 74.525190][ T5534] EXT4-fs (loop4): orphan cleanup on readonly fs [ 74.535693][ T5534] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.769: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.542891][ T5551] loop3: detected capacity change from 0 to 1024 [ 74.550013][ T5534] EXT4-fs (loop4): 1 orphan inode deleted [ 74.561487][ T5549] netlink: 576 bytes leftover after parsing attributes in process `syz.0.775'. [ 74.583616][ T5551] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.584859][ T5534] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.658731][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.763792][ T5567] loop0: detected capacity change from 0 to 1024 [ 74.779764][ T5567] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 74.807436][ T5567] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 74.827192][ T5567] EXT4-fs (loop0): orphan cleanup on readonly fs [ 74.835586][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.849842][ T5567] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.781: Freeing blocks not in datazone - block = 0, count = 4096 [ 74.863904][ T5567] EXT4-fs (loop0): 1 orphan inode deleted [ 74.874331][ T5567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 74.915883][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.070694][ T5580] loop4: detected capacity change from 0 to 512 [ 75.358648][ T5588] pim6reg1: entered promiscuous mode [ 75.364028][ T5588] pim6reg1: entered allmulticast mode [ 75.443709][ T5592] loop2: detected capacity change from 0 to 1024 [ 75.852545][ T29] audit: type=1400 audit(1757469736.136:288): avc: denied { connect } for pid=5594 comm="syz.0.792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 75.871942][ T29] audit: type=1400 audit(1757469736.136:289): avc: denied { ioctl } for pid=5594 comm="syz.0.792" path="socket:[11135]" dev="sockfs" ino=11135 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.985958][ T5592] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.113212][ T5608] netlink: 27 bytes leftover after parsing attributes in process `syz.1.795'. [ 76.135318][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.191755][ T1035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1035 comm=kworker/1:2 [ 76.192373][ T5614] netlink: 64 bytes leftover after parsing attributes in process `syz.2.797'. [ 76.212447][ T5612] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370955 [ 76.284406][ T5624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.303375][ T5624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.386366][ T29] audit: type=1326 audit(1757469736.716:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5629 comm="syz.2.806" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d2daceba9 code=0x0 [ 76.420777][ T5634] tipc: Enabled bearer , priority 0 [ 76.428076][ T5634] syzkaller0: entered promiscuous mode [ 76.433675][ T5634] syzkaller0: entered allmulticast mode [ 76.446703][ T5634] tipc: Resetting bearer [ 76.458799][ T5633] tipc: Resetting bearer [ 76.476483][ T5633] tipc: Disabling bearer [ 76.531277][ T5646] loop0: detected capacity change from 0 to 1024 [ 76.541135][ T5646] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 76.551255][ T5648] netlink: 64 bytes leftover after parsing attributes in process `syz.1.814'. [ 76.561407][ T5646] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 76.569678][ T5646] EXT4-fs (loop0): orphan cleanup on readonly fs [ 76.576380][ T5646] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.813: Freeing blocks not in datazone - block = 0, count = 4096 [ 76.594509][ T5646] EXT4-fs (loop0): 1 orphan inode deleted [ 76.600944][ T5646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.853048][ T29] audit: type=1400 audit(1757469737.186:291): avc: denied { mount } for pid=5654 comm="syz.1.817" name="/" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 76.875818][ T29] audit: type=1400 audit(1757469737.186:292): avc: denied { search } for pid=5654 comm="syz.1.817" name="/" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 76.897875][ T29] audit: type=1400 audit(1757469737.186:293): avc: denied { search } for pid=5654 comm="syz.1.817" name="/" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 77.290660][ T5671] loop3: detected capacity change from 0 to 1024 [ 77.304578][ T5671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.531510][ T5678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'. [ 77.774974][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.795353][ T5684] netlink: 16 bytes leftover after parsing attributes in process `syz.2.828'. [ 77.821030][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.925284][ T5703] loop1: detected capacity change from 0 to 512 [ 77.945893][ T5703] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.835: casefold flag without casefold feature [ 77.971483][ T5703] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.835: couldn't read orphan inode 15 (err -117) [ 77.986520][ T5703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.103412][ T5709] loop3: detected capacity change from 0 to 128 [ 78.170007][ T5714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.841'. [ 78.282939][ T5721] pim6reg1: entered promiscuous mode [ 78.288393][ T5721] pim6reg1: entered allmulticast mode [ 78.311909][ T5725] 9pnet_fd: Insufficient options for proto=fd [ 78.435009][ T5735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 79.225327][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 79.225345][ T29] audit: type=1400 audit(1757469739.556:296): avc: denied { bind } for pid=5741 comm="syz.2.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.278027][ T5747] netlink: 28 bytes leftover after parsing attributes in process `syz.2.853'. [ 79.463215][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.480763][ T5756] loop4: detected capacity change from 0 to 512 [ 79.499065][ T3397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3397 comm=kworker/1:4 [ 79.500364][ T5756] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.858: casefold flag without casefold feature [ 79.512252][ T5759] 9pnet: p9_errstr2errno: server reported unknown error 184467440737 [ 79.543458][ T5763] loop2: detected capacity change from 0 to 736 [ 79.581309][ T5756] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.858: couldn't read orphan inode 15 (err -117) [ 79.632523][ T5756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.699387][ T29] audit: type=1326 audit(1757469740.026:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5768 comm="syz.3.863" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29c70aeba9 code=0x0 [ 79.728556][ T5773] loop2: detected capacity change from 0 to 1024 [ 79.739417][ T5773] EXT4-fs: quotafile must be on filesystem root [ 80.117273][ T5787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'. [ 80.246183][ T5794] 9pnet_fd: Insufficient options for proto=fd [ 80.275951][ T5798] loop0: detected capacity change from 0 to 1024 [ 80.283172][ T5798] EXT4-fs: Ignoring removed nobh option [ 80.288887][ T5798] EXT4-fs: Ignoring removed bh option [ 80.331780][ T5798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.346513][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.366631][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.475245][ T29] audit: type=1400 audit(1757469740.806:298): avc: denied { read } for pid=5809 comm="syz.0.877" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 80.498540][ T29] audit: type=1400 audit(1757469740.806:299): avc: denied { open } for pid=5809 comm="syz.0.877" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 80.572114][ T29] audit: type=1400 audit(1757469740.876:300): avc: denied { ioctl } for pid=5809 comm="syz.0.877" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 80.662761][ T5825] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 80.702334][ T5829] tipc: Enabled bearer , priority 0 [ 80.712755][ T5831] loop3: detected capacity change from 0 to 512 [ 80.786930][ T5829] tipc: Resetting bearer [ 80.814207][ T5828] tipc: Disabling bearer [ 80.911777][ T5831] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.884: casefold flag without casefold feature [ 80.940598][ T5836] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.955851][ T5836] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.964821][ T5831] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.884: couldn't read orphan inode 15 (err -117) [ 80.983860][ T5831] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.839709][ T5863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.896'. [ 81.857266][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.989242][ T5874] tipc: Enabled bearer , priority 0 [ 81.997841][ T5874] tipc: Resetting bearer [ 82.006577][ T5873] tipc: Disabling bearer [ 82.105688][ T5878] netlink: 8 bytes leftover after parsing attributes in process `syz.3.902'. [ 82.196750][ T29] audit: type=1400 audit(1757469742.526:301): avc: denied { override_creds } for pid=5881 comm="syz.4.904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.244390][ T5884] loop3: detected capacity change from 0 to 1024 [ 82.254533][ T5884] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.294759][ T5884] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 82.305200][ T5884] EXT4-fs (loop3): orphan cleanup on readonly fs [ 82.312220][ T5884] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.903: Freeing blocks not in datazone - block = 0, count = 4096 [ 82.326363][ T5884] EXT4-fs (loop3): 1 orphan inode deleted [ 82.332880][ T5884] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.359954][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.447956][ T5892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'. [ 82.456963][ T5892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.470364][ T5892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.668280][ T5898] netlink: 36 bytes leftover after parsing attributes in process `syz.3.910'. [ 82.791170][ T5902] loop3: detected capacity change from 0 to 512 [ 82.815092][ T5906] netlink: 'syz.0.914': attribute type 5 has an invalid length. [ 82.822946][ T5906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.914'. [ 82.835038][ T5902] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.912: casefold flag without casefold feature [ 82.854711][ T5909] 9pnet_fd: Insufficient options for proto=fd [ 82.879348][ T5902] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.912: couldn't read orphan inode 15 (err -117) [ 82.900767][ T5913] loop1: detected capacity change from 0 to 1024 [ 82.901731][ T5902] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.921145][ T5911] tipc: Enabled bearer , priority 0 [ 82.935130][ T5911] syzkaller0: entered promiscuous mode [ 82.940712][ T5911] syzkaller0: entered allmulticast mode [ 82.951604][ T5911] tipc: Resetting bearer [ 82.958241][ T5913] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 82.968980][ T5910] tipc: Resetting bearer [ 82.982931][ T5910] tipc: Disabling bearer [ 82.991353][ T5913] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 82.999890][ T5913] EXT4-fs (loop1): orphan cleanup on readonly fs [ 83.028165][ T5913] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.917: Freeing blocks not in datazone - block = 0, count = 4096 [ 83.083765][ T5913] EXT4-fs (loop1): 1 orphan inode deleted [ 83.096367][ T5913] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 83.124122][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.255790][ T5931] netlink: 'syz.2.926': attribute type 5 has an invalid length. [ 83.263526][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.926'. [ 83.307500][ T5935] 9pnet_fd: Insufficient options for proto=fd [ 83.387091][ T5939] loop1: detected capacity change from 0 to 512 [ 83.926640][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.019498][ T5950] loop1: detected capacity change from 0 to 1024 [ 84.076114][ T5950] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 84.105330][ T5950] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 84.114717][ T5950] EXT4-fs (loop1): orphan cleanup on readonly fs [ 84.121512][ T5950] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.932: Freeing blocks not in datazone - block = 0, count = 4096 [ 84.136118][ T5950] EXT4-fs (loop1): 1 orphan inode deleted [ 84.142631][ T5950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.178082][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.197770][ T5963] loop3: detected capacity change from 0 to 1024 [ 84.323607][ T5963] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.533608][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.564214][ T29] audit: type=1400 audit(1757469744.886:302): avc: denied { create } for pid=5978 comm="syz.1.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.583590][ T29] audit: type=1400 audit(1757469744.896:303): avc: denied { getopt } for pid=5978 comm="syz.1.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.736874][ T9] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=9 comm=kworker/0:0 [ 84.749878][ T5986] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 84.890384][ T5990] loop3: detected capacity change from 0 to 128 [ 85.329276][ T29] audit: type=1400 audit(1757469745.656:304): avc: denied { read write } for pid=6014 comm="syz.4.959" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 85.353504][ T29] audit: type=1400 audit(1757469745.656:305): avc: denied { open } for pid=6014 comm="syz.4.959" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 85.389747][ T6019] netlink: 52 bytes leftover after parsing attributes in process `syz.0.961'. [ 85.509745][ T29] audit: type=1400 audit(1757469745.836:306): avc: denied { bind } for pid=6030 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.522252][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz.0.966'. [ 85.529958][ T29] audit: type=1400 audit(1757469745.836:307): avc: denied { setopt } for pid=6030 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.559997][ T6031] netlink: 'syz.2.967': attribute type 10 has an invalid length. [ 85.572320][ T6031] team0: Port device dummy0 added [ 85.649905][ T6032] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 85.678911][ T6032] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 85.720007][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'. [ 85.740507][ T6050] tipc: Enabled bearer , priority 0 [ 85.747818][ T6050] syzkaller0: entered promiscuous mode [ 85.753376][ T6050] syzkaller0: entered allmulticast mode [ 85.765020][ T6050] tipc: Resetting bearer [ 85.772055][ T6049] tipc: Resetting bearer [ 85.779226][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'. [ 85.779743][ T6049] tipc: Disabling bearer [ 85.808510][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.3.974'. [ 85.986667][ T29] audit: type=1400 audit(1757469746.206:308): avc: denied { create } for pid=6042 comm="syz.1.972" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.007349][ T29] audit: type=1400 audit(1757469746.206:309): avc: denied { write } for pid=6042 comm="syz.1.972" name="file0" dev="tmpfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.029727][ T29] audit: type=1400 audit(1757469746.206:310): avc: denied { open } for pid=6042 comm="syz.1.972" path="/200/file0" dev="tmpfs" ino=1057 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.052543][ T29] audit: type=1400 audit(1757469746.206:311): avc: denied { ioctl } for pid=6042 comm="syz.1.972" path="/200/file0" dev="tmpfs" ino=1057 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 86.287629][ T6067] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2072 sclass=netlink_route_socket pid=6067 comm=syz.2.981 [ 86.474591][ T6073] loop4: detected capacity change from 0 to 128 [ 86.707387][ T6081] loop3: detected capacity change from 0 to 1024 [ 86.725122][ T6081] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 86.737123][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 86.751636][ T6081] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 86.774168][ T6081] EXT4-fs (loop3): orphan cleanup on readonly fs [ 86.786822][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 86.791374][ T6081] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.986: Freeing blocks not in datazone - block = 0, count = 4096 [ 86.809826][ T6081] EXT4-fs (loop3): 1 orphan inode deleted [ 86.817660][ T6081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 86.837758][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.987'. [ 86.990318][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.271720][ T6101] tipc: Enabled bearer , priority 0 [ 87.278995][ T6101] syzkaller0: entered promiscuous mode [ 87.284531][ T6101] syzkaller0: entered allmulticast mode [ 87.306560][ T6101] tipc: Resetting bearer [ 87.315604][ T6107] netlink: 'syz.3.995': attribute type 1 has an invalid length. [ 87.319654][ T6099] tipc: Resetting bearer [ 87.323476][ T6107] netlink: 'syz.3.995': attribute type 2 has an invalid length. [ 87.354094][ T6109] 9pnet_fd: Insufficient options for proto=fd [ 87.371384][ T6099] tipc: Disabling bearer [ 87.386158][ T6113] loop3: detected capacity change from 0 to 1024 [ 87.399333][ T6113] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 87.437416][ T6113] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 87.440485][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'. [ 87.445943][ T6113] EXT4-fs (loop3): orphan cleanup on readonly fs [ 87.461287][ T6113] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.998: Freeing blocks not in datazone - block = 0, count = 4096 [ 87.475916][ T6113] EXT4-fs (loop3): 1 orphan inode deleted [ 87.484563][ T6113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.530109][ T6117] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1000'. [ 87.560613][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.778312][ T6161] pim6reg1: entered promiscuous mode [ 87.783747][ T6161] pim6reg1: entered allmulticast mode [ 88.289311][ T6181] tipc: Enabled bearer , priority 0 [ 88.320711][ T6181] syzkaller0: entered promiscuous mode [ 88.326510][ T6181] syzkaller0: entered allmulticast mode [ 88.336554][ T6181] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 88.368655][ T6181] tipc: Resetting bearer [ 88.376507][ T6180] tipc: Resetting bearer [ 88.384324][ T6180] tipc: Disabling bearer [ 88.524238][ T9] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=9 comm=kworker/0:0 [ 88.540881][ T6197] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 88.570652][ T6199] tipc: Enabled bearer , priority 0 [ 88.599818][ T6201] pim6reg1: entered promiscuous mode [ 88.605249][ T6201] pim6reg1: entered allmulticast mode [ 88.635795][ T6204] 9pnet_fd: Insufficient options for proto=fd [ 88.654395][ T6199] syzkaller0: entered promiscuous mode [ 88.659908][ T6199] syzkaller0: entered allmulticast mode [ 88.690637][ T6199] tipc: Resetting bearer [ 88.697510][ T6198] tipc: Resetting bearer [ 88.704924][ T6198] tipc: Disabling bearer [ 89.030576][ T6226] loop2: detected capacity change from 0 to 1024 [ 89.146125][ T6226] EXT4-fs: Ignoring removed nobh option [ 89.151807][ T6226] EXT4-fs: Ignoring removed bh option [ 89.278814][ T6240] tipc: Enabling of bearer rejected, failed to enable media [ 89.294927][ T6239] 9pnet_fd: Insufficient options for proto=fd [ 89.335604][ T6226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.386013][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.450636][ T6261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 89.459737][ T6261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 89.471243][ T6261] random: crng reseeded on system resumption [ 90.010232][ T6279] 9pnet_fd: Insufficient options for proto=fd [ 90.024669][ T6281] pim6reg1: entered promiscuous mode [ 90.030106][ T6281] pim6reg1: entered allmulticast mode [ 90.037197][ T6282] loop3: detected capacity change from 0 to 128 [ 90.199165][ T10] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=10 comm=kworker/0:1 [ 90.234924][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 90.234943][ T29] audit: type=1400 audit(1757469750.566:346): avc: denied { write } for pid=6298 comm="syz.2.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.260378][ T29] audit: type=1400 audit(1757469750.566:347): avc: denied { connect } for pid=6298 comm="syz.2.1065" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.281872][ T6296] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 90.315078][ T6306] loop1: detected capacity change from 0 to 512 [ 90.435667][ T29] audit: type=1400 audit(1757469750.766:348): avc: denied { create } for pid=6311 comm="syz.1.1070" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.524600][ T29] audit: type=1400 audit(1757469750.856:349): avc: denied { unlink } for pid=3306 comm="syz-executor" name="file0" dev="tmpfs" ino=1142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.939912][ T6321] __nla_validate_parse: 4 callbacks suppressed [ 90.939929][ T6321] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1074'. [ 91.248821][ T6327] loop1: detected capacity change from 0 to 1024 [ 91.314815][ T6327] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 91.466492][ T6327] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 91.561752][ T6327] EXT4-fs (loop1): orphan cleanup on readonly fs [ 91.568355][ T6327] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1076: Freeing blocks not in datazone - block = 0, count = 4096 [ 91.582449][ T6327] EXT4-fs (loop1): 1 orphan inode deleted [ 91.588865][ T6327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.667144][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.755238][ T6346] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1082'. [ 91.872203][ T6360] loop1: detected capacity change from 0 to 512 [ 91.938454][ T29] audit: type=1400 audit(1757469752.196:350): avc: denied { create } for pid=6342 comm="syz.4.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 91.957945][ T29] audit: type=1400 audit(1757469752.196:351): avc: denied { connect } for pid=6342 comm="syz.4.1083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 91.977503][ T29] audit: type=1400 audit(1757469752.216:352): avc: denied { mount } for pid=6359 comm="syz.1.1088" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 91.999425][ T29] audit: type=1400 audit(1757469752.236:353): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 92.108529][ T6369] !: renamed from dummy0 (while UP) [ 92.184157][ T6373] netlink: 'syz.2.1094': attribute type 1 has an invalid length. [ 92.192094][ T6373] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1094'. [ 92.232020][ T6381] tipc: Enabling of bearer rejected, failed to enable media [ 92.284707][ T29] audit: type=1400 audit(1757469752.616:354): avc: denied { getopt } for pid=6372 comm="syz.2.1094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.342427][ T29] audit: type=1400 audit(1757469752.676:355): avc: denied { read write } for pid=6389 comm="syz.3.1099" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 92.419233][ T6403] loop0: detected capacity change from 0 to 512 [ 92.491416][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1100'. [ 92.564908][ T6419] loop4: detected capacity change from 0 to 1024 [ 92.572931][ T6422] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1109'. [ 92.589577][ T6419] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 92.603910][ T6419] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 92.620879][ T6419] EXT4-fs (loop4): orphan cleanup on readonly fs [ 92.630636][ T6419] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1107: Freeing blocks not in datazone - block = 0, count = 4096 [ 92.647455][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1110'. [ 92.656544][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1110'. [ 92.671182][ T6419] EXT4-fs (loop4): 1 orphan inode deleted [ 92.677555][ T6419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.725176][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.775462][ T6442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1117'. [ 93.669872][ T6451] loop2: detected capacity change from 0 to 128 [ 94.015372][ T6457] pim6reg1: entered promiscuous mode [ 94.020734][ T6457] pim6reg1: entered allmulticast mode [ 94.096057][ T6471] loop4: detected capacity change from 0 to 1024 [ 94.115097][ T6473] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 94.124160][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1128'. [ 94.139568][ T6471] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 94.176461][ T6471] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 94.209460][ T6481] random: crng reseeded on system resumption [ 94.212813][ T6471] EXT4-fs (loop4): orphan cleanup on readonly fs [ 94.222088][ T6471] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1127: Freeing blocks not in datazone - block = 0, count = 4096 [ 94.235794][ T6471] EXT4-fs (loop4): 1 orphan inode deleted [ 94.243495][ T6471] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 94.268633][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.599131][ T6512] loop0: detected capacity change from 0 to 128 [ 95.392219][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 95.392237][ T29] audit: type=1400 audit(1757469755.728:359): avc: denied { connect } for pid=6525 comm="syz.3.1149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.449601][ T6530] ip6erspan0: entered promiscuous mode [ 95.518441][ T29] audit: type=1400 audit(1757469755.768:360): avc: denied { create } for pid=6531 comm="syz.0.1154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 95.556700][ T29] audit: type=1400 audit(1757469755.888:361): avc: denied { read write } for pid=6531 comm="syz.0.1154" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.579952][ T29] audit: type=1400 audit(1757469755.888:362): avc: denied { open } for pid=6531 comm="syz.0.1154" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.999366][ T29] audit: type=1400 audit(1757469756.328:363): avc: denied { write } for pid=6554 comm="syz.2.1160" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 96.023045][ T29] audit: type=1400 audit(1757469756.328:364): avc: denied { open } for pid=6554 comm="syz.2.1160" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 96.130975][ T6559] loop3: detected capacity change from 0 to 1024 [ 96.138759][ T6559] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 96.150470][ T6559] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 96.162058][ T6559] EXT4-fs (loop3): orphan cleanup on readonly fs [ 96.169248][ T6559] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1162: Freeing blocks not in datazone - block = 0, count = 4096 [ 96.259786][ T6559] EXT4-fs (loop3): 1 orphan inode deleted [ 96.416615][ T6559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 96.530624][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.659253][ T6574] __nla_validate_parse: 4 callbacks suppressed [ 96.659269][ T6574] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1168'. [ 97.777853][ T6598] netlink: 'syz.3.1177': attribute type 8 has an invalid length. [ 97.785902][ T6598] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1177'. [ 97.835918][ T6601] syzkaller0: entered promiscuous mode [ 97.841467][ T6601] syzkaller0: entered allmulticast mode [ 97.854154][ T6601] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 99.552261][ T6640] netlink: 'syz.2.1191': attribute type 8 has an invalid length. [ 99.560077][ T6640] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1191'. [ 99.604323][ T29] audit: type=1400 audit(1757469759.938:365): avc: denied { ioctl } for pid=6631 comm="syz.1.1189" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 100.028624][ T6649] loop2: detected capacity change from 0 to 1024 [ 100.039432][ T6651] tipc: Enabled bearer , priority 0 [ 100.051255][ T6649] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 100.065405][ T6651] tipc: Resetting bearer [ 100.077115][ T6650] tipc: Disabling bearer [ 100.083239][ T6649] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 100.099150][ T6649] EXT4-fs (loop2): orphan cleanup on readonly fs [ 100.126013][ T6649] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1195: Freeing blocks not in datazone - block = 0, count = 4096 [ 100.192639][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1198'. [ 100.207089][ T6649] EXT4-fs (loop2): 1 orphan inode deleted [ 100.286327][ T6649] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 100.393452][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.766933][ T6685] tipc: Enabled bearer , priority 0 [ 100.781295][ T6685] tipc: Resetting bearer [ 100.793044][ T6682] tipc: Disabling bearer [ 100.933851][ T6693] netlink: 'syz.4.1210': attribute type 1 has an invalid length. [ 100.989579][ T6693] macvlan2: entered promiscuous mode [ 100.994984][ T6693] macvlan2: entered allmulticast mode [ 101.101962][ T6693] bond1: entered promiscuous mode [ 101.117552][ T6693] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 101.172655][ T6693] bond1: left promiscuous mode [ 101.775330][ T6715] loop2: detected capacity change from 0 to 1024 [ 101.811397][ T6715] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 101.901471][ T6715] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 101.926781][ T6715] EXT4-fs (loop2): orphan cleanup on readonly fs [ 101.954997][ T6715] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1214: Freeing blocks not in datazone - block = 0, count = 4096 [ 102.064630][ T6715] EXT4-fs (loop2): 1 orphan inode deleted [ 102.073143][ T6715] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 102.140388][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.244876][ T1035] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 102.252877][ T1035] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 102.280623][ T29] audit: type=1400 audit(1757469762.578:366): avc: denied { read write } for pid=6736 comm="syz.1.1224" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 102.304040][ T29] audit: type=1400 audit(1757469762.578:367): avc: denied { open } for pid=6736 comm="syz.1.1224" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 102.476724][ T6756] loop3: detected capacity change from 0 to 1024 [ 103.482295][ T6756] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 103.499674][ T6756] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 103.519442][ T6756] EXT4-fs (loop3): orphan cleanup on readonly fs [ 103.521224][ T6768] pim6reg1: entered promiscuous mode [ 103.525931][ T6756] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1231: Freeing blocks not in datazone - block = 0, count = 4096 [ 103.531236][ T6768] pim6reg1: entered allmulticast mode [ 103.546117][ T6756] EXT4-fs (loop3): 1 orphan inode deleted [ 103.558222][ T6756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.612305][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.692267][ T6773] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1236'. [ 104.024619][ T6789] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1243'. [ 104.117510][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 104.340810][ T6804] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1250'. [ 104.927864][ T29] audit: type=1400 audit(1757469765.258:368): avc: denied { mounton } for pid=6815 comm="syz.3.1254" path="/250/file0" dev="tmpfs" ino=1305 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 104.952868][ T6816] 9pnet_fd: Insufficient options for proto=fd [ 105.085739][ T6822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1257'. [ 105.820023][ T29] audit: type=1400 audit(1757469765.768:369): avc: denied { create } for pid=6823 comm="syz.3.1258" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 105.839815][ T29] audit: type=1400 audit(1757469765.778:370): avc: denied { sys_admin } for pid=6823 comm="syz.3.1258" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 106.159596][ T6849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.247876][ T6849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.359169][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1274'. [ 106.364426][ T6864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1273'. [ 106.414342][ T29] audit: type=1400 audit(1757469766.738:371): avc: denied { read open } for pid=6867 comm="syz.3.1276" path="/" dev="configfs" ino=2090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 106.566906][ T6876] syzkaller0: entered promiscuous mode [ 106.572468][ T6876] syzkaller0: entered allmulticast mode [ 106.593952][ T6876] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 106.594800][ T9] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=9 comm=kworker/0:0 [ 106.872110][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1285'. [ 106.944579][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1286'. [ 107.007514][ T6879] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 107.088432][ T6901] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1288'. [ 107.267521][ T29] audit: type=1326 audit(1757469767.598:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6908 comm="syz.4.1294" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0023ceba9 code=0x0 [ 107.682943][ T6918] syz_tun: entered promiscuous mode [ 107.692116][ T6918] batadv_slave_0: entered promiscuous mode [ 107.701533][ T6918] hsr1: entered allmulticast mode [ 107.706620][ T6918] syz_tun: entered allmulticast mode [ 107.712023][ T6918] batadv_slave_0: entered allmulticast mode [ 107.744661][ T6922] syzkaller0: entered promiscuous mode [ 107.750307][ T6922] syzkaller0: entered allmulticast mode [ 107.824482][ T6924] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 108.279903][ T6949] loop1: detected capacity change from 0 to 512 [ 108.673175][ T6949] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1307: casefold flag without casefold feature [ 108.780189][ T6949] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1307: couldn't read orphan inode 15 (err -117) [ 108.845044][ T6949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.883838][ T6967] __nla_validate_parse: 2 callbacks suppressed [ 108.883857][ T6967] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1313'. [ 109.017521][ T29] audit: type=1326 audit(1757469769.342:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6970 comm="syz.2.1314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d2daceba9 code=0x0 [ 109.077605][ T6976] loop4: detected capacity change from 0 to 1024 [ 109.100798][ T6976] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 109.113273][ T6976] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 109.124337][ T6976] EXT4-fs (loop4): orphan cleanup on readonly fs [ 109.280570][ T6976] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1317: Freeing blocks not in datazone - block = 0, count = 4096 [ 109.302283][ T6981] loop3: detected capacity change from 0 to 512 [ 109.358778][ T6981] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1318: casefold flag without casefold feature [ 109.402823][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.417248][ T6976] EXT4-fs (loop4): 1 orphan inode deleted [ 109.424939][ T6976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.438912][ T6981] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1318: couldn't read orphan inode 15 (err -117) [ 109.483608][ T6986] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1319'. [ 109.498278][ T6981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.525208][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.534534][ T1035] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=1035 comm=kworker/1:2 [ 109.548029][ T6988] 9pnet: p9_errstr2errno: server reported unknown error 18446 [ 109.712527][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1323'. [ 109.743592][ T6997] macvlan2: entered promiscuous mode [ 109.748948][ T6997] macvlan2: entered allmulticast mode [ 109.754997][ T6997] bond2: entered promiscuous mode [ 109.808519][ T6997] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 109.916779][ T6997] bond2: left promiscuous mode [ 110.059129][ T29] audit: type=1326 audit(1757469770.382:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 110.099406][ T29] audit: type=1326 audit(1757469770.412:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 110.122835][ T29] audit: type=1326 audit(1757469770.412:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 110.146197][ T29] audit: type=1326 audit(1757469770.412:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 110.169537][ T29] audit: type=1326 audit(1757469770.412:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 110.193120][ T29] audit: type=1326 audit(1757469770.412:379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 110.216449][ T29] audit: type=1326 audit(1757469770.412:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 110.239829][ T29] audit: type=1326 audit(1757469770.412:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 110.263172][ T29] audit: type=1326 audit(1757469770.422:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7005 comm="syz.2.1326" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 110.389200][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.930481][ T7032] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1337'. [ 110.945492][ T7006] tipc: Can't bind to reserved service type 2 [ 111.002692][ T7035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1338'. [ 111.158569][ T7048] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7048 comm=syz.2.1341 [ 112.855336][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'. [ 114.386581][ T7136] syzkaller0: entered promiscuous mode [ 114.392151][ T7136] syzkaller0: entered allmulticast mode [ 115.881469][ T7166] tipc: Enabled bearer , priority 0 [ 115.891210][ T7164] loop0: detected capacity change from 0 to 1024 [ 115.975885][ T7164] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.003459][ T7166] tipc: Resetting bearer [ 116.060589][ T7164] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 116.101116][ T7165] tipc: Disabling bearer [ 116.124915][ T7164] EXT4-fs (loop0): orphan cleanup on readonly fs [ 116.187538][ T7164] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.1383: Freeing blocks not in datazone - block = 0, count = 4096 [ 116.210953][ T7174] mmap: syz.3.1384 (7174) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 116.338150][ T7164] EXT4-fs (loop0): 1 orphan inode deleted [ 116.345566][ T7164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.437556][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.567444][ T7182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.601308][ T7182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.012652][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 117.012672][ T29] audit: type=1326 audit(1757470290.324:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7194 comm="syz.0.1392" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc7ed1beba9 code=0x0 [ 117.880727][ T7213] !: renamed from dummy0 (while UP) [ 117.923631][ T29] audit: type=1400 audit(1757470291.254:440): avc: denied { name_bind } for pid=7214 comm="syz.0.1399" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 118.082966][ T29] audit: type=1400 audit(1757470291.394:441): avc: denied { getopt } for pid=7226 comm="syz.0.1404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.346615][ T29] audit: type=1400 audit(1757470292.674:442): avc: denied { create } for pid=7255 comm="syz.4.1415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.367350][ T7258] loop1: detected capacity change from 0 to 512 [ 120.162255][ T7268] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1413'. [ 120.179399][ T7258] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1416: casefold flag without casefold feature [ 120.373945][ T7258] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1416: couldn't read orphan inode 15 (err -117) [ 120.431805][ T7258] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.533553][ T7284] loop0: detected capacity change from 0 to 1024 [ 120.567784][ T7284] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.618749][ T7284] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 120.636829][ T7284] EXT4-fs (loop0): orphan cleanup on readonly fs [ 120.648752][ T7284] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.1420: Freeing blocks not in datazone - block = 0, count = 4096 [ 120.665346][ T7284] EXT4-fs (loop0): 1 orphan inode deleted [ 120.673084][ T7284] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.770868][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.822846][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.906965][ T29] audit: type=1400 audit(1757470294.204:443): avc: denied { mount } for pid=7299 comm="syz.1.1426" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 120.921589][ T7302] tipc: Enabled bearer , priority 0 [ 120.928586][ T29] audit: type=1400 audit(1757470294.214:444): avc: denied { watch watch_reads } for pid=7299 comm="syz.1.1426" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 120.936512][ T7306] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1428'. [ 121.013935][ T7302] tipc: Resetting bearer [ 121.030353][ T7301] tipc: Disabling bearer [ 121.047489][ T29] audit: type=1326 audit(1757470294.304:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7305 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 121.055157][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1430'. [ 121.071205][ T29] audit: type=1326 audit(1757470294.304:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7305 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 121.103226][ T29] audit: type=1326 audit(1757470294.304:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7305 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 121.126744][ T29] audit: type=1326 audit(1757470294.304:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7305 comm="syz.2.1429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 122.169679][ T7338] hub 9-0:1.0: USB hub found [ 122.174513][ T7338] hub 9-0:1.0: 8 ports detected [ 123.832392][ T7363] tipc: Enabled bearer , priority 0 [ 123.877960][ T7363] tipc: Resetting bearer [ 124.010874][ T7361] tipc: Disabling bearer [ 124.928661][ T7380] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1451'. [ 124.963429][ T7384] pim6reg1: entered promiscuous mode [ 124.968785][ T7384] pim6reg1: entered allmulticast mode [ 125.472206][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1457'. [ 126.973991][ T7426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1465'. [ 128.061515][ T7438] pim6reg: entered allmulticast mode [ 128.070451][ T7438] pim6reg: left allmulticast mode [ 128.188049][ T7446] pim6reg1: entered promiscuous mode [ 128.193406][ T7446] pim6reg1: entered allmulticast mode [ 128.520018][ T7457] netlink: 'syz.0.1475': attribute type 8 has an invalid length. [ 128.527890][ T7457] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1475'. [ 128.684679][ T7462] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1478'. [ 129.313367][ T7484] pim6reg1: entered promiscuous mode [ 129.318850][ T7484] pim6reg1: entered allmulticast mode [ 129.508825][ T7501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.523864][ T7501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.737747][ T7508] loop4: detected capacity change from 0 to 512 [ 129.747386][ T7508] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1498: casefold flag without casefold feature [ 129.762084][ T7508] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1498: couldn't read orphan inode 15 (err -117) [ 129.779402][ T7508] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.866881][ T7516] loop1: detected capacity change from 0 to 1024 [ 129.917511][ T7516] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.949604][ T7516] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 129.958279][ T7516] EXT4-fs (loop1): orphan cleanup on readonly fs [ 129.965008][ T7516] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1501: Freeing blocks not in datazone - block = 0, count = 4096 [ 129.978645][ T7516] EXT4-fs (loop1): 1 orphan inode deleted [ 129.985889][ T7516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.132784][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.256411][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.353414][ T7523] tipc: Enabling of bearer rejected, failed to enable media [ 130.364294][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.406255][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.415595][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.431906][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 130.431924][ T29] audit: type=1400 audit(1757470303.765:452): avc: denied { mount } for pid=7520 comm="syz.1.1502" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 130.589174][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.905051][ T7546] loop0: detected capacity change from 0 to 1024 [ 130.915497][ T7546] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.969185][ T7546] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 130.977549][ T7546] EXT4-fs (loop0): orphan cleanup on readonly fs [ 131.016082][ T7546] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.1507: Freeing blocks not in datazone - block = 0, count = 4096 [ 131.030083][ T7546] EXT4-fs (loop0): 1 orphan inode deleted [ 131.062246][ T7551] syzkaller0: entered promiscuous mode [ 131.067930][ T7551] syzkaller0: entered allmulticast mode [ 131.078066][ T7546] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.133711][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.148510][ T7557] loop4: detected capacity change from 0 to 1024 [ 131.156227][ T7557] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.202056][ T7557] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 131.210381][ T7557] EXT4-fs (loop4): orphan cleanup on readonly fs [ 131.217515][ T7557] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1512: Freeing blocks not in datazone - block = 0, count = 4096 [ 131.234412][ T7557] EXT4-fs (loop4): 1 orphan inode deleted [ 131.240543][ T7557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.288943][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.641704][ T7577] tipc: Enabling of bearer rejected, failed to enable media [ 131.924400][ T7589] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1520'. [ 132.103618][ T7600] !: renamed from dummy0 (while UP) [ 132.222682][ T7608] syzkaller0: entered promiscuous mode [ 132.228208][ T7608] syzkaller0: entered allmulticast mode [ 132.276347][ T7613] 9pnet_fd: Insufficient options for proto=fd [ 132.418998][ T29] audit: type=1400 audit(1757470305.705:453): avc: denied { bind } for pid=7602 comm="syz.0.1527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 133.492539][ T29] audit: type=1400 audit(1757470306.825:454): avc: denied { bind } for pid=7640 comm="syz.1.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 133.683411][ T7647] loop3: detected capacity change from 0 to 512 [ 133.692557][ T29] audit: type=1400 audit(1757470306.995:455): avc: denied { ioctl } for pid=7638 comm="syz.0.1542" path="socket:[17569]" dev="sockfs" ino=17569 ioctlcmd=0x8919 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.741346][ T7647] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1545: casefold flag without casefold feature [ 133.762890][ T7647] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1545: couldn't read orphan inode 15 (err -117) [ 133.818409][ T7647] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.190535][ T7664] pim6reg1: entered promiscuous mode [ 134.195938][ T7664] pim6reg1: entered allmulticast mode [ 134.440092][ T7668] loop4: detected capacity change from 0 to 1024 [ 134.473755][ T7668] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 134.498803][ T7668] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 134.519898][ T7668] EXT4-fs (loop4): orphan cleanup on readonly fs [ 134.527015][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.578509][ T7668] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1554: Freeing blocks not in datazone - block = 0, count = 4096 [ 134.760922][ T7668] EXT4-fs (loop4): 1 orphan inode deleted [ 134.776439][ T7668] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 134.852354][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.522855][ T7692] pim6reg1: entered promiscuous mode [ 135.528217][ T7692] pim6reg1: entered allmulticast mode [ 135.562904][ T7697] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1565'. [ 135.828667][ T7706] loop2: detected capacity change from 0 to 1024 [ 135.834916][ T7707] tipc: Enabling of bearer rejected, failed to enable media [ 135.843689][ T7706] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 135.931962][ T7707] syzkaller0: entered promiscuous mode [ 135.937503][ T7707] syzkaller0: entered allmulticast mode [ 135.977449][ T7706] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 136.028103][ T7706] EXT4-fs (loop2): orphan cleanup on readonly fs [ 136.075517][ T7706] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1569: Freeing blocks not in datazone - block = 0, count = 4096 [ 136.184045][ T7706] EXT4-fs (loop2): 1 orphan inode deleted [ 136.227622][ T7706] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 136.267647][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.374506][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'. [ 137.395781][ T7761] hub 9-0:1.0: USB hub found [ 137.401098][ T7761] hub 9-0:1.0: 8 ports detected [ 138.197700][ T29] audit: type=1400 audit(1757470311.525:456): avc: denied { read } for pid=7757 comm="syz.2.1588" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 138.327522][ T29] audit: type=1400 audit(1757470311.655:457): avc: denied { read } for pid=7757 comm="syz.2.1588" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 138.642446][ T29] audit: type=1400 audit(1757470311.975:458): avc: denied { append } for pid=7797 comm="syz.4.1603" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 138.670413][ T7798] loop6: detected capacity change from 0 to 7 [ 139.137513][ T7816] hub 9-0:1.0: USB hub found [ 139.142438][ T7816] hub 9-0:1.0: 8 ports detected [ 139.509782][ T7819] pim6reg1: entered promiscuous mode [ 139.515201][ T7819] pim6reg1: entered allmulticast mode [ 139.672214][ T7826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7826 comm=syz.3.1614 [ 140.412972][ T7841] loop1: detected capacity change from 0 to 512 [ 140.429462][ T7843] loop2: detected capacity change from 0 to 512 [ 140.444005][ T7841] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1620: casefold flag without casefold feature [ 140.471962][ T7843] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1621: casefold flag without casefold feature [ 140.592149][ T7843] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1621: couldn't read orphan inode 15 (err -117) [ 140.606473][ T7843] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.619463][ T7841] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1620: couldn't read orphan inode 15 (err -117) [ 140.641169][ T7855] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 140.698854][ T7841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.218513][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.306466][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.392986][ T7878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.437915][ T7878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.571079][ T29] audit: type=1400 audit(1757470314.840:459): avc: denied { execute } for pid=7885 comm="syz.3.1636" name="file2" dev="tmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 141.593392][ T29] audit: type=1400 audit(1757470314.840:460): avc: denied { execute_no_trans } for pid=7885 comm="syz.3.1636" path="/323/file2" dev="tmpfs" ino=1681 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 142.387138][ T3397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3397 comm=kworker/1:4 [ 142.416142][ T7905] loop1: detected capacity change from 0 to 512 [ 142.643573][ T7905] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1642: casefold flag without casefold feature [ 142.657658][ T7905] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1642: couldn't read orphan inode 15 (err -117) [ 142.672123][ T7905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.240475][ T7948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7948 comm=syz.2.1656 [ 143.262611][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.288093][ T29] audit: type=1326 audit(1757470316.620:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef6fdeba9 code=0x7ffc0000 [ 143.311608][ T29] audit: type=1326 audit(1757470316.620:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcef6fdeba9 code=0x7ffc0000 [ 143.335009][ T29] audit: type=1326 audit(1757470316.620:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef6fdeba9 code=0x7ffc0000 [ 143.358412][ T29] audit: type=1326 audit(1757470316.620:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fcef6fdeba9 code=0x7ffc0000 [ 143.381761][ T29] audit: type=1326 audit(1757470316.620:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef6fdeba9 code=0x7ffc0000 [ 143.405113][ T29] audit: type=1326 audit(1757470316.620:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef6fdeba9 code=0x7ffc0000 [ 143.421519][ T7952] tipc: Enabling of bearer rejected, failed to enable media [ 143.428482][ T29] audit: type=1326 audit(1757470316.620:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fcef6fdeba9 code=0x7ffc0000 [ 143.460511][ T29] audit: type=1326 audit(1757470316.620:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef6fdeba9 code=0x7ffc0000 [ 143.484040][ T29] audit: type=1326 audit(1757470316.620:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef6fdeba9 code=0x7ffc0000 [ 143.594215][ T29] audit: type=1326 audit(1757470316.620:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7949 comm="syz.1.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fcef6fdeba9 code=0x7ffc0000 [ 143.627391][ T7952] syzkaller0: entered promiscuous mode [ 143.633068][ T7952] syzkaller0: entered allmulticast mode [ 143.676054][ T7956] !: renamed from dummy0 (while UP) [ 143.981545][ T7974] vlan0: entered allmulticast mode [ 143.986771][ T7974] batadv0: entered allmulticast mode [ 144.010506][ C1] hrtimer: interrupt took 47156 ns [ 144.021384][ T7977] loop3: detected capacity change from 0 to 512 [ 144.114564][ T7977] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1668: casefold flag without casefold feature [ 144.134794][ T7977] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1668: couldn't read orphan inode 15 (err -117) [ 144.156326][ T7977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.416693][ T36] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=36 comm=kworker/1:1 [ 144.525000][ T7994] 9pnet: p9_errstr2errno: server reported unknown error [ 144.864899][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.129881][ T8008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1677'. [ 145.916977][ T8027] syzkaller0: entered promiscuous mode [ 145.922657][ T8027] syzkaller0: entered allmulticast mode [ 145.930919][ T8027] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 146.018146][ T8028] hub 9-0:1.0: USB hub found [ 146.023012][ T8028] hub 9-0:1.0: 8 ports detected [ 146.803502][ T36] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=36 comm=kworker/1:1 [ 147.270329][ T8068] syzkaller0: entered promiscuous mode [ 147.275890][ T8068] syzkaller0: entered allmulticast mode [ 147.336949][ T8071] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 147.621530][ T8077] syzkaller0: entered promiscuous mode [ 147.627090][ T8077] syzkaller0: entered allmulticast mode [ 147.933376][ T8094] loop4: detected capacity change from 0 to 512 [ 147.986467][ T8094] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1710: casefold flag without casefold feature [ 148.076251][ T8105] wg2: entered promiscuous mode [ 148.081329][ T8105] wg2: entered allmulticast mode [ 148.098846][ T8094] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1710: couldn't read orphan inode 15 (err -117) [ 148.173926][ T8094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.225056][ T8109] syzkaller0: entered promiscuous mode [ 148.230600][ T8109] syzkaller0: entered allmulticast mode [ 148.312501][ T8114] loop2: detected capacity change from 0 to 1024 [ 148.324038][ T8114] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 148.383196][ T8114] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 148.396722][ T8114] EXT4-fs (loop2): orphan cleanup on readonly fs [ 148.404340][ T8114] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1717: Freeing blocks not in datazone - block = 0, count = 4096 [ 148.418982][ T8114] EXT4-fs (loop2): 1 orphan inode deleted [ 148.426144][ T8114] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.470222][ T8121] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1720'. [ 148.578989][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.136125][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.980394][ T8155] syzkaller0: entered promiscuous mode [ 149.986028][ T8155] syzkaller0: entered allmulticast mode [ 149.997094][ T8155] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 150.124640][ T8163] loop2: detected capacity change from 0 to 512 [ 150.167123][ T8163] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1737: casefold flag without casefold feature [ 150.182442][ T8163] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1737: couldn't read orphan inode 15 (err -117) [ 150.195635][ T8163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.045575][ T8191] loop3: detected capacity change from 0 to 1024 [ 151.055855][ T8191] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.068050][ T8191] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 151.076290][ T8191] EXT4-fs (loop3): orphan cleanup on readonly fs [ 151.084673][ T8191] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.1743: Freeing blocks not in datazone - block = 0, count = 4096 [ 151.098427][ T8191] EXT4-fs (loop3): 1 orphan inode deleted [ 151.105602][ T8191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 151.126462][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.147818][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.629770][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1752'. [ 151.775090][ T8226] loop2: detected capacity change from 0 to 512 [ 151.803688][ T8226] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1757: casefold flag without casefold feature [ 151.821179][ T8226] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1757: couldn't read orphan inode 15 (err -117) [ 151.848628][ T8226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 151.863744][ T8232] syzkaller0: entered promiscuous mode [ 151.869255][ T8232] syzkaller0: entered allmulticast mode [ 151.880433][ T8232] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 152.006937][ T8243] syzkaller0: entered promiscuous mode [ 152.012615][ T8243] syzkaller0: entered allmulticast mode [ 152.149896][ T8251] veth1_macvtap: left promiscuous mode [ 153.120184][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.251187][ T8278] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1775'. [ 153.288776][ T8281] wg2: left promiscuous mode [ 153.293585][ T8281] wg2: left allmulticast mode [ 153.487667][ T8281] wg2: entered promiscuous mode [ 153.494095][ T8281] wg2: entered allmulticast mode [ 154.431800][ T8311] syzkaller0: entered promiscuous mode [ 154.437338][ T8311] syzkaller0: entered allmulticast mode [ 155.173349][ T8344] Ÿë: port 1(erspan0) entered blocking state [ 155.180168][ T8344] Ÿë: port 1(erspan0) entered disabled state [ 155.187462][ T8344] erspan0: entered allmulticast mode [ 155.196858][ T8344] erspan0: entered promiscuous mode [ 155.300381][ T8349] syzkaller0: entered promiscuous mode [ 155.306045][ T8349] syzkaller0: entered allmulticast mode [ 155.342817][ T8351] loop1: detected capacity change from 0 to 1024 [ 155.353956][ T8351] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 155.365292][ T8351] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 155.373459][ T8351] EXT4-fs (loop1): orphan cleanup on readonly fs [ 155.379979][ T8351] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.1803: Freeing blocks not in datazone - block = 0, count = 4096 [ 155.398040][ T8351] EXT4-fs (loop1): 1 orphan inode deleted [ 155.404333][ T8351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 155.449952][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.566694][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1808'. [ 155.646102][ T8373] wg2: entered promiscuous mode [ 155.651193][ T8373] wg2: entered allmulticast mode [ 155.996795][ T8384] syzkaller0: entered promiscuous mode [ 156.002381][ T8384] syzkaller0: entered allmulticast mode [ 156.165139][ T8395] veth1_macvtap: left promiscuous mode [ 157.514473][ T8408] loop0: detected capacity change from 0 to 512 [ 157.555371][ T8408] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1823: casefold flag without casefold feature [ 157.591295][ T8408] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1823: couldn't read orphan inode 15 (err -117) [ 157.603794][ T8408] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 157.780356][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 157.780373][ T29] audit: type=1400 audit(1757470331.102:520): avc: denied { kexec_image_load } for pid=8428 comm="syz.2.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 157.975711][ T29] audit: type=1400 audit(1757470331.302:521): avc: denied { prog_load } for pid=8431 comm="syz.1.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.304898][ T29] audit: type=1400 audit(1757470331.302:522): avc: denied { bpf } for pid=8431 comm="syz.1.1833" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.325586][ T29] audit: type=1400 audit(1757470331.302:523): avc: denied { perfmon } for pid=8431 comm="syz.1.1833" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 158.346423][ T29] audit: type=1400 audit(1757470331.302:524): avc: denied { prog_run } for pid=8431 comm="syz.1.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 158.365435][ T29] audit: type=1400 audit(1757470331.332:525): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.389640][ T29] audit: type=1400 audit(1757470331.332:526): avc: denied { open } for pid=3302 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.413688][ T29] audit: type=1400 audit(1757470331.332:527): avc: denied { ioctl } for pid=3302 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 158.439261][ T29] audit: type=1400 audit(1757470331.352:528): avc: denied { create } for pid=8431 comm="syz.1.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 158.458606][ T29] audit: type=1400 audit(1757470331.352:529): avc: denied { open } for pid=8431 comm="syz.1.1833" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 158.604144][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.837861][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1839'. [ 159.104685][ T8452] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 159.250797][ T8466] loop2: detected capacity change from 0 to 512 [ 159.321993][ T8466] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1845: casefold flag without casefold feature [ 159.373243][ T8466] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1845: couldn't read orphan inode 15 (err -117) [ 159.402940][ T8466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.245472][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.275323][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1853'. [ 161.470274][ T8510] syzkaller0: entered promiscuous mode [ 161.475849][ T8510] syzkaller0: entered allmulticast mode [ 161.593927][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1857'. [ 161.973890][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1868'. [ 162.586163][ T8570] loop2: detected capacity change from 0 to 512 [ 162.594229][ T8570] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1878: casefold flag without casefold feature [ 162.607482][ T8570] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1878: couldn't read orphan inode 15 (err -117) [ 162.620809][ T8570] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.005911][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 163.005927][ T29] audit: type=1400 audit(1757470336.315:614): avc: denied { getopt } for pid=8590 comm="syz.1.1886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 163.484887][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.610729][ T29] audit: type=1400 audit(1757470336.935:615): avc: denied { compute_member } for pid=8590 comm="syz.1.1886" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 163.647931][ T29] audit: type=1400 audit(1757470336.975:616): avc: denied { read write } for pid=8601 comm="syz.2.1890" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 163.671175][ T29] audit: type=1400 audit(1757470336.975:617): avc: denied { open } for pid=8601 comm="syz.2.1890" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 163.892341][ T8614] loop4: detected capacity change from 0 to 1024 [ 163.900299][ T29] audit: type=1326 audit(1757470337.215:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.2.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 163.910432][ T8616] tipc: Enabled bearer , priority 0 [ 163.923662][ T29] audit: type=1326 audit(1757470337.215:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.2.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 163.949885][ T8614] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 163.953623][ T29] audit: type=1326 audit(1757470337.215:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.2.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 163.987336][ T29] audit: type=1326 audit(1757470337.215:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.2.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 164.010724][ T29] audit: type=1326 audit(1757470337.215:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.2.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 164.034075][ T29] audit: type=1326 audit(1757470337.215:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.2.1892" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2daceba9 code=0x7ffc0000 [ 164.037311][ T8614] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 164.067079][ T8616] syzkaller0: entered promiscuous mode [ 164.071164][ T8614] EXT4-fs (loop4): orphan cleanup on readonly fs [ 164.072758][ T8616] syzkaller0: entered allmulticast mode [ 164.079353][ T8614] EXT4-fs error (device loop4): ext4_free_blocks:6696: comm syz.4.1895: Freeing blocks not in datazone - block = 0, count = 4096 [ 164.101141][ T8616] tipc: Resetting bearer [ 164.111175][ T8615] tipc: Resetting bearer [ 164.130774][ T8615] tipc: Disabling bearer [ 164.149493][ T8614] EXT4-fs (loop4): 1 orphan inode deleted [ 164.174490][ T8614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.205713][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.262786][ T8632] loop1: detected capacity change from 0 to 512 [ 164.273604][ T8632] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1901: casefold flag without casefold feature [ 164.290430][ T8632] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1901: couldn't read orphan inode 15 (err -117) [ 164.305095][ T8632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.475091][ T8649] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8649 comm=syz.4.1906 [ 164.491921][ T8649] netlink: 120 bytes leftover after parsing attributes in process `syz.4.1906'. [ 164.895490][ T8659] tipc: Enabled bearer , priority 0 [ 164.918508][ T8659] syzkaller0: entered promiscuous mode [ 164.924059][ T8659] syzkaller0: entered allmulticast mode [ 164.954973][ T8659] tipc: Resetting bearer [ 164.979061][ T8658] tipc: Resetting bearer [ 164.997376][ T8658] tipc: Disabling bearer [ 165.140085][ T8671] loop2: detected capacity change from 0 to 1024 [ 165.165827][ T3306] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.188848][ T8671] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 165.266437][ T8671] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 165.351587][ T8671] EXT4-fs (loop2): orphan cleanup on readonly fs [ 165.358367][ T8671] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.1912: Freeing blocks not in datazone - block = 0, count = 4096 [ 165.431643][ T8671] EXT4-fs (loop2): 1 orphan inode deleted [ 165.439175][ T8671] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.480545][ T3302] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.835303][ T8705] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1919'. [ 165.909148][ T8710] tipc: Enabled bearer , priority 0 [ 165.917467][ T8710] syzkaller0: entered promiscuous mode [ 165.923096][ T8710] syzkaller0: entered allmulticast mode [ 165.934518][ T8710] tipc: Resetting bearer [ 165.941082][ T8709] tipc: Resetting bearer [ 165.948350][ T8709] tipc: Disabling bearer [ 166.025853][ T8717] loop4: detected capacity change from 0 to 512 [ 166.036207][ T8717] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.1925: casefold flag without casefold feature [ 166.052278][ T8717] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1925: couldn't read orphan inode 15 (err -117) [ 166.065104][ T8717] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.215312][ T8724] loop0: detected capacity change from 0 to 512 [ 166.223390][ T8724] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1928: casefold flag without casefold feature [ 166.236422][ T8724] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1928: couldn't read orphan inode 15 (err -117) [ 166.249183][ T8724] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.366057][ T8728] syzkaller0: entered promiscuous mode [ 166.371670][ T8728] syzkaller0: entered allmulticast mode [ 166.577685][ T8724] ================================================================== [ 166.585835][ T8724] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 166.595101][ T8724] [ 166.597451][ T8724] write to 0xffff88811a8da8b8 of 4 bytes by task 8726 on cpu 0: [ 166.605119][ T8724] writeback_single_inode+0x14a/0x3e0 [ 166.610534][ T8724] sync_inode_metadata+0x5b/0x90 [ 166.615514][ T8724] generic_buffers_fsync_noflush+0xd9/0x120 [ 166.621444][ T8724] ext4_sync_file+0x1ab/0x690 [ 166.626146][ T8724] vfs_fsync_range+0x10a/0x130 [ 166.630949][ T8724] ext4_buffered_write_iter+0x34f/0x3c0 [ 166.636543][ T8724] ext4_file_write_iter+0x383/0xf00 [ 166.641770][ T8724] iter_file_splice_write+0x666/0xa60 [ 166.647160][ T8724] direct_splice_actor+0x156/0x2a0 [ 166.652296][ T8724] splice_direct_to_actor+0x312/0x680 [ 166.657685][ T8724] do_splice_direct+0xda/0x150 [ 166.662483][ T8724] do_sendfile+0x380/0x650 [ 166.666944][ T8724] __x64_sys_sendfile64+0x105/0x150 [ 166.672178][ T8724] x64_sys_call+0x2bb0/0x2ff0 [ 166.676890][ T8724] do_syscall_64+0xd2/0x200 [ 166.681430][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.687345][ T8724] [ 166.689677][ T8724] read to 0xffff88811a8da8b8 of 4 bytes by task 8724 on cpu 1: [ 166.697238][ T8724] generic_buffers_fsync_noflush+0x80/0x120 [ 166.703161][ T8724] ext4_sync_file+0x1ab/0x690 [ 166.707861][ T8724] vfs_fsync_range+0x10a/0x130 [ 166.712652][ T8724] ext4_buffered_write_iter+0x34f/0x3c0 [ 166.718246][ T8724] ext4_file_write_iter+0x383/0xf00 [ 166.723482][ T8724] iter_file_splice_write+0x666/0xa60 [ 166.728893][ T8724] direct_splice_actor+0x156/0x2a0 [ 166.734022][ T8724] splice_direct_to_actor+0x312/0x680 [ 166.739403][ T8724] do_splice_direct+0xda/0x150 [ 166.744192][ T8724] do_sendfile+0x380/0x650 [ 166.748644][ T8724] __x64_sys_sendfile64+0x105/0x150 [ 166.753876][ T8724] x64_sys_call+0x2bb0/0x2ff0 [ 166.758587][ T8724] do_syscall_64+0xd2/0x200 [ 166.763128][ T8724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.769081][ T8724] [ 166.771416][ T8724] value changed: 0x00000028 -> 0x00000002 [ 166.777147][ T8724] [ 166.779483][ T8724] Reported by Kernel Concurrency Sanitizer on: [ 166.785663][ T8724] CPU: 1 UID: 0 PID: 8724 Comm: syz.0.1928 Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.795398][ T8724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 166.805474][ T8724] ================================================================== [ 166.898246][ T3305] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.072093][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.