last executing test programs: 1m13.028554736s ago: executing program 1 (id=77): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) unshare(0x20040600) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 1m12.747115009s ago: executing program 1 (id=81): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00', @ANYRES16=r3, @ANYBLOB="010003000000000000000000000008000100", @ANYBLOB="080003000000"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m12.69930001s ago: executing program 1 (id=82): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="ab26c0381d7804426d4f0ffeb17ad39b63362343370409f922040d63962fc2aeececbb3caeac9078a61cd82cd18765242b2dcebd0d4ff85fe6905ff54ef66387522551cdf76761c6370caf27f2992f1665d5d39e016fae7579a3b9255ce20c8c68fa9fbdf0d3fe6786f38019f7f803b323515bbc59f5ebfb620276a9f768603f8c17b3e8856af9155d3247349dc4bc29af164f8bd6c3317f21f04bb7047c6d4fc6", 0xa1}, {&(0x7f0000000140)="fa5cf2e9f531fb0969f9185e70e92cdc9c578dfad370ac8bf37435a70fd07e734b398c2615a9cd7a34ee41cc51b26e2829bf8dc17401669862766a05bf9a9c9c175d2e9c2de6f5b8b77a38e616fca1db5a2c1d4f69b8d64b5d4ce3a9bde53e5c3e6103421a38ad276686161286b64996b09b5d09f78cfb7e27c38be8e0e7346f8ba3453065c6d01bcece056fb93efd3997d82531970613a7c7e55d0e22f3b107774ca1bb3526e6c5524e8307b9012440403f", 0xb2}], 0x2}, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xe, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x60000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@x86={0x6, 0x2, 0x10, 0x0, 0xb, 0x7, 0x2, 0x9, 0x1, 0x51, 0x0, 0x8, 0x0, 0x4, 0x10, 0xff, 0xb, 0x2, 0x7, '\x00', 0x6, 0x4080000000000005}) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f00000005c0)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m12.565657352s ago: executing program 1 (id=86): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file1\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@nombcache}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80) write$bt_hci(r2, &(0x7f0000000bc0)=ANY=[], 0xa) sendfile(r2, r1, 0x0, 0x40001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 1m12.070525867s ago: executing program 1 (id=90): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r4, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r3, 0x0}]) 1m11.873428299s ago: executing program 1 (id=92): userfaultfd(0x80801) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xfff) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 1m11.852549419s ago: executing program 32 (id=92): userfaultfd(0x80801) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r1 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xfff) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) 57.695588838s ago: executing program 2 (id=164): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x7}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x2}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 57.590977999s ago: executing program 2 (id=165): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x2000008, &(0x7f0000000300)={[{@name={'name', 0x3d, 'bridge_slave_0\x00'}}, {@clone_children}, {@xattr}, {@name={'name', 0x3d, ')(!!}#):,}\xdc\x00'}}, {@cpuset_v2_mode}, {@favordynmods}], [{@obj_type={'obj_type', 0x3d, ',:'}}]}) 55.522626672s ago: executing program 2 (id=176): pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) r2 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) unshare(0x22020600) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x3, 0x5, 0x400007f, 0x6, 0x8, "42341f9b1000007e4f00"}) r3 = syz_open_pts(r1, 0x60300) dup3(r3, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 54.527863913s ago: executing program 2 (id=178): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@noload}, {@noacl}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@errors_continue}, {@nodelalloc}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80) write$bt_hci(r2, &(0x7f0000000bc0)=ANY=[], 0xa) sendfile(r2, r1, 0x0, 0x40001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[], 0x0) 50.787799455s ago: executing program 2 (id=192): syz_io_uring_setup(0x10ca, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680)) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000180)="cf", 0x1}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r2, r3, 0x3, 0x0) 50.625429947s ago: executing program 2 (id=195): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x0, 0x4, 0xfffc, 0x20, 0xfff3}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) r5 = getegid() setresgid(0xee00, r5, r5) sendto$unix(r3, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x100200, &(0x7f0000000100)={[{@resgid={'resgid', 0x3d, 0xffffffffffffffff}}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@discard}, {@mblk_io_submit}]}, 0x83, 0x5fe, &(0x7f0000001040)="$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") 50.612547798s ago: executing program 33 (id=195): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f00000000c0)={0x0, 0x4, 0xfffc, 0x20, 0xfff3}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0x9, 0x4) r5 = getegid() setresgid(0xee00, r5, r5) sendto$unix(r3, &(0x7f00000004c0)="0434", 0x2, 0xd1, 0x0, 0x0) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x100200, &(0x7f0000000100)={[{@resgid={'resgid', 0x3d, 0xffffffffffffffff}}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@discard}, {@mblk_io_submit}]}, 0x83, 0x5fe, &(0x7f0000001040)="$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") 36.351117767s ago: executing program 5 (id=263): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_open_dev$usbfs(0x0, 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@cgroup=r3, 0x6, 0x0, 0x50d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000005c0)={r5, r4, 0x15, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x30) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r6, 0x6, 0xb, 0x0, &(0x7f0000000040)) 36.322176667s ago: executing program 5 (id=265): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, 0x0, 0xfe49) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 35.750443903s ago: executing program 5 (id=272): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) 32.557685919s ago: executing program 5 (id=284): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x80) write$bt_hci(r2, &(0x7f0000000bc0)=ANY=[], 0xa) sendfile(r2, r1, 0x0, 0x40001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) syz_usb_connect(0x0, 0x1a2, &(0x7f0000000140)=ANY=[], 0x0) 30.337524023s ago: executing program 5 (id=291): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setpriority(0x0, 0x0, 0x2a14b58) r0 = syz_open_procfs(0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) timerfd_gettime(r0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x2000}], 0x1, 0x0, 0x0, 0x0) 30.181388745s ago: executing program 5 (id=293): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x62143, 0xd8) copy_file_range(r0, 0x0, r0, 0x0, 0x863, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x64d3000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8, 0x9, 0xffff}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8) munlockall() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) fcntl$addseals(r1, 0x409, 0x4) 30.181211725s ago: executing program 34 (id=293): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x62143, 0xd8) copy_file_range(r0, 0x0, r0, 0x0, 0x863, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x64d3000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x6, 0x1, 0xd, 0x8, 0x9, 0xffff}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8) munlockall() openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) fcntl$addseals(r1, 0x409, 0x4) 8.12751637s ago: executing program 0 (id=397): openat$procfs(0xffffffffffffff9c, 0x0, 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0xb, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) waitid(0x0, r0, 0x0, 0x8, &(0x7f0000000780)) 6.556405198s ago: executing program 3 (id=402): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x73f8, 0x4}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) 6.135553752s ago: executing program 0 (id=404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x40000014}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000000)=[{0x6}]}, 0x10) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000080)=0xb, 0x4) close_range(r3, 0xffffffffffffffff, 0x0) 6.073457503s ago: executing program 4 (id=405): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB='d\x00'], 0x80}}, 0x4000000) r3 = io_uring_setup(0x506b, &(0x7f0000000200)={0x0, 0xe5e0, 0x0, 0x0, 0x9e}) pread64(r3, 0x0, 0x0, 0x9) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x84000800}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x50, r0, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x66, 0x1b}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16c1}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x40) keyctl$clear(0x11, 0xfffffffffffffffd) listen(r4, 0x58b) add_key$keyring(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffffe) listen(r4, 0x8) 4.915451096s ago: executing program 4 (id=407): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_procfs(0x0, 0x0) setitimer(0x0, 0x0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.775179518s ago: executing program 6 (id=412): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x14, 0xf, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008010) request_key(&(0x7f0000000200)='pkcs7_test\x00', &(0x7f0000000680)={'syz', 0x3}, 0x0, 0xfffffffffffffffe) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip_vti0\x00'}) r3 = request_key(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={'syz', 0x0}, &(0x7f00000004c0)='\xfep\xb1\xabK-\x03\x00\xe5\x81\xb8}\xe6^\xab:B3\x00\x00\x00\x1e\x9a&rs\xcf\xd9\xde(\xdet|\xd7\x14\xe7\xe7%6\xc5\xf9\xe5\x1cx\xdf\x85\xbe7\x9e*U\x8d \xa8\'\xff\x0fl7-8Jn\x0e\x86:v\xcc9K\xc18\xd7\xc9\xc3F\xef\xd5F\xd6~k:\xf8\xc6E$\x0f\xb3Q\rI\xeb(\r$\x1aP\xaf\x8a\xdcx%j_\xe5\xa1\xb1\xf6Q\xb8\x88\x93c\a\\\xd3\x03\xfc\xba[b~f\xf3\x88', 0x0) add_key$user(&(0x7f0000000280), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000000)=' ', 0x1, 0xfffffffffffffffb) request_key(&(0x7f00000005c0)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, r3) 3.735394809s ago: executing program 6 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r4, 0x0, 0x0}, 0x10) 3.394316353s ago: executing program 3 (id=415): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc000802) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x800) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x100000, @loopback}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2000c000, 0x0, 0x0) 3.209602464s ago: executing program 3 (id=416): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000280), 0x1, 0x51f, &(0x7f0000000580)="$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") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r1, &(0x7f0000000000)="fa", 0xfffffdef) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r2, &(0x7f0000000000), 0x100000, 0x1000000}]) 3.205340045s ago: executing program 0 (id=417): socket$igmp6(0xa, 0x3, 0x2) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040000}, 0x10) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) 3.044709927s ago: executing program 7 (id=418): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x40000000000007c, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x714f, 0x0) 2.800881439s ago: executing program 6 (id=419): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfffffc99}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x43) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.781390569s ago: executing program 6 (id=420): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x700}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.75463143s ago: executing program 4 (id=421): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x401) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x2c, 0x0, 0x1, 0x2, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004054}, 0x4000044) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0xc3}, 0x1, 0x100000000000000, 0x0, 0x2000}, 0x40400c0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.678585121s ago: executing program 4 (id=422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000adc000/0x1000)=nil, &(0x7f000005f000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000462000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f00007f0000/0x4000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xbc7e, 0xc000, 0x1000207, 0x337}) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3e8, 0x100, 0x70bd2a, 0x25dfdbfe, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8051}, 0x8000) 2.372357454s ago: executing program 3 (id=423): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x80000, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$int_in(r2, 0x5421, &(0x7f0000000000)=0x5) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)={0x10}) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.973433198s ago: executing program 0 (id=424): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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") timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x5031, 0xffffffffffffffff, 0xc2dcc000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) pivot_root(0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000280)='./bus\x00', 0x85a4b0, &(0x7f0000000500)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000280)=""/97, 0x61) 1.973004649s ago: executing program 7 (id=425): connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x6e20, @local}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) creat(&(0x7f00000005c0)='./file0\x00', 0x0) 1.875647239s ago: executing program 6 (id=426): r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x101d0) 1.83757958s ago: executing program 0 (id=427): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xffffffff004) 1.310483096s ago: executing program 4 (id=428): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c0002"], 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, 0x0, 0x48044) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x10201, 0x1, 0x70000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000040)=0x4) syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 703.022303ms ago: executing program 3 (id=429): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000969e574b2d07b3a800000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) write$bt_hci(r0, &(0x7f0000000280)=ANY=[@ANYRES16=r0, @ANYRES32=r0, @ANYBLOB="e1ea89dcfdaa0055f0372a8f4971c62bc8c7150f416bf64d7d7aebd070e2a3becf431e7fff1879d6d9f9d4cc97c73ded91aa0e0fcbed34d3983fb2f85935392fa3a1e73850134a40a875631cecea77bf40c74cf39f16c28dfcecef595f87d0462b25e5f4abd69d85f99337ffb30d6267f9ca1e1c781f95bc0fa6bb141cc75deee5e7442626fdca997c1199682c72d6a3189b840799d4c00620d326c058bec83871afbb1a929f3b88e5"], 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x5, 0x0) listen(r4, 0x10000) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x52001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_AF_SPEC={0x4}, @IFLA_MTU={0x8, 0x4, 0x3}]}, 0x44}}, 0x440088c4) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x24}, 0x1, 0x0, 0x0, 0x4000811}, 0x8000) 696.785493ms ago: executing program 7 (id=430): setuid(0xee00) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10"], 0x48) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40015) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) 609.359253ms ago: executing program 7 (id=431): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$notify(r2, 0x402, 0x20) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x12, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x6e22, 0x9, @empty, 0x6}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r4, 0xd) listen(r1, 0x0) read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 535.420685ms ago: executing program 4 (id=432): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x25dfdbfa, {{@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x6}, {@in=@loopback, 0x4d4, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x2}, {0x0, 0x0, 0x0, 0x80000000000000, 0xffffffffffffffff, 0x0, 0x20000000008}, {0x0, 0x1, 0x4}, {0xf6}, 0x70bd26, 0x0, 0xa, 0x1, 0x9}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x60}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r2 = gettid() socket$inet6(0xa, 0x802, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r0, &(0x7f0000000000)='\"', 0xfdef) 499.489795ms ago: executing program 6 (id=433): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) getpgid(r0) syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000280)=""/194) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001700), 0x0, 0x0) 432.875116ms ago: executing program 7 (id=434): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 428.934156ms ago: executing program 0 (id=435): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, 0x0, 0xb) splice(r4, 0x0, r2, 0x0, 0x1000, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) 415.817226ms ago: executing program 3 (id=436): socket$igmp6(0xa, 0x3, 0x2) signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4040000}, 0x10) epoll_create1(0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x3, 0x80, 0x1}, 0x0, &(0x7f0000002080)={0x3ff, 0x0, 0x8, 0x9, 0x0, 0x663, 0x7fffffff}, 0x0, 0x0) 0s ago: executing program 7 (id=437): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r3, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000006c0), &(0x7f0000000000), 0x2}, 0x20) kernel console output (not intermixed with test programs): h" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 15.415253][ T30] audit: type=1400 audit(1778068327.322:63): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.92' (ED25519) to the list of known hosts. [ 22.830266][ T30] audit: type=1400 audit(1778068334.782:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.833756][ T278] cgroup: Unknown subsys name 'net' [ 22.853224][ T30] audit: type=1400 audit(1778068334.782:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.880418][ T30] audit: type=1400 audit(1778068334.812:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.880886][ T278] cgroup: Unknown subsys name 'devices' [ 23.056356][ T278] cgroup: Unknown subsys name 'hugetlb' [ 23.061979][ T278] cgroup: Unknown subsys name 'rlimit' [ 23.232065][ T30] audit: type=1400 audit(1778068335.182:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.255725][ T30] audit: type=1400 audit(1778068335.182:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.280730][ T30] audit: type=1400 audit(1778068335.182:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.301234][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.312920][ T30] audit: type=1400 audit(1778068335.262:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.338650][ T30] audit: type=1400 audit(1778068335.262:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.357579][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.365593][ T30] audit: type=1400 audit(1778068335.312:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.398659][ T30] audit: type=1400 audit(1778068335.312:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.899379][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.906487][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.914104][ T287] device bridge_slave_0 entered promiscuous mode [ 23.930003][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.937124][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.944904][ T286] device bridge_slave_0 entered promiscuous mode [ 23.951863][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.959041][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.966512][ T286] device bridge_slave_1 entered promiscuous mode [ 23.981835][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.989083][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.996672][ T287] device bridge_slave_1 entered promiscuous mode [ 24.048352][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.055457][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.062803][ T288] device bridge_slave_0 entered promiscuous mode [ 24.070426][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.077517][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.085066][ T288] device bridge_slave_1 entered promiscuous mode [ 24.111251][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.118376][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.125852][ T289] device bridge_slave_0 entered promiscuous mode [ 24.136239][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.143309][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.150809][ T289] device bridge_slave_1 entered promiscuous mode [ 24.203358][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.210494][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.218028][ T290] device bridge_slave_0 entered promiscuous mode [ 24.224947][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.232013][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.239675][ T290] device bridge_slave_1 entered promiscuous mode [ 24.348465][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.355662][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.362992][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.370062][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.410091][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.417187][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.424514][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.431567][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.464647][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.471739][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.479061][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.486123][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.499938][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.507009][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.514338][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.521409][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.530750][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.537835][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.545140][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.552174][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.581327][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.589653][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.597498][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.604800][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.611959][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.619262][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.626445][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.634264][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.641461][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.649267][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.656505][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.666126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.674381][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.681425][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.703883][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.711676][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.720056][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.727183][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.734789][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.743032][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.750130][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.757860][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.766068][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.773115][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.798102][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.806012][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.814326][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.822525][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.830990][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.838136][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.845643][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.853665][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.862089][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.869178][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.884171][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.892879][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.901282][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.908410][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.915892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.924357][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.932527][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.939675][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.970670][ T286] device veth0_vlan entered promiscuous mode [ 24.978197][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.987317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.994991][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.003049][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.011374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.019623][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.027815][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.036903][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.045253][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.052385][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.059857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.068321][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.076552][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.083578][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.091032][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.099228][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.107276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.115358][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.123407][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.131577][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.139646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.147824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.156007][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.164513][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.172800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.180802][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.189222][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.196794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.212990][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.221586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.232291][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.240897][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.254208][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.262292][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.270437][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.279178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.294260][ T289] device veth0_vlan entered promiscuous mode [ 25.300612][ T286] device veth1_macvtap entered promiscuous mode [ 25.309275][ T290] device veth0_vlan entered promiscuous mode [ 25.316394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.324594][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.332102][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.339634][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.348459][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.356851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.364743][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.372607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.380854][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.388435][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.406825][ T288] device veth0_vlan entered promiscuous mode [ 25.413031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.421447][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.429800][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.437791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.446436][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.454775][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.465621][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.473113][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.480613][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.488994][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.503928][ T289] device veth1_macvtap entered promiscuous mode [ 25.516736][ T290] device veth1_macvtap entered promiscuous mode [ 25.524043][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.532485][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.540920][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.549873][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.558079][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.566312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.574682][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.583038][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.590690][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.601245][ T287] device veth0_vlan entered promiscuous mode [ 25.616892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.625443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.633763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.642281][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.660104][ T287] device veth1_macvtap entered promiscuous mode [ 25.667386][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 25.676065][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.684731][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.693219][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.701737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.710114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.731798][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.740241][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.750607][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.760810][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.769753][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.787697][ T288] device veth1_macvtap entered promiscuous mode [ 25.849576][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.862071][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.881895][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.894755][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.915130][ T317] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 26.250614][ T328] loop0: detected capacity change from 0 to 1024 [ 26.638165][ T341] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 26.728972][ T346] loop0: detected capacity change from 0 to 256 [ 26.774423][ T346] FAT-fs (loop0): Unrecognized mount option "shortname=ˆixed" or missing value [ 26.797164][ T352] Zero length message leads to an empty skb [ 26.855309][ T352] mmap: syz.1.17 (352): VmData 29118464 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 27.057152][ T370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.22'. [ 27.080353][ T370] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=370 comm=syz.0.22 [ 27.116779][ T372] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev ?, type ?) errno=-22 [ 27.127526][ T372] SELinux: security_context_str_to_sid(unconfined_u) failed for (dev tmpfs, type tmpfs) errno=-22 [ 27.470877][ T377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.24'. [ 27.742327][ T386] loop3: detected capacity change from 0 to 512 [ 28.016763][ T390] netlink: 128 bytes leftover after parsing attributes in process `syz.1.28'. [ 28.086969][ T386] EXT4-fs error (device loop3): ext4_map_blocks:630: inode #2: block 3: comm syz.3.25: lblock 0 mapped to illegal pblock 3 (length 1) [ 28.101511][ T386] EXT4-fs warning (device loop3): dx_probe:823: inode #2: lblock 0: comm syz.3.25: error -117 reading directory block [ 28.114043][ T386] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 28.122250][ T386] EXT4-fs (loop3): mounted filesystem without journal. Opts: noquota,dioread_lock,data_err=ignore,minixdf,auto_da_alloc,grpjquota=.journal_dev=0x00000000000001ff,barrier=0x0000000000000008,jqfmt=vfsv1,grpid,,,errors=continue. Quota mode: writeback. [ 28.197114][ T30] kauditd_printk_skb: 63 callbacks suppressed [ 28.197150][ T30] audit: type=1400 audit(1778068340.102:137): avc: denied { mount } for pid=378 comm="syz.3.25" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 28.723944][ C0] sched: RT throttling activated [ 28.729524][ T390] netlink: 4 bytes leftover after parsing attributes in process `syz.1.28'. [ 28.742832][ T393] loop1: detected capacity change from 0 to 256 [ 28.804558][ T395] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 28.865004][ T393] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xd509bb81, utbl_chksum : 0xe619d30d) [ 28.927066][ T30] audit: type=1400 audit(1778068340.862:138): avc: denied { write } for pid=399 comm="syz.2.31" name="tcp6" dev="proc" ino=4026532582 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 28.971548][ T30] audit: type=1400 audit(1778068340.922:139): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 29.124117][ T30] audit: type=1400 audit(1778068341.012:140): avc: denied { setopt } for pid=403 comm="syz.4.35" lport=199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.216206][ T30] audit: type=1400 audit(1778068341.012:141): avc: denied { read } for pid=403 comm="syz.4.35" lport=199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.475838][ T402] loop2: detected capacity change from 0 to 131072 [ 29.518691][ T30] audit: type=1400 audit(1778068341.062:142): avc: denied { shutdown } for pid=403 comm="syz.4.35" lport=199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.540211][ T30] audit: type=1400 audit(1778068341.442:143): avc: denied { execute } for pid=414 comm="syz.3.37" path="/5/pids.events" dev="tmpfs" ino=46 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 29.569102][ T30] audit: type=1400 audit(1778068341.472:144): avc: denied { getopt } for pid=414 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.589810][ T402] F2FS-fs (loop2): Found nat_bits in checkpoint [ 29.660632][ T402] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 29.891775][ T30] audit: type=1400 audit(1778068341.842:145): avc: denied { write } for pid=401 comm="syz.2.34" name="/" dev="loop2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.014354][ T30] audit: type=1400 audit(1778068341.842:146): avc: denied { add_name } for pid=401 comm="syz.2.34" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 30.346691][ T437] netlink: 'syz.3.42': attribute type 13 has an invalid length. [ 30.360347][ T439] loop4: detected capacity change from 0 to 128 [ 30.414492][ T402] syz.2.34 (402) used greatest stack depth: 22528 bytes left [ 30.432202][ T430] syz.2.34 (430) used greatest stack depth: 21416 bytes left [ 30.465469][ T439] FAT-fs (loop4): bogus number of reserved sectors [ 30.472031][ T439] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 30.499864][ T439] FAT-fs (loop4): Can't find a valid FAT filesystem [ 30.728293][ T450] loop1: detected capacity change from 0 to 256 [ 30.893988][ T450] exFAT-fs (loop1): hint_cluster is invalid (17) [ 30.921859][ T450] exFAT-fs (loop1): error, bogus directory size (clus : ondisk(2) != counted(1)) [ 30.945921][ T450] exFAT-fs (loop1): Filesystem has been set read-only [ 30.988270][ T458] loop2: detected capacity change from 0 to 512 [ 31.042530][ T458] EXT4-fs (loop2): Test dummy encryption mode enabled [ 31.066068][ T458] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 31.094051][ T458] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 31.121983][ T458] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.50: bad orphan inode 131083 [ 31.206434][ T458] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 31.264557][ T471] netlink: 'syz.3.55': attribute type 4 has an invalid length. [ 31.324895][ T472] netlink: 'syz.3.55': attribute type 4 has an invalid length. [ 32.775371][ T493] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.782720][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.935419][ T493] syz.2.62 (493) used greatest stack depth: 20992 bytes left [ 33.121100][ T500] loop0: detected capacity change from 0 to 8192 [ 33.130874][ T500] ======================================================= [ 33.130874][ T500] WARNING: The mand mount option has been deprecated and [ 33.130874][ T500] and is ignored by this kernel. Remove the mand [ 33.130874][ T500] option from the mount to silence this warning. [ 33.130874][ T500] ======================================================= [ 33.214821][ T500] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 33.234344][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 33.234358][ T30] audit: type=1400 audit(1778068345.192:198): avc: denied { mount } for pid=499 comm="syz.0.65" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.264090][ T422] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 33.266035][ T496] loop1: detected capacity change from 0 to 40427 [ 33.295915][ T30] audit: type=1400 audit(1778068345.252:199): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 33.350021][ T496] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 33.358868][ T496] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 33.368605][ T30] audit: type=1400 audit(1778068345.322:200): avc: denied { read } for pid=501 comm="syz.0.66" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.391888][ T502] netlink: 20 bytes leftover after parsing attributes in process `syz.0.66'. [ 33.392681][ T30] audit: type=1400 audit(1778068345.322:201): avc: denied { open } for pid=501 comm="syz.0.66" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.425925][ T496] F2FS-fs (loop1): invalid crc value [ 33.431622][ T502] netlink: 'syz.0.66': attribute type 6 has an invalid length. [ 33.444040][ T502] netlink: 72 bytes leftover after parsing attributes in process `syz.0.66'. [ 33.446298][ T30] audit: type=1400 audit(1778068345.342:202): avc: denied { ioctl } for pid=501 comm="syz.0.66" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae88 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 33.491039][ T496] F2FS-fs (loop1): Found nat_bits in checkpoint [ 33.524022][ T422] usb 3-1: Using ep0 maxpacket: 32 [ 33.572026][ T496] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 33.582285][ T496] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 33.638933][ T30] audit: type=1400 audit(1778068345.592:203): avc: denied { mount } for pid=495 comm="syz.1.63" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.662974][ T422] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 33.671239][ T516] loop4: detected capacity change from 0 to 128 [ 33.678902][ T422] usb 3-1: config 0 has no interface number 0 [ 33.742951][ T517] netlink: 'syz.0.67': attribute type 3 has an invalid length. [ 33.815288][ T516] EXT4-fs (loop4): Ignoring removed nobh option [ 33.947720][ T516] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000004,,errors=continue. Quota mode: none. [ 34.023979][ T516] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.058582][ T30] audit: type=1400 audit(1778068346.012:204): avc: denied { map } for pid=515 comm="syz.4.70" path="/8/mnt/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.088047][ T30] audit: type=1400 audit(1778068346.032:205): avc: denied { execute } for pid=515 comm="syz.4.70" path="/8/mnt/file1" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.116698][ T30] audit: type=1400 audit(1778068346.062:206): avc: denied { append } for pid=495 comm="syz.1.63" path="/18/file0/memory.events.local" dev="loop1" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 34.140583][ T422] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 34.160143][ T422] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.168662][ T30] audit: type=1400 audit(1778068346.122:207): avc: denied { connect } for pid=515 comm="syz.4.70" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 34.178787][ T422] usb 3-1: Product: syz [ 34.211907][ T422] usb 3-1: Manufacturer: syz [ 34.216815][ T422] usb 3-1: SerialNumber: syz [ 34.234530][ T422] usb 3-1: config 0 descriptor?? [ 34.274602][ T422] smsc95xx v2.0.0 [ 34.295783][ T496] attempt to access beyond end of device [ 34.295783][ T496] loop1: rw=2049, want=81920, limit=40427 [ 34.309604][ T496] attempt to access beyond end of device [ 34.309604][ T496] loop1: rw=2049, want=49296, limit=40427 [ 34.370816][ T496] attempt to access beyond end of device [ 34.370816][ T496] loop1: rw=524288, want=78080, limit=40427 [ 34.382545][ T496] attempt to access beyond end of device [ 34.382545][ T496] loop1: rw=0, want=77832, limit=40427 [ 34.394194][ T496] attempt to access beyond end of device [ 34.394194][ T496] loop1: rw=0, want=77832, limit=40427 [ 34.442401][ T495] attempt to access beyond end of device [ 34.442401][ T495] loop1: rw=0, want=77832, limit=40427 [ 34.655852][ T496] attempt to access beyond end of device [ 34.655852][ T496] loop1: rw=0, want=77832, limit=40427 [ 34.680875][ T495] attempt to access beyond end of device [ 34.680875][ T495] loop1: rw=0, want=77832, limit=40427 [ 34.692805][ T496] attempt to access beyond end of device [ 34.692805][ T496] loop1: rw=0, want=77832, limit=40427 [ 34.704660][ T496] attempt to access beyond end of device [ 34.704660][ T496] loop1: rw=0, want=77832, limit=40427 [ 34.809909][ T532] loop0: detected capacity change from 0 to 128 [ 35.655594][ T544] loop0: detected capacity change from 0 to 256 [ 35.716210][ T550] netlink: 16 bytes leftover after parsing attributes in process `syz.1.81'. [ 35.732116][ T544] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x22de60d6, utbl_chksum : 0xe619d30d) [ 35.764719][ T553] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 35.792404][ T544] input: syz0 as /devices/virtual/input/input4 [ 35.834115][ T422] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 35.847042][ T422] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 35.866428][ T559] loop0: detected capacity change from 0 to 512 [ 35.897953][ T563] loop1: detected capacity change from 0 to 512 [ 35.942567][ T563] EXT4-fs (loop1): 1 truncate cleaned up [ 35.947109][ T565] loop4: detected capacity change from 0 to 4096 [ 35.950493][ T563] EXT4-fs (loop1): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 35.960622][ T559] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,errors=remount-ro,. Quota mode: writeback. [ 35.985827][ T559] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.996774][ T565] EXT4-fs (loop4): Ignoring removed nobh option [ 36.003210][ T565] EXT4-fs (loop4): Test dummy encryption mode enabled [ 36.083310][ T565] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 36.096178][ T565] System zones: 0-5 [ 36.100952][ T565] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug,min_batch_time=0x0000000000000004,nobh,test_dummy_encryption,errors=continue,nolazytime,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 36.162301][ T563] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: Out of memory [ 36.176266][ T563] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #18: comm syz.1.86: mark_inode_dirty error [ 36.191008][ T563] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: Out of memory [ 36.200373][ T565] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 36.200617][ T563] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #18: comm syz.1.86: mark_inode_dirty error [ 36.231226][ T563] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #18: comm syz.1.86: attempt to clear invalid blocks 36 len 12 [ 36.254695][ T563] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #18: comm syz.1.86: attempt to clear invalid blocks 340019711 len 1 [ 36.283704][ T563] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: Out of memory [ 36.295520][ T563] EXT4-fs error (device loop1): ext4_punch_hole:4150: inode #18: comm syz.1.86: mark_inode_dirty error [ 36.386940][ T286] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1) [ 36.405658][ T286] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: Out of memory [ 36.618323][ T580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.94'. [ 36.645245][ T580] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=580 comm=syz.0.94 [ 36.790585][ T581] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.797862][ T581] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.805669][ T581] device bridge_slave_0 entered promiscuous mode [ 36.814621][ T581] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.823635][ T581] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.858349][ T581] device bridge_slave_1 entered promiscuous mode [ 37.148535][ T422] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 37.159531][ T422] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 37.167615][ T422] usb 3-1: USB disconnect, device number 2 [ 37.295313][ T581] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.302427][ T581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.309757][ T581] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.316832][ T581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.347181][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.355155][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.362683][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.384717][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.401686][ T441] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.408786][ T441] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.436333][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.454341][ T441] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.461512][ T441] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.479428][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.505216][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.520909][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.531705][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.549017][ T199] device bridge_slave_1 left promiscuous mode [ 37.557253][ T199] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.569281][ T199] device bridge_slave_0 left promiscuous mode [ 37.581862][ T199] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.595067][ T199] device veth1_macvtap left promiscuous mode [ 37.611210][ T199] device veth0_vlan left promiscuous mode [ 38.174099][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.193688][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.205316][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.219905][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.235455][ T581] device veth0_vlan entered promiscuous mode [ 38.259289][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.267838][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.278631][ T581] device veth1_macvtap entered promiscuous mode [ 38.289158][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.297107][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.306106][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.325832][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.347120][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.587484][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 40.587499][ T30] audit: type=1400 audit(1778068352.542:236): avc: denied { mount } for pid=630 comm="syz.3.108" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 44.388334][ T422] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 44.459175][ T645] Illegal XDP return value 4294967294, expect packet loss! [ 44.591950][ T651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=651 comm=syz.0.115 [ 44.603409][ T649] device bridge_slave_0 left promiscuous mode [ 44.610356][ T649] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.618994][ T649] device bridge_slave_1 left promiscuous mode [ 44.625258][ T649] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.648746][ T655] netlink: 12 bytes leftover after parsing attributes in process `syz.5.118'. [ 44.659814][ T30] audit: type=1400 audit(1778068356.612:237): avc: denied { create } for pid=654 comm="syz.5.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.694319][ T30] audit: type=1400 audit(1778068356.612:238): avc: denied { write } for pid=654 comm="syz.5.118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 44.770454][ T30] audit: type=1326 audit(1778068356.672:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.5.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f3f2fdd9 code=0x7ffc0000 [ 44.810952][ T30] audit: type=1326 audit(1778068356.672:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.5.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fa8f3f2fdd9 code=0x7ffc0000 [ 44.835695][ T30] audit: type=1326 audit(1778068356.672:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.5.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f3f2fdd9 code=0x7ffc0000 [ 44.860792][ T30] audit: type=1326 audit(1778068356.682:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.5.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa8f3ef060e code=0x7ffc0000 [ 44.885591][ T30] audit: type=1326 audit(1778068356.682:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.5.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8f3f2fa6b code=0x7ffc0000 [ 44.910517][ T30] audit: type=1326 audit(1778068356.682:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.5.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8f3f2fa6b code=0x7ffc0000 [ 44.943977][ T30] audit: type=1326 audit(1778068356.682:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.5.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8f3f2fa6b code=0x7ffc0000 [ 45.054016][ T419] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 45.123996][ T39] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 45.293980][ T419] usb 6-1: Using ep0 maxpacket: 32 [ 45.364002][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 45.484030][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 45.503998][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 45.524001][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 45.533225][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.554892][ T39] usb 4-1: config 0 descriptor?? [ 45.574220][ T419] usb 6-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 3.02 [ 45.586309][ T419] usb 6-1: New USB device strings: Mfr=19, Product=95, SerialNumber=25 [ 45.595069][ T419] usb 6-1: Product: syz [ 45.599316][ T419] usb 6-1: Manufacturer: syz [ 45.604823][ T39] hub 4-1:0.0: USB hub found [ 45.610566][ T419] usb 6-1: SerialNumber: syz [ 45.628610][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 45.628624][ T30] audit: type=1400 audit(1778068357.582:264): avc: denied { read } for pid=674 comm="syz.0.126" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 45.633618][ T419] usb 6-1: config 0 descriptor?? [ 45.634952][ T30] audit: type=1400 audit(1778068357.582:265): avc: denied { open } for pid=674 comm="syz.0.126" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 45.694839][ T30] audit: type=1326 audit(1778068357.652:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.5.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8f3f2fa6b code=0x7ffc0000 [ 45.721034][ T30] audit: type=1326 audit(1778068357.652:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.5.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8f3f2fa6b code=0x7ffc0000 [ 45.749961][ T419] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 45.775059][ T30] audit: type=1326 audit(1778068357.652:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.5.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa8f3f2fa6b code=0x7ffc0000 [ 45.775194][ T419] usb 6-1: Detected FT8U232AM [ 45.811577][ T419] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 45.824223][ T39] hub 4-1:0.0: 1 port detected [ 45.898942][ T30] audit: type=1326 audit(1778068357.672:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.5.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa8f3ef060e code=0x7ffc0000 [ 45.949490][ T30] audit: type=1400 audit(1778068357.672:270): avc: denied { block_suspend } for pid=674 comm="syz.0.126" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 46.049254][ T30] audit: type=1326 audit(1778068357.882:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.5.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f3f2fdd9 code=0x7ffc0000 [ 46.074883][ T30] audit: type=1400 audit(1778068357.892:272): avc: denied { map } for pid=685 comm="syz.2.129" path="socket:[17551]" dev="sockfs" ino=17551 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 46.142583][ T419] usb 6-1: USB disconnect, device number 2 [ 46.143353][ T419] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 46.143611][ T419] ftdi_sio 6-1:0.0: device disconnected [ 46.154326][ T30] audit: type=1326 audit(1778068357.962:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=654 comm="syz.5.118" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8f3f2fdd9 code=0x7ffc0000 [ 47.329799][ T660] UDC core: couldn't find an available UDC or it's busy: -16 [ 47.337468][ T660] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 47.674704][ T39] usb 4-1: USB disconnect, device number 2 [ 47.694316][ T682] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 47.912096][ T717] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 47.927134][ T718] loop5: detected capacity change from 0 to 128 [ 47.946033][ T712] 9pnet: p9_errstr2errno: server reported unknown error Àñ'IÓ$íÛ·=¼¼ [ 48.518910][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 48.535857][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 48.553582][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 48.573078][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 48.586228][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 48.594972][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 48.603234][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 48.611441][ T441] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 48.627395][ T727] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 48.719349][ T738] device sit1 entered promiscuous mode [ 48.814009][ T419] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 48.862405][ T746] loop0: detected capacity change from 0 to 256 [ 48.907941][ T749] loop5: detected capacity change from 0 to 512 [ 48.981548][ T749] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 49.004300][ T746] FAT-fs (loop0): Directory bread(block 64) failed [ 49.010880][ T746] FAT-fs (loop0): Directory bread(block 65) failed [ 49.026045][ T752] process 'syz.2.152' launched './file1' with NULL argv: empty string added [ 49.035084][ T746] FAT-fs (loop0): Directory bread(block 66) failed [ 49.041629][ T746] FAT-fs (loop0): Directory bread(block 67) failed [ 49.056654][ T749] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nomblk_io_submit,. Quota mode: writeback. [ 49.058727][ T746] FAT-fs (loop0): Directory bread(block 68) failed [ 49.075970][ T746] FAT-fs (loop0): Directory bread(block 69) failed [ 49.082546][ T746] FAT-fs (loop0): Directory bread(block 70) failed [ 49.089288][ T746] FAT-fs (loop0): Directory bread(block 71) failed [ 49.095995][ T746] FAT-fs (loop0): Directory bread(block 72) failed [ 49.101846][ T749] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.102539][ T746] FAT-fs (loop0): Directory bread(block 73) failed [ 49.194083][ T419] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 49.211866][ T419] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 49.225179][ T419] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 49.244010][ T419] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.264291][ T419] usb 4-1: config 0 descriptor?? [ 49.284065][ T733] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 49.304624][ T419] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 49.500210][ T766] netlink: 'syz.0.155': attribute type 9 has an invalid length. [ 49.523394][ T769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 49.532797][ T766] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=27 sclass=netlink_tcpdiag_socket pid=766 comm=syz.0.155 [ 49.551321][ T769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.158'. [ 49.690640][ T776] loop2: detected capacity change from 0 to 512 [ 49.736312][ T776] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,errors=remount-ro,. Quota mode: writeback. [ 49.760325][ T776] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 49.836815][ T776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.160'. [ 49.873293][ T776] xt_hashlimit: size too large, truncated to 1048576 [ 49.977302][ T782] loop0: detected capacity change from 0 to 512 [ 50.071230][ T782] EXT4-fs (loop0): 1 truncate cleaned up [ 50.084010][ T782] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 50.215638][ T787] netlink: 12 bytes leftover after parsing attributes in process `syz.3.144'. [ 50.254046][ T787] netlink: 28 bytes leftover after parsing attributes in process `syz.3.144'. [ 50.287715][ T787] netlink: 23 bytes leftover after parsing attributes in process `syz.3.144'. [ 50.327090][ T787] netlink: 23 bytes leftover after parsing attributes in process `syz.3.144'. [ 50.664521][ T792] device vlan2 entered promiscuous mode [ 50.683506][ T792] device dummy0 entered promiscuous mode [ 51.081641][ T803] netlink: 24 bytes leftover after parsing attributes in process `syz.5.168'. [ 51.092365][ T801] loop0: detected capacity change from 0 to 1024 [ 51.182160][ T801] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 51.195906][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 51.195919][ T30] audit: type=1400 audit(1778068363.152:278): avc: denied { read write } for pid=800 comm="syz.0.167" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.225824][ T30] audit: type=1400 audit(1778068363.152:279): avc: denied { open } for pid=800 comm="syz.0.167" path="/39/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 51.336231][ T814] cgroup: No subsys list or none specified [ 51.383978][ T419] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 51.707456][ T20] usb 4-1: USB disconnect, device number 3 [ 51.934001][ T419] usb 6-1: device descriptor read/64, error -71 [ 52.191581][ T30] audit: type=1400 audit(1778068364.142:280): avc: denied { read } for pid=821 comm="syz.4.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.323980][ T419] usb 6-1: device descriptor read/64, error -71 [ 52.594054][ T419] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 52.609711][ T825] loop0: detected capacity change from 0 to 256 [ 52.636000][ T30] audit: type=1400 audit(1778068364.592:281): avc: denied { mount } for pid=824 comm="syz.0.174" name="/" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 52.863982][ T419] usb 6-1: device descriptor read/64, error -71 [ 52.943585][ T828] capability: warning: `syz.3.175' uses deprecated v2 capabilities in a way that may be insecure [ 53.029564][ T30] audit: type=1400 audit(1778068364.982:282): avc: denied { write } for pid=824 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.253966][ T419] usb 6-1: device descriptor read/64, error -71 [ 53.374046][ T419] usb usb6-port1: attempt power cycle [ 53.783987][ T419] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 53.936828][ T836] loop2: detected capacity change from 0 to 512 [ 53.945776][ T30] audit: type=1400 audit(1778068365.902:283): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 53.965788][ T419] usb 6-1: device descriptor read/8, error -71 [ 53.980740][ T836] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 53.980740][ T836] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 53.980740][ T836] [ 54.005479][ T836] EXT4-fs (loop2): 1 truncate cleaned up [ 54.011169][ T836] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,noacl,jqfmt=vfsv1,nojournal_checksum,errors=continue,nodelalloc,,errors=continue. Quota mode: none. [ 54.138412][ T30] audit: type=1400 audit(1778068366.092:284): avc: denied { create } for pid=845 comm="syz.4.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 54.166604][ T846] netlink: 'syz.4.182': attribute type 4 has an invalid length. [ 54.192383][ T848] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Out of memory [ 54.325594][ T847] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 54.527557][ T848] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #18: comm syz.2.178: mark_inode_dirty error [ 54.551082][ T852] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Out of memory [ 54.562340][ T852] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #18: comm syz.2.178: mark_inode_dirty error [ 54.576123][ T852] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #18: comm syz.2.178: attempt to clear invalid blocks 36 len 12 [ 54.589794][ T852] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #18: comm syz.2.178: attempt to clear invalid blocks 340019711 len 1 [ 54.604027][ T419] usb 6-1: device descriptor read/8, error -71 [ 54.612485][ T852] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Out of memory [ 56.570774][ T861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.186'. [ 56.595413][ T852] EXT4-fs error (device loop2): ext4_punch_hole:4150: inode #18: comm syz.2.178: mark_inode_dirty error [ 56.607547][ T836] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 36: comm syz.2.178: lblock 0 mapped to illegal pblock 36 (length 12) [ 56.677692][ T836] EXT4-fs error (device loop2): ext4_map_blocks:630: inode #18: block 340019711: comm syz.2.178: lblock 15 mapped to illegal pblock 340019711 (length 1) [ 56.695665][ T836] handle_bad_sector: 1065 callbacks suppressed [ 56.695739][ T836] attempt to access beyond end of device [ 56.695739][ T836] loop2: rw=0, want=8249419914, limit=512 [ 56.716102][ T836] Buffer I/O error on dev loop2, logical block 4124709956, async page read [ 56.725209][ T836] attempt to access beyond end of device [ 56.725209][ T836] loop2: rw=0, want=5943065696, limit=512 [ 56.736826][ T836] Buffer I/O error on dev loop2, logical block 2971532847, async page read [ 56.777128][ T836] attempt to access beyond end of device [ 56.777128][ T836] loop2: rw=0, want=2482987580, limit=512 [ 56.788602][ T836] Buffer I/O error on dev loop2, logical block 1241493789, async page read [ 56.797318][ T836] attempt to access beyond end of device [ 56.797318][ T836] loop2: rw=0, want=8249419914, limit=512 [ 56.812424][ T836] Buffer I/O error on dev loop2, logical block 4124709956, async page read [ 56.821461][ T836] attempt to access beyond end of device [ 56.821461][ T836] loop2: rw=0, want=5943065696, limit=512 [ 56.832887][ T836] Buffer I/O error on dev loop2, logical block 2971532847, async page read [ 56.842428][ T836] attempt to access beyond end of device [ 56.842428][ T836] loop2: rw=0, want=8249419914, limit=512 [ 56.854158][ T836] Buffer I/O error on dev loop2, logical block 4124709956, async page read [ 56.863112][ T836] attempt to access beyond end of device [ 56.863112][ T836] loop2: rw=0, want=5943065696, limit=512 [ 56.909054][ T836] Buffer I/O error on dev loop2, logical block 2971532847, async page read [ 56.987069][ T836] attempt to access beyond end of device [ 56.987069][ T836] loop2: rw=0, want=2482987580, limit=512 [ 57.150780][ T836] Buffer I/O error on dev loop2, logical block 1241493789, async page read [ 57.159726][ T836] attempt to access beyond end of device [ 57.159726][ T836] loop2: rw=0, want=8249419914, limit=512 [ 57.171228][ T836] Buffer I/O error on dev loop2, logical block 4124709956, async page read [ 57.180360][ T836] attempt to access beyond end of device [ 57.180360][ T836] loop2: rw=0, want=5943065696, limit=512 [ 57.193634][ T836] Buffer I/O error on dev loop2, logical block 2971532847, async page read [ 57.890770][ T30] audit: type=1400 audit(1778068369.842:285): avc: denied { setopt } for pid=887 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 58.123491][ T30] audit: type=1400 audit(1778068370.072:286): avc: denied { read } for pid=889 comm="syz.4.199" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=17911 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 58.229035][ T891] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.236259][ T891] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.244563][ T891] device bridge_slave_0 entered promiscuous mode [ 58.263749][ T891] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.281764][ T891] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.304542][ T891] device bridge_slave_1 entered promiscuous mode [ 58.325129][ T441] device bridge_slave_1 left promiscuous mode [ 58.331478][ T441] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.352382][ T441] device bridge_slave_0 left promiscuous mode [ 58.361756][ T441] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.109943][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.117915][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.132968][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.573725][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.621582][ T199] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.628705][ T199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.652562][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.669779][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.678411][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.685497][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.710844][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.729564][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.738012][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.753455][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.766347][ T891] device veth0_vlan entered promiscuous mode [ 59.772756][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.144776][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.170311][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.478676][ T891] device veth1_macvtap entered promiscuous mode [ 60.503655][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.512531][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.521380][ T199] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.536482][ T30] audit: type=1400 audit(1778068372.492:287): avc: denied { mounton } for pid=891 comm="syz-executor" path="/root/syzkaller.NHcM2D/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 60.699662][ T937] netlink: 12 bytes leftover after parsing attributes in process `syz.4.206'. [ 61.388150][ T951] loop5: detected capacity change from 0 to 256 [ 61.414538][ T951] exfat: Deprecated parameter 'utf8' [ 61.419966][ T951] exfat: Deprecated parameter 'utf8' [ 61.425563][ T951] exfat: Deprecated parameter 'namecase' [ 61.432011][ T951] exfat: Deprecated parameter 'namecase' [ 61.446028][ T951] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 61.560464][ T30] audit: type=1400 audit(1778068373.512:288): avc: denied { read write } for pid=950 comm="syz.5.216" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 61.691784][ T30] audit: type=1400 audit(1778068373.512:289): avc: denied { open } for pid=950 comm="syz.5.216" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 64.724242][ T30] audit: type=1400 audit(1778068373.512:290): avc: denied { read write } for pid=950 comm="syz.5.216" name="vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.646812][ T30] audit: type=1400 audit(1778068373.512:291): avc: denied { open } for pid=950 comm="syz.5.216" path="/dev/vga_arbiter" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 65.754044][ T30] audit: type=1400 audit(1778068373.632:292): avc: denied { mounton } for pid=959 comm="syz.0.218" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 65.852947][ T30] audit: type=1400 audit(1778068377.702:293): avc: denied { setopt } for pid=965 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 66.187446][ T30] audit: type=1400 audit(1778068377.702:294): avc: denied { nlmsg_read } for pid=965 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.413310][ T30] audit: type=1400 audit(1778068378.352:295): avc: denied { write } for pid=984 comm="syz.4.225" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 67.556153][ T991] device veth3 entered promiscuous mode [ 67.700725][ T969] loop5: detected capacity change from 0 to 40427 [ 67.714222][ T999] loop0: detected capacity change from 0 to 512 [ 67.771695][ T30] audit: type=1400 audit(1778068379.722:296): avc: denied { bind } for pid=1004 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.778256][ T999] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 67.798607][ T969] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 67.824515][ T969] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 67.828893][ T30] audit: type=1400 audit(1778068379.762:297): avc: denied { listen } for pid=1004 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.865904][ T969] F2FS-fs (loop5): invalid crc value [ 67.873293][ T999] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,nomblk_io_submit,. Quota mode: writeback. [ 67.886082][ T30] audit: type=1400 audit(1778068379.762:298): avc: denied { connect } for pid=1004 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.905681][ T999] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.916164][ T30] audit: type=1400 audit(1778068379.762:299): avc: denied { accept } for pid=1004 comm="syz.4.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.935545][ T969] F2FS-fs (loop5): Found nat_bits in checkpoint [ 67.960341][ T1016] mmap: syz.3.228 (1016) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 68.019539][ T969] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 68.033957][ T969] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 68.298407][ T969] handle_bad_sector: 15 callbacks suppressed [ 68.298430][ T969] attempt to access beyond end of device [ 68.298430][ T969] loop5: rw=2049, want=81920, limit=40427 [ 68.725337][ T969] attempt to access beyond end of device [ 68.725337][ T969] loop5: rw=2049, want=51368, limit=40427 [ 68.781569][ T1035] loop6: detected capacity change from 0 to 256 [ 68.840069][ T969] attempt to access beyond end of device [ 68.840069][ T969] loop5: rw=524288, want=78080, limit=40427 [ 68.861003][ T969] attempt to access beyond end of device [ 68.861003][ T969] loop5: rw=0, want=77832, limit=40427 [ 68.883513][ T969] attempt to access beyond end of device [ 68.883513][ T969] loop5: rw=0, want=77832, limit=40427 [ 68.904901][ T969] attempt to access beyond end of device [ 68.904901][ T969] loop5: rw=0, want=77832, limit=40427 [ 68.927435][ T969] attempt to access beyond end of device [ 68.927435][ T969] loop5: rw=0, want=77832, limit=40427 [ 68.949871][ T969] attempt to access beyond end of device [ 68.949871][ T969] loop5: rw=0, want=77832, limit=40427 [ 68.972467][ T969] attempt to access beyond end of device [ 68.972467][ T969] loop5: rw=0, want=77832, limit=40427 [ 68.996474][ T969] attempt to access beyond end of device [ 68.996474][ T969] loop5: rw=0, want=77832, limit=40427 [ 69.849360][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 69.849376][ T30] audit: type=1400 audit(1778068381.802:307): avc: denied { watch } for pid=1017 comm="syz.4.234" path="/50/file0" dev="tmpfs" ino=289 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 69.907556][ T30] audit: type=1400 audit(1778068381.842:308): avc: denied { bind } for pid=1047 comm="syz.4.243" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.002561][ T30] audit: type=1400 audit(1778068381.952:309): avc: denied { name_bind } for pid=1047 comm="syz.4.243" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 70.023581][ T30] audit: type=1400 audit(1778068381.952:310): avc: denied { node_bind } for pid=1047 comm="syz.4.243" saddr=fe80::aa src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 70.922389][ T1063] netlink: 'syz.3.248': attribute type 4 has an invalid length. [ 70.935657][ T1063] netlink: 'syz.3.248': attribute type 4 has an invalid length. [ 70.960990][ T199] Bluetooth: hci0: Frame reassembly failed (-84) [ 70.967559][ T1065] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.098247][ T1074] fuse: Bad value for 'fd' [ 72.149986][ T1107] loop0: detected capacity change from 0 to 512 [ 72.160260][ T1107] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 72.194027][ T1107] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 72.196834][ T30] audit: type=1400 audit(1778068384.152:311): avc: denied { setopt } for pid=1108 comm="syz.5.265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 72.204389][ T1107] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 72.234858][ T1107] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 72.243027][ T1107] EXT4-fs (loop0): failed to initialize system zone (-117) [ 72.255363][ T1107] EXT4-fs (loop0): mount failed [ 72.267724][ T30] audit: type=1400 audit(1778068384.222:312): avc: denied { mount } for pid=1112 comm="syz.6.266" name="/" dev="configfs" ino=13146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 72.310709][ T30] audit: type=1400 audit(1778068384.252:313): avc: denied { search } for pid=1112 comm="syz.6.266" name="/" dev="configfs" ino=13146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.374091][ T1116] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.381348][ T1116] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.394198][ T30] audit: type=1400 audit(1778068384.252:314): avc: denied { read } for pid=1112 comm="syz.6.266" name="/" dev="configfs" ino=13146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.433230][ T30] audit: type=1400 audit(1778068384.252:315): avc: denied { open } for pid=1112 comm="syz.6.266" path="/" dev="configfs" ino=13146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 72.533749][ T30] audit: type=1400 audit(1778068384.482:316): avc: denied { listen } for pid=1122 comm="syz.4.269" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 72.726933][ T1131] loop6: detected capacity change from 0 to 128 [ 72.763585][ T1131] FAT-fs (loop6): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 73.953263][ T20] Bluetooth: hci0: command 0x1003 tx timeout [ 74.360717][ T1067] Bluetooth: hci0: sending frame failed (-49) [ 75.655590][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 75.655604][ T30] audit: type=1400 audit(1778068387.612:321): avc: denied { associate } for pid=1142 comm="syz.0.276" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.755830][ T30] audit: type=1400 audit(1778068387.692:322): avc: denied { bind } for pid=1151 comm="syz.4.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.916265][ T1165] loop5: detected capacity change from 0 to 512 [ 76.103410][ T1165] EXT4-fs (loop5): 1 truncate cleaned up [ 76.131351][ T1170] loop6: detected capacity change from 0 to 16 [ 76.138191][ T1165] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue. Quota mode: none. [ 76.241690][ T1170] erofs: (device loop6): mounted with root inode @ nid 36. [ 76.438313][ T419] Bluetooth: hci0: command 0x1001 tx timeout [ 76.444465][ T1067] Bluetooth: hci0: sending frame failed (-49) [ 76.493830][ T1170] handle_bad_sector: 108 callbacks suppressed [ 76.493850][ T1170] attempt to access beyond end of device [ 76.493850][ T1170] loop6: rw=0, want=34359214088, limit=16 [ 76.534062][ T1170] erofs: (device loop6): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 76.578088][ T1165] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5885: Out of memory [ 76.597970][ T1165] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #18: comm syz.5.284: mark_inode_dirty error [ 76.626022][ T1165] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5885: Out of memory [ 76.723097][ T1165] EXT4-fs error (device loop5): ext4_dirty_inode:6089: inode #18: comm syz.5.284: mark_inode_dirty error [ 76.750807][ T1165] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #18: comm syz.5.284: attempt to clear invalid blocks 36 len 12 [ 76.774258][ T1165] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #18: comm syz.5.284: attempt to clear invalid blocks 340019711 len 1 [ 76.794216][ T1165] EXT4-fs error (device loop5) in ext4_reserve_inode_write:5885: Out of memory [ 76.813612][ T1165] EXT4-fs error (device loop5): ext4_punch_hole:4150: inode #18: comm syz.5.284: mark_inode_dirty error [ 76.983966][ T422] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 77.014332][ T1176] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #18: block 36: comm syz.5.284: lblock 0 mapped to illegal pblock 36 (length 12) [ 77.039149][ T1176] EXT4-fs error (device loop5): ext4_map_blocks:630: inode #18: block 340019711: comm syz.5.284: lblock 15 mapped to illegal pblock 340019711 (length 1) [ 77.074821][ T1176] attempt to access beyond end of device [ 77.074821][ T1176] loop5: rw=0, want=8249419914, limit=512 [ 77.093960][ T1176] buffer_io_error: 15 callbacks suppressed [ 77.093978][ T1176] Buffer I/O error on dev loop5, logical block 4124709956, async page read [ 77.124142][ T1176] attempt to access beyond end of device [ 77.124142][ T1176] loop5: rw=0, want=5943065696, limit=512 [ 77.153804][ T1176] Buffer I/O error on dev loop5, logical block 2971532847, async page read [ 77.171524][ T1176] attempt to access beyond end of device [ 77.171524][ T1176] loop5: rw=0, want=2482987580, limit=512 [ 77.191944][ T1176] Buffer I/O error on dev loop5, logical block 1241493789, async page read [ 77.209369][ T1176] attempt to access beyond end of device [ 77.209369][ T1176] loop5: rw=0, want=8249419914, limit=512 [ 77.229105][ T1176] Buffer I/O error on dev loop5, logical block 4124709956, async page read [ 77.248168][ T1176] attempt to access beyond end of device [ 77.248168][ T1176] loop5: rw=0, want=5943065696, limit=512 [ 77.264013][ T1176] Buffer I/O error on dev loop5, logical block 2971532847, async page read [ 77.285535][ T1176] attempt to access beyond end of device [ 77.285535][ T1176] loop5: rw=0, want=8249419914, limit=512 [ 77.311249][ T1176] Buffer I/O error on dev loop5, logical block 4124709956, async page read [ 77.331720][ T1176] attempt to access beyond end of device [ 77.331720][ T1176] loop5: rw=0, want=5943065696, limit=512 [ 77.351683][ T1176] Buffer I/O error on dev loop5, logical block 2971532847, async page read [ 77.365608][ T1176] attempt to access beyond end of device [ 77.365608][ T1176] loop5: rw=0, want=2482987580, limit=512 [ 77.400685][ T1176] Buffer I/O error on dev loop5, logical block 1241493789, async page read [ 77.423991][ T1176] attempt to access beyond end of device [ 77.423991][ T1176] loop5: rw=0, want=8249419914, limit=512 [ 77.443181][ T1176] Buffer I/O error on dev loop5, logical block 4124709956, async page read [ 77.461596][ T1176] Buffer I/O error on dev loop5, logical block 2971532847, async page read [ 78.291033][ T1194] team_slave_1: Caught tx_queue_len zero misconfig [ 78.298696][ T1194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 78.417284][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.424404][ T1199] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.431876][ T1199] device bridge_slave_0 entered promiscuous mode [ 78.439074][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.446554][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.476672][ T419] Bluetooth: hci0: command 0x1009 tx timeout [ 78.483174][ T1199] device bridge_slave_1 entered promiscuous mode [ 78.557141][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.564249][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.571572][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.578649][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.653812][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.662593][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.672867][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.684459][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 78.693434][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 78.859382][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.873302][ T1199] device veth0_vlan entered promiscuous mode [ 78.880525][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 78.889198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 78.897250][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 78.933775][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 78.950214][ T1199] device veth1_macvtap entered promiscuous mode [ 78.981004][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.001392][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.512356][ T8] device bridge_slave_1 left promiscuous mode [ 79.544484][ T30] audit: type=1400 audit(1778068391.492:323): avc: denied { connect } for pid=1214 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.568446][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.666943][ T8] device bridge_slave_0 left promiscuous mode [ 79.732734][ T30] audit: type=1400 audit(1778068391.532:324): avc: denied { write } for pid=1214 comm="syz.4.298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 79.766509][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.318548][ T8] device veth1_macvtap left promiscuous mode [ 80.324803][ T8] device veth0_vlan left promiscuous mode [ 80.796142][ T30] audit: type=1400 audit(1778068392.752:325): avc: denied { name_bind } for pid=1227 comm="syz.7.303" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 80.922451][ T1230] netlink: 24 bytes leftover after parsing attributes in process `syz.0.302'. [ 80.931940][ T1237] loop6: detected capacity change from 0 to 512 [ 80.961853][ T1237] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 80.975108][ T1237] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 80.997198][ T1230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=1230 comm=syz.0.302 [ 81.061396][ T1246] netlink: 4 bytes leftover after parsing attributes in process `syz.7.308'. [ 81.078119][ T1248] device bridge0 entered promiscuous mode [ 81.087083][ T1248] device macsec1 entered promiscuous mode [ 81.093678][ T1248] bridge0: port 3(macsec1) entered blocking state [ 81.101575][ T1248] bridge0: port 3(macsec1) entered disabled state [ 81.109313][ T1248] device bridge0 left promiscuous mode [ 81.117542][ T1246] netlink: 12 bytes leftover after parsing attributes in process `syz.7.308'. [ 81.320656][ T30] audit: type=1400 audit(1778068393.242:326): avc: denied { wake_alarm } for pid=1258 comm="syz.0.314" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 82.254268][ T1267] xt_CONNSECMARK: invalid mode: 66 [ 83.898714][ T1287] netlink: 'syz.6.320': attribute type 4 has an invalid length. [ 83.916553][ T1287] netlink: 17 bytes leftover after parsing attributes in process `syz.6.320'. [ 84.054926][ T30] audit: type=1400 audit(1778068396.012:327): avc: denied { read } for pid=1298 comm="syz.4.327" path="socket:[19704]" dev="sockfs" ino=19704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 84.244011][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.304004][ T307] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 84.504023][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 84.554408][ T307] usb 7-1: Using ep0 maxpacket: 32 [ 84.634259][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.651685][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.674718][ T26] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 84.694030][ T307] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 84.698024][ T26] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.713556][ T307] usb 7-1: config 0 has no interface number 0 [ 84.720299][ T307] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 84.725239][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.740425][ T307] usb 7-1: config 0 interface 85 has no altsetting 0 [ 84.800647][ T26] usb 4-1: config 0 descriptor?? [ 84.943553][ T30] audit: type=1400 audit(1778068396.892:328): avc: denied { create } for pid=1308 comm="syz.4.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 85.324024][ T307] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 85.333269][ T307] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.353955][ T307] usb 7-1: Product: syz [ 85.358167][ T307] usb 7-1: Manufacturer: syz [ 85.362788][ T307] usb 7-1: SerialNumber: syz [ 85.389323][ T307] usb 7-1: config 0 descriptor?? [ 85.405518][ T26] microsoft 0003:045E:07DA.0001: unbalanced delimiter at end of report description [ 85.422439][ T26] microsoft 0003:045E:07DA.0001: parse failed [ 85.433320][ T26] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 85.742241][ T30] audit: type=1326 audit(1778068397.692:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1314 comm="syz.0.331" exe="/root/ci2-android-5-15/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f5ef9cdd9 code=0x0 [ 85.843734][ T1295] UDC core: couldn't find an available UDC or it's busy: -16 [ 85.864012][ T1295] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 85.908273][ T307] usb 7-1: USB disconnect, device number 2 [ 86.120047][ T297] usb 4-1: USB disconnect, device number 4 [ 86.455087][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 86.462816][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 86.482895][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.490344][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.499989][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.4: link becomes ready [ 86.507611][ T1332] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1.4: link becomes ready [ 86.515247][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 86.526746][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.554966][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 86.589589][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.598441][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.613110][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.621676][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.630244][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.817404][ T1347] IPv6: sit1: Disabled Multicast RS [ 87.662882][ T1332] syz.4.335 (1332) used greatest stack depth: 20512 bytes left [ 88.313656][ T1372] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 88.458908][ T1381] loop7: detected capacity change from 0 to 512 [ 88.545166][ T1381] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 88.574077][ T1381] ext4 filesystem being mounted at /20/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.503568][ T1401] tipc: Failed to remove unknown binding: 66,1,1/0:43282278/43282280 [ 89.512895][ T1401] tipc: Failed to remove unknown binding: 66,1,1/0:43282278/43282280 [ 89.524114][ T1401] tipc: Failed to remove unknown binding: 66,1,1/0:43282278/43282280 [ 89.777310][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 89.814450][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.823159][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 89.832531][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 89.843116][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 89.852780][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 89.862204][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 89.871799][ T1150] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.191207][ T1421] loop3: detected capacity change from 0 to 32768 [ 90.312888][ T30] audit: type=1400 audit(1778068402.262:330): avc: denied { create } for pid=1427 comm="syz.4.368" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 90.340603][ T1428] 9pnet: p9_fd_create_tcp (1428): problem connecting socket to 127.0.0.1 [ 91.069365][ T1437] xt_hashlimit: size too large, truncated to 1048576 [ 91.436360][ T30] audit: type=1400 audit(1778068403.392:331): avc: denied { map } for pid=1438 comm="syz.6.371" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 91.613856][ T30] audit: type=1400 audit(1778068403.502:332): avc: denied { bind } for pid=1449 comm="syz.7.375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.637113][ T30] audit: type=1400 audit(1778068403.592:333): avc: denied { read } for pid=1449 comm="syz.7.375" dev="sockfs" ino=20659 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 91.660377][ T1452] 9pnet: Insufficient options for proto=fd [ 91.704929][ T1452] loop7: detected capacity change from 0 to 512 [ 91.737664][ T1452] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 91.774132][ T1452] EXT4-fs error (device loop7): ext4_iget_extra_inode:4597: inode #15: comm syz.7.375: corrupted in-inode xattr [ 91.825827][ T1452] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.375: couldn't read orphan inode 15 (err -117) [ 91.855062][ T1452] EXT4-fs (loop7): mounted filesystem without journal. Opts: lazytime,inode_readahead_blks=0x0000000000000001,grpid,noload,delalloc,max_batch_time=0x0000000000000001,discard,inode_readahead_blks=0x0000000000004000,nomblk_io_submit,init_itable=0x0000000000000fff,,errors=continue. Quota mode: none. [ 91.942786][ T30] audit: type=1400 audit(1778068403.892:334): avc: denied { write } for pid=1460 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.995553][ T30] audit: type=1400 audit(1778068403.952:335): avc: denied { getopt } for pid=1460 comm="syz.3.377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 92.056088][ T1461] loop3: detected capacity change from 0 to 256 [ 92.087231][ T1461] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 92.430739][ T1474] loop3: detected capacity change from 0 to 2048 [ 92.581279][ T1474] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback. [ 92.601078][ T1474] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.618211][ T30] audit: type=1400 audit(1778068404.572:336): avc: denied { read } for pid=1482 comm="syz.7.384" name="usbmon9" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 92.654871][ T30] audit: type=1400 audit(1778068404.602:337): avc: denied { open } for pid=1482 comm="syz.7.384" path="/dev/usbmon9" dev="devtmpfs" ino=182 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 92.778868][ T1487] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.381: bg 0: block 345: padding at end of block bitmap is not set [ 92.811906][ T1487] EXT4-fs (loop3): Remounting filesystem read-only [ 94.100363][ T30] audit: type=1400 audit(1778068406.042:338): avc: denied { ioctl } for pid=1473 comm="syz.3.381" path="socket:[20064]" dev="sockfs" ino=20064 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 96.761592][ T1516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 97.277316][ T1516] netlink: 12 bytes leftover after parsing attributes in process `syz.3.393'. [ 97.364348][ T1523] loop8: detected capacity change from 0 to 7 [ 100.360450][ T30] audit: type=1400 audit(1778068412.312:339): avc: denied { map } for pid=1522 comm="syz.3.396" path="socket:[20751]" dev="sockfs" ino=20751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 102.220584][ T1543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.401'. [ 103.576182][ T1563] syz.4.407 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 103.627786][ T1565] loop6: detected capacity change from 0 to 512 [ 103.699720][ T1565] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 103.764136][ T1565] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.815266][ T1565] EXT4-fs error (device loop6): ext4_validate_block_bitmap:420: comm syz.6.408: bg 0: bad block bitmap checksum [ 105.277370][ T1593] loop3: detected capacity change from 0 to 512 [ 105.361335][ T1593] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 105.388361][ T1593] ext4 filesystem being mounted at /63/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.726565][ T1604] netlink: 2 bytes leftover after parsing attributes in process `syz.4.421'. [ 106.305138][ T30] audit: type=1400 audit(1778068418.112:340): avc: denied { nlmsg_read } for pid=1606 comm="syz.4.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 106.494503][ T30] audit: type=1400 audit(1778068418.452:341): avc: denied { remount } for pid=1612 comm="syz.0.424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 106.518356][ T1613] overlayfs: failed to clone upperpath [ 106.546146][ T1616] loop3: detected capacity change from 0 to 8192 [ 106.653598][ T30] audit: type=1400 audit(1778068418.602:342): avc: denied { getopt } for pid=1619 comm="syz.6.426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 107.762304][ T30] audit: type=1400 audit(1778068419.712:343): avc: denied { bind } for pid=1632 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.813564][ T30] audit: type=1400 audit(1778068419.762:344): avc: denied { write } for pid=1632 comm="syz.3.429" path="socket:[20259]" dev="sockfs" ino=20259 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 107.854533][ T1634] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready [ 108.428508][ T1641] fuse: Bad value for 'fd' [ 285.514429][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 176s! [ 285.523480][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 176s! [ 285.532497][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=-20 stuck for 173s! [ 285.541595][ C0] Showing busy workqueues and worker pools: [ 285.547534][ C0] workqueue events: flags=0x0 [ 285.552242][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 285.552290][ C0] pending: kfree_rcu_monitor, xfrm_state_gc_task, key_garbage_collector [ 285.552373][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=3/256 refcnt=4 [ 285.552413][ C0] pending: vmstat_shepherd, psi_avgs_work, kfree_rcu_monitor [ 285.552534][ C0] workqueue events_unbound: flags=0x2 [ 285.589694][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/512 refcnt=4 [ 285.589813][ C0] pending: toggle_allocation_gate, flush_memcg_stats_dwork [ 285.589917][ C0] workqueue events_power_efficient: flags=0x80 [ 285.610995][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 285.611044][ C0] pending: neigh_periodic_work, reg_check_chans_work [ 285.611089][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=4/256 refcnt=5 [ 285.611128][ C0] pending: wg_ratelimiter_gc_entries, neigh_periodic_work, gc_worker, check_lifetime [ 285.611201][ C0] workqueue mm_percpu_wq: flags=0x8 [ 285.648578][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.648626][ C0] pending: vmstat_update [ 285.648655][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.648694][ C0] pending: vmstat_update [ 285.648725][ C0] workqueue writeback: flags=0x4a [ 285.678469][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=3/256 refcnt=5 [ 285.678513][ C0] pending: wb_workfn, wb_workfn, wb_workfn [ 285.678573][ C0] workqueue kblockd: flags=0x18 [ 285.696857][ C0] pwq 3: cpus=1 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 285.696920][ C0] pending: blk_mq_timeout_work [ 285.696949][ C0] pwq 1: cpus=0 node=0 flags=0x0 nice=-20 active=1/256 refcnt=2 [ 285.696996][ C0] pending: blk_mq_timeout_work [ 285.697205][ C0] workqueue dm_bufio_cache: flags=0x8 [ 285.728528][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.728580][ C0] pending: work_fn [ 285.728672][ C0] workqueue ipv6_addrconf: flags=0x40008 [ 285.746080][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/1 refcnt=2 [ 285.746129][ C0] pending: addrconf_verify_work [ 285.746339][ C0] workqueue wg-kex-wg0: flags=0x6 [ 285.764088][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.764131][ C0] pending: wg_packet_handshake_send_worker [ 285.764162][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.782853][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.782899][ C0] pending: wg_packet_encrypt_worker [ 285.782929][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.782973][ C0] pending: wg_packet_encrypt_worker [ 285.783001][ C0] workqueue wg-kex-wg1: flags=0x6 [ 285.814577][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.814636][ C0] pending: wg_packet_handshake_send_worker [ 285.814666][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 285.833327][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.833374][ C0] pending: wg_packet_encrypt_worker [ 285.833402][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.833443][ C0] pending: wg_packet_encrypt_worker [ 285.833471][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 285.865186][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.865234][ C0] pending: wg_packet_encrypt_worker [ 285.865262][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.865303][ C0] pending: wg_packet_encrypt_worker [ 285.865332][ C0] workqueue wg-kex-wg0: flags=0x6 [ 285.896782][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.896825][ C0] pending: wg_packet_handshake_send_worker [ 285.896853][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 285.915527][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.915584][ C0] pending: wg_packet_encrypt_worker [ 285.915611][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.915649][ C0] pending: wg_packet_encrypt_worker [ 285.915675][ C0] workqueue wg-kex-wg1: flags=0x6 [ 285.947219][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=2/256 refcnt=4 [ 285.947260][ C0] pending: wg_packet_handshake_send_worker, wg_packet_handshake_send_worker [ 285.947308][ C0] workqueue wg-kex-wg2: flags=0x6 [ 285.968610][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 285.968652][ C0] pending: wg_packet_handshake_send_worker [ 285.968683][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 285.987460][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.987509][ C0] pending: wg_packet_encrypt_worker [ 285.987539][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 285.987579][ C0] pending: wg_packet_encrypt_worker [ 285.987605][ C0] workqueue wg-kex-wg0: flags=0x6 [ 286.019136][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.019179][ C0] pending: wg_packet_handshake_send_worker [ 286.019209][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.037897][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.037950][ C0] pending: wg_packet_encrypt_worker [ 286.037981][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.038021][ C0] pending: wg_packet_encrypt_worker [ 286.038049][ C0] workqueue wg-kex-wg1: flags=0x6 [ 286.069507][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.069551][ C0] pending: wg_packet_handshake_send_worker [ 286.069581][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.088262][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.088308][ C0] pending: wg_packet_encrypt_worker [ 286.088338][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.088378][ C0] pending: wg_packet_encrypt_worker [ 286.088405][ C0] workqueue wg-kex-wg2: flags=0x6 [ 286.119870][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.119911][ C0] pending: wg_packet_handshake_send_worker [ 286.119946][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.138771][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.138816][ C0] pending: wg_packet_encrypt_worker [ 286.138843][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.138881][ C0] pending: wg_packet_encrypt_worker [ 286.138915][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 286.170770][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.170815][ C0] pending: wg_packet_encrypt_worker [ 286.170844][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.170881][ C0] pending: wg_packet_encrypt_worker [ 286.170908][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 286.202614][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.202658][ C0] pending: wg_packet_encrypt_worker [ 286.202685][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.202721][ C0] pending: wg_packet_encrypt_worker [ 286.202746][ C0] workqueue wg-kex-wg2: flags=0x6 [ 286.234236][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=3 [ 286.234278][ C0] pending: wg_packet_handshake_send_worker [ 286.234308][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 286.252989][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.253038][ C0] pending: wg_packet_encrypt_worker [ 286.253066][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 286.253107][ C0] pending: wg_packet_encrypt_worker