last executing test programs: 6m20.624578232s ago: executing program 32 (id=183): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x30000, 0x100}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x40}}, 0x24000840) 6m9.854858022s ago: executing program 33 (id=449): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4084, 0xff4}], 0x1, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 6m4.252290375s ago: executing program 34 (id=601): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x10000}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 5m55.275216088s ago: executing program 5 (id=902): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg$unix(r1, &(0x7f0000005900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4, 0x0) close_range(r0, r1, 0x0) 5m54.412608791s ago: executing program 5 (id=928): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:4\twm'], 0xa) 5m54.392092341s ago: executing program 5 (id=920): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) open_tree(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x80800) 5m54.366196552s ago: executing program 5 (id=922): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x48cf, &(0x7f0000000540)={[{@uni_xlate}, {@shortname_winnt}, {@rodir}, {@shortname_winnt}, {@fat=@quiet}, {@shortname_winnt}, {@uni_xlateno}, {@fat=@discard}, {@fat=@showexec}, {@uni_xlate}, {@utf8no}, {@rodir}]}, 0x0, 0x274, &(0x7f0000000780)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000100), 0x8c03, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x252) 5m54.305349872s ago: executing program 5 (id=924): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r2}]}]}, 0x2c}}, 0x0) 5m53.745773401s ago: executing program 5 (id=945): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500010000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x5, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 5m53.674475562s ago: executing program 35 (id=945): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500010000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x5, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 5m52.734952466s ago: executing program 0 (id=964): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000100)={0x0, 0x4, 0x2b}) 5m52.619372267s ago: executing program 0 (id=982): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000100850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) lsm_list_modules(&(0x7f0000002600)=[0x0, 0x0], &(0x7f0000000000)=0x10, 0x0) 5m52.551569828s ago: executing program 0 (id=971): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) 5m52.47495986s ago: executing program 0 (id=976): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x89901) 5m52.403320991s ago: executing program 0 (id=978): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0xf) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 5m52.199531624s ago: executing program 0 (id=988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 5m52.167121664s ago: executing program 36 (id=988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r2, &(0x7f00000000c0)=[{0x0, 0x4f}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) 5m46.328050361s ago: executing program 7 (id=1114): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) close(0x3) 5m46.270131342s ago: executing program 7 (id=1116): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000080000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d3c0012802c0001800a0001006c696d69740000001c0002800c00024000000000000010000c00014000000000000000010c000180080001006475700008000340000001"], 0xc8}}, 0x20050800) 5m46.169955653s ago: executing program 7 (id=1120): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0], 0x0, 0x700, &(0x7f0000000a40)="$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") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) futimesat(r0, &(0x7f0000000000)='./file1\x00', 0x0) 5m45.903798117s ago: executing program 7 (id=1124): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x89901) 5m45.841949938s ago: executing program 7 (id=1126): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0xfffffffffffff602) unshare(0x20000400) dup3(r1, r0, 0x0) readv(r0, 0x0, 0x0) 5m45.505845653s ago: executing program 7 (id=1133): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x2000, 0x5a3, &(0x7f0000004000/0x2000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 5m45.477121623s ago: executing program 37 (id=1133): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = shmget$private(0x0, 0x2000, 0x5a3, &(0x7f0000004000/0x2000)=nil) shmat(r0, &(0x7f0000001000/0x3000)=nil, 0x1000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 4m26.304911138s ago: executing program 2 (id=4267): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 4m26.264066349s ago: executing program 2 (id=4269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x2, 0x0, 0x0) 4m26.20752586s ago: executing program 2 (id=4270): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_dev$usbfs(&(0x7f0000000e00), 0x77, 0x101301) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x9, 0xffff, 0x0, 0x0, 0x0}) 4m26.15716274s ago: executing program 2 (id=4272): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000200)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r1, 0x0, 0x0, 0x0, 0x0) 4m26.156994551s ago: executing program 2 (id=4273): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(r0, &(0x7f0000000100)='./file0\x00', 0x2, 0xfdf8) 4m26.15659756s ago: executing program 2 (id=4274): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x8004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, @perf_config_ext={0x18a, 0xf037}, 0x401a, 0x4, 0x0, 0x8, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu~=-||!') 4m12.136517209s ago: executing program 38 (id=4274): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x7fffffff, 0x8004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, 0x0, @perf_config_ext={0x18a, 0xf037}, 0x401a, 0x4, 0x0, 0x8, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu~=-||!') 1m36.799951683s ago: executing program 1 (id=9984): creat(&(0x7f0000000080)='./file0\x00', 0xa) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_u}]}}) 1m36.644172565s ago: executing program 1 (id=9987): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x2}, 0x94) r1 = dup2(r0, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000280)='@\x00', 0x40, 0x50, 0x0) mq_getsetattr(r2, 0x0, 0x0) 1m36.550551607s ago: executing program 1 (id=9990): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000600)={0x34, r3, 0x3b818ad8a26587d7, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 1m36.392234829s ago: executing program 1 (id=9993): syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000500)='./file0/../file0\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./file0/../file0\x00', 0x37) 1m36.243312571s ago: executing program 1 (id=9996): r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r2}, 0x10) process_vm_readv(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m35.970983225s ago: executing program 1 (id=10002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m35.970841185s ago: executing program 39 (id=10002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r1}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.37287198s ago: executing program 3 (id=14329): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14) listen(r0, 0x1ff) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r1, &(0x7f00000000c0)="ab", 0x1, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) 1.35002062s ago: executing program 3 (id=14332): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_io_uring_setup(0x16e, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xd, r0, 0xfffffffffffffffe, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178c0900000000000000f39ed4b41924dc225ad4028dd63debb87d698be5c749450b350a789dcfc6b2d6a69600026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf057bb711116e53eb0b55667f1a28c2d6506cf26422d389b") 1.285406971s ago: executing program 3 (id=14335): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x6, @b={0x2, 0x6, 0x1, 0x2, {0x1, "ef"}, 0x2}}, 0xa) 701.19257ms ago: executing program 8 (id=14366): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000160a0103000000000000000002000000540003804000038014000100626f6e645f736c6176655f300000000014000100736974300000000000000000000000000400010073697430000000000000000000000000080002400000000008000140000000000900020073797a31000000000900010073797a30"], 0xa8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 690.421919ms ago: executing program 8 (id=14368): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f0000000400)='locks_get_lock_context\x00', r1}, 0x3d) flock(r0, 0x2) 616.741391ms ago: executing program 8 (id=14370): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="020000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) r1 = creat(&(0x7f0000000080)='./bus\x00', 0xf9) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[], 0xfe44, 0x0) 616.242991ms ago: executing program 8 (id=14372): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000080)='./file0\x00', r0}, 0x18) 616.092881ms ago: executing program 4 (id=14373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4f, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000005c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021200011800e000100636f6e6e6c696d69740000000c00028008000140fffffff73c0000000c0a01010000000000"], 0xe0}}, 0x0) 549.541482ms ago: executing program 8 (id=14376): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 549.188972ms ago: executing program 4 (id=14377): r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x2, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x1) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x555) 548.911632ms ago: executing program 6 (id=14378): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@newtclass={0x24, 0x28, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xf, 0x4}, {0x2, 0x7}}}, 0x24}}, 0x400c0) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000020000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff020000000000"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0x401, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r2, 0x2500}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x1}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 548.693752ms ago: executing program 8 (id=14379): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4000000000000000}, 0x18) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) 520.294932ms ago: executing program 6 (id=14380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000140)="24000000010006", 0x7) 520.105112ms ago: executing program 4 (id=14381): openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) syz_io_uring_setup(0x6f13, &(0x7f0000000280)={0x0, 0x6636, 0x10100, 0x2, 0x38b}, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 480.706313ms ago: executing program 6 (id=14382): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000080)=@generic={0x0, r0}, 0x18) 437.418503ms ago: executing program 3 (id=14384): bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0x16, 0x4, 0x3}, 0x10) 437.106483ms ago: executing program 6 (id=14386): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) close(0x3) 430.425064ms ago: executing program 4 (id=14387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) msync(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) 419.278364ms ago: executing program 3 (id=14388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 357.608855ms ago: executing program 6 (id=14389): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x8af1}], 0x1, 0x10003, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) 357.199645ms ago: executing program 6 (id=14391): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r0) inotify_init1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0x10132) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 350.497755ms ago: executing program 3 (id=14392): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f00000000c0)=0x4, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) r1 = dup(r0) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0xffeb}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}], 0xf}, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x20, 0x0) 345.935075ms ago: executing program 4 (id=14393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x27c, &(0x7f0000000600)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r2, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 297.557426ms ago: executing program 9 (id=14394): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x4000000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 297.294696ms ago: executing program 9 (id=14395): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xc82, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x98}}, 0x20008844) 280.119656ms ago: executing program 9 (id=14396): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x4e04, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0xa, @private2={0xfc, 0x2, '\x00', 0x1}, 0x77f}}}, 0x32) 183.000437ms ago: executing program 9 (id=14397): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0xeb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) 58.789549ms ago: executing program 9 (id=14398): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x14, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) 11.79394ms ago: executing program 9 (id=14399): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) memfd_secret(0x0) 0s ago: executing program 4 (id=14400): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001c00070d000000000000020007000000", @ANYRES32=r1, @ANYBLOB="800087000a00020001"], 0x28}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20000000) kernel console output (not intermixed with test programs): 4293918720 [ 343.017829][T32113] EXT4-fs (loop9): dirty_blocks=16 [ 343.023057][T32113] EXT4-fs (loop9): Block reservation details [ 343.029248][T32113] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 343.050812][T32132] loop4: detected capacity change from 0 to 1024 [ 343.201243][T32160] hub 9-0:1.0: USB hub found [ 343.215509][T32160] hub 9-0:1.0: 8 ports detected [ 343.342137][T32185] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.10838'. [ 343.352643][T32179] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.10838'. [ 343.418251][T32211] tipc: Failed to obtain node identity [ 343.423849][T32211] tipc: Enabling of bearer rejected, failed to enable media [ 343.574803][T32216] netlink: 5 bytes leftover after parsing attributes in process `syz.4.10845'. [ 343.576458][T32217] netlink: 'syz.6.10855': attribute type 12 has an invalid length. [ 343.592270][T32216] 0ªX¹¦D: renamed from gretap0 (while UP) [ 343.600502][T32216] 0ªX¹¦D: entered allmulticast mode [ 343.606123][T32216] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 343.706475][T32228] hub 9-0:1.0: USB hub found [ 343.711330][T32228] hub 9-0:1.0: 8 ports detected [ 343.794596][T32235] netlink: 'syz.6.10853': attribute type 10 has an invalid length. [ 343.807355][T32235] team0: Port device dummy0 added [ 343.850939][T32244] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.10852'. [ 343.865924][T32237] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.10852'. [ 344.041553][T32267] netlink: 'syz.4.10867': attribute type 10 has an invalid length. [ 344.075873][T32267] bridge0: port 1(vlan2) entered disabled state [ 344.204962][T32288] netlink: 5 bytes leftover after parsing attributes in process `syz.3.10877'. [ 344.225776][T32293] loop4: detected capacity change from 0 to 128 [ 344.242713][T32288] 0ªX¹¦D: renamed from gretap0 (while UP) [ 344.255467][T32288] 0ªX¹¦D: entered allmulticast mode [ 344.273633][T32288] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 344.314707][T32293] syz.4.10879: attempt to access beyond end of device [ 344.314707][T32293] loop4: rw=2049, sector=145, nr_sectors = 64 limit=128 [ 344.329825][T32293] syz.4.10879: attempt to access beyond end of device [ 344.329825][T32293] loop4: rw=2049, sector=217, nr_sectors = 15 limit=128 [ 344.391776][T32315] netlink: 'syz.4.10887': attribute type 3 has an invalid length. [ 344.404248][T32318] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10889'. [ 344.655045][T32362] loop9: detected capacity change from 0 to 512 [ 344.676595][T32367] loop3: detected capacity change from 0 to 1024 [ 344.685840][T32362] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.10908: bg 0: block 248: padding at end of block bitmap is not set [ 344.702571][T32362] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.10908: Failed to acquire dquot type 1 [ 344.716173][T32367] ext4 filesystem being mounted at /1880/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.716258][T32362] EXT4-fs (loop9): 1 truncate cleaned up [ 344.735856][T32367] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 344.751742][T32362] ext4 filesystem being mounted at /2130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 344.762736][T32367] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 344.775098][T32367] EXT4-fs (loop3): This should not happen!! Data will be lost [ 344.775098][T32367] [ 344.784803][T32367] EXT4-fs (loop3): Total free blocks count 0 [ 344.790829][T32367] EXT4-fs (loop3): Free/Dirty block details [ 344.796771][T32367] EXT4-fs (loop3): free_blocks=4293918720 [ 344.802579][T32367] EXT4-fs (loop3): dirty_blocks=16 [ 344.807768][T32367] EXT4-fs (loop3): Block reservation details [ 344.813872][T32367] EXT4-fs (loop3): i_reserved_data_blocks=1 [ 344.915265][T32397] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 345.057094][ T29] kauditd_printk_skb: 295 callbacks suppressed [ 345.057110][ T29] audit: type=1400 audit(1751689997.678:11622): avc: denied { open } for pid=32413 comm="syz.9.10929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 345.083014][ T29] audit: type=1400 audit(1751689997.678:11623): avc: denied { kernel } for pid=32413 comm="syz.9.10929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 345.106091][ T29] audit: type=1400 audit(1751689997.710:11624): avc: denied { create } for pid=32417 comm="syz.3.10928" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 345.127945][ T29] audit: type=1400 audit(1751689997.721:11625): avc: denied { tracepoint } for pid=32413 comm="syz.9.10929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 345.153441][T32412] loop6: detected capacity change from 0 to 1024 [ 345.168461][ T29] audit: type=1400 audit(1751689997.764:11626): avc: denied { create } for pid=32413 comm="syz.9.10929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.188633][ T29] audit: type=1400 audit(1751689997.764:11627): avc: denied { write } for pid=32413 comm="syz.9.10929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.208533][ T29] audit: type=1400 audit(1751689997.786:11628): avc: denied { mounton } for pid=32411 comm="syz.6.10926" path="/199/file1" dev="tmpfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 345.215444][T32416] random: crng reseeded on system resumption [ 345.235002][T32412] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.248479][ T29] audit: type=1400 audit(1751689997.850:11629): avc: denied { write } for pid=32415 comm="syz.4.10930" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 345.271864][ T29] audit: type=1400 audit(1751689997.850:11630): avc: denied { open } for pid=32415 comm="syz.4.10930" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 345.277282][T32412] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, [ 345.295572][ T29] audit: type=1400 audit(1751689997.871:11631): avc: denied { mount } for pid=32411 comm="syz.6.10926" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 345.326071][T32412] block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 345.373420][T32412] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 345.385924][T32412] EXT4-fs (loop6): This should not happen!! Data will be lost [ 345.385924][T32412] [ 345.396034][T32412] EXT4-fs (loop6): Total free blocks count 0 [ 345.402195][T32412] EXT4-fs (loop6): Free/Dirty block details [ 345.408312][T32412] EXT4-fs (loop6): free_blocks=4293918720 [ 345.414166][T32412] EXT4-fs (loop6): dirty_blocks=16 [ 345.419470][T32412] EXT4-fs (loop6): Block reservation details [ 345.425621][T32412] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 345.433997][T32431] loop9: detected capacity change from 0 to 512 [ 345.444380][T32431] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 345.454551][T32431] EXT4-fs (loop9): invalid inodes per group: 3 [ 345.454551][T32431] [ 345.517911][T32448] loop6: detected capacity change from 0 to 164 [ 345.602237][T32460] netlink: 112 bytes leftover after parsing attributes in process `syz.9.10945'. [ 345.692170][T32471] SELinux: syz.6.10951 (32471) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 345.741864][T32474] netlink: 268 bytes leftover after parsing attributes in process `syz.8.10952'. [ 345.795961][T32478] loop3: detected capacity change from 0 to 512 [ 345.810354][T32478] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 345.820449][T32478] EXT4-fs (loop3): invalid inodes per group: 3 [ 345.820449][T32478] [ 345.833027][T32482] rdma_op ffff88812c36e980 conn xmit_rdma 0000000000000000 [ 345.854331][T32489] loop8: detected capacity change from 0 to 128 [ 345.920303][T32489] syz.8.10956: attempt to access beyond end of device [ 345.920303][T32489] loop8: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 345.925378][T32500] loop9: detected capacity change from 0 to 512 [ 345.936962][T32489] syz.8.10956: attempt to access beyond end of device [ 345.936962][T32489] loop8: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 345.957818][T32489] syz.8.10956: attempt to access beyond end of device [ 345.957818][T32489] loop8: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 345.967608][T32500] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 345.971431][T32489] Buffer I/O error on dev loop8, logical block 142, lost async page write [ 345.991305][T32489] syz.8.10956: attempt to access beyond end of device [ 345.991305][T32489] loop8: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 346.005041][T32489] Buffer I/O error on dev loop8, logical block 143, lost async page write [ 346.015584][T32489] syz.8.10956: attempt to access beyond end of device [ 346.015584][T32489] loop8: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 346.029434][T32489] Buffer I/O error on dev loop8, logical block 144, lost async page write [ 346.040005][T32489] syz.8.10956: attempt to access beyond end of device [ 346.040005][T32489] loop8: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 346.040571][T32500] EXT4-fs error (device loop9): ext4_orphan_get:1419: comm syz.9.10960: bad orphan inode 131083 [ 346.053610][T32489] Buffer I/O error on dev loop8, logical block 145, lost async page write [ 346.053789][T32489] syz.8.10956: attempt to access beyond end of device [ 346.053789][T32489] loop8: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 346.069081][T32507] loop3: detected capacity change from 0 to 164 [ 346.072831][T32489] Buffer I/O error on dev loop8, logical block 146, lost async page write [ 346.072955][T32489] syz.8.10956: attempt to access beyond end of device [ 346.072955][T32489] loop8: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 346.114960][T32489] Buffer I/O error on dev loop8, logical block 147, lost async page write [ 346.123864][T32489] Buffer I/O error on dev loop8, logical block 156, lost async page write [ 346.132513][T32489] Buffer I/O error on dev loop8, logical block 157, lost async page write [ 346.141362][T32489] Buffer I/O error on dev loop8, logical block 160, lost async page write [ 346.150061][T32489] Buffer I/O error on dev loop8, logical block 161, lost async page write [ 346.295653][T32527] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.10966'. [ 346.656065][T32572] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 346.685966][T32572] SELinux: failed to load policy [ 346.796754][T32596] netlink: 'syz.8.10996': attribute type 3 has an invalid length. [ 346.996898][T32620] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 347.004690][T32620] SELinux: failed to load policy [ 347.014394][T32618] loop4: detected capacity change from 0 to 1024 [ 347.041253][T32618] ext4 filesystem being mounted at /1143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 347.068838][T32618] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 347.112771][T32618] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 27 with max blocks 1 with error 28 [ 347.125276][T32618] EXT4-fs (loop4): This should not happen!! Data will be lost [ 347.125276][T32618] [ 347.135095][T32618] EXT4-fs (loop4): Total free blocks count 0 [ 347.141160][T32618] EXT4-fs (loop4): Free/Dirty block details [ 347.147119][T32618] EXT4-fs (loop4): free_blocks=4293918720 [ 347.152895][T32618] EXT4-fs (loop4): dirty_blocks=16 [ 347.158030][T32618] EXT4-fs (loop4): Block reservation details [ 347.164060][T32618] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 347.263850][T32644] loop3: detected capacity change from 0 to 128 [ 347.297453][T32648] SELinux: failed to load policy [ 347.396610][T32660] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 347.414963][T32660] SELinux: failed to load policy [ 347.572293][T32689] loop6: detected capacity change from 0 to 128 [ 347.695388][T32716] loop3: detected capacity change from 0 to 512 [ 347.705184][T32719] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 347.713138][T32719] SELinux: failed to load policy [ 347.713743][T32716] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 347.755930][T32716] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.11035: invalid indirect mapped block 83886080 (level 1) [ 347.772206][T32716] EXT4-fs (loop3): Remounting filesystem read-only [ 347.778959][T32716] EXT4-fs (loop3): 1 orphan inode deleted [ 347.784794][T32716] EXT4-fs (loop3): 1 truncate cleaned up [ 347.858728][T32727] loop6: detected capacity change from 0 to 8192 [ 347.939959][T32760] loop9: detected capacity change from 0 to 512 [ 347.974770][T32760] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 347.988053][ T302] SELinux: failed to load policy [ 347.995615][T32760] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002] [ 348.007198][T32760] System zones: 1-12 [ 348.012245][T32760] EXT4-fs (loop9): 1 truncate cleaned up [ 348.020625][ T305] loop8: detected capacity change from 0 to 1024 [ 348.094018][ T319] bond3: entered promiscuous mode [ 348.099126][ T319] bond3: entered allmulticast mode [ 348.104914][ T319] 8021q: adding VLAN 0 to HW filter on device bond3 [ 348.115769][ T319] bond3 (unregistering): Released all slaves [ 348.638128][ T436] loop8: detected capacity change from 0 to 1024 [ 348.645751][ T436] EXT4-fs: Ignoring removed nobh option [ 348.651524][ T436] EXT4-fs: Ignoring removed bh option [ 348.653482][ T438] syzkaller1: entered promiscuous mode [ 348.662562][ T438] syzkaller1: entered allmulticast mode [ 348.818145][ T464] loop4: detected capacity change from 0 to 764 [ 348.858392][ T464] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 348.926238][ T485] loop4: detected capacity change from 0 to 512 [ 348.951655][ T488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.962818][ T485] EXT4-fs (loop4): orphan cleanup on readonly fs [ 348.969575][ T488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.978750][ T485] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.11077: bad orphan inode 13 [ 349.001283][ T485] ext4_test_bit(bit=12, block=18) = 1 [ 349.006813][ T485] is_bad_inode(inode)=0 [ 349.011033][ T485] NEXT_ORPHAN(inode)=2130706432 [ 349.015954][ T485] max_ino=32 [ 349.019239][ T485] i_nlink=1 [ 349.028244][ T485] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 349.089164][ T485] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.11077: bg 0: block 248: padding at end of block bitmap is not set [ 349.098359][ T509] loop8: detected capacity change from 0 to 256 [ 349.114728][ T485] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.11077: Failed to acquire dquot type 1 [ 349.148679][ T485] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 349.521133][ T577] loop4: detected capacity change from 0 to 256 [ 349.533229][ T577] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 349.581901][ T588] loop9: detected capacity change from 0 to 256 [ 349.632664][ T598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.641340][ T598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.700957][ T610] loop4: detected capacity change from 0 to 512 [ 349.723574][ T610] EXT4-fs: Ignoring removed nomblk_io_submit option [ 349.730801][ T29] kauditd_printk_skb: 191 callbacks suppressed [ 349.730846][ T29] audit: type=1400 audit(1751690002.689:11821): avc: denied { mounton } for pid=609 comm="syz.4.11130" path="/1160/file1" dev="tmpfs" ino=6009 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 349.761330][ T610] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 349.788674][ T621] loop9: detected capacity change from 0 to 512 [ 349.796826][ T610] EXT4-fs (loop4): 1 truncate cleaned up [ 349.805885][ T29] audit: type=1400 audit(1751690002.721:11822): avc: denied { map_create } for pid=614 comm="syz.3.11131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.825326][ T29] audit: type=1400 audit(1751690002.721:11823): avc: denied { map_read map_write } for pid=614 comm="syz.3.11131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 349.850961][ T621] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 349.858298][ T29] audit: type=1400 audit(1751690002.764:11824): avc: denied { mount } for pid=609 comm="syz.4.11130" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 349.882801][ T29] audit: type=1400 audit(1751690002.764:11825): avc: denied { add_name } for pid=609 comm="syz.4.11130" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 349.904900][ T29] audit: type=1400 audit(1751690002.764:11826): avc: denied { create } for pid=609 comm="syz.4.11130" name="cgroup.controllers" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 349.926556][ T29] audit: type=1400 audit(1751690002.796:11827): avc: denied { open } for pid=624 comm="syz.8.11134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 349.946078][ T29] audit: type=1400 audit(1751690002.796:11828): avc: denied { kernel } for pid=624 comm="syz.8.11134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 349.965875][ T29] audit: type=1400 audit(1751690002.796:11829): avc: denied { tracepoint } for pid=624 comm="syz.8.11134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 349.968293][ T621] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #16: comm syz.9.11132: invalid indirect mapped block 83886080 (level 1) [ 349.985788][ T29] audit: type=1400 audit(1751690002.818:11830): avc: denied { read append open } for pid=609 comm="syz.4.11130" path="/1160/file1/cgroup.controllers" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 350.001687][ T621] EXT4-fs (loop9): Remounting filesystem read-only [ 350.031855][ T621] EXT4-fs (loop9): 1 orphan inode deleted [ 350.037621][ T621] EXT4-fs (loop9): 1 truncate cleaned up [ 350.113094][ T644] program syz.4.11139 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.160743][ T653] loop9: detected capacity change from 0 to 2048 [ 350.184997][ T653] EXT4-fs (loop9): failed to initialize system zone (-117) [ 350.195263][ T653] EXT4-fs (loop9): mount failed [ 350.309129][ T678] loop4: detected capacity change from 0 to 1024 [ 350.346248][ T678] EXT4-fs: inline encryption not supported [ 350.348311][ T686] loop6: detected capacity change from 0 to 512 [ 350.397133][ T686] ext4 filesystem being mounted at /235/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 350.416383][ T686] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.11154: corrupted inode contents [ 350.438239][ T701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.439123][ T686] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.11154: mark_inode_dirty error [ 350.449808][ T678] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 350.474610][ T701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.482866][ T704] loop3: detected capacity change from 0 to 256 [ 350.483249][ T686] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.11154: corrupted inode contents [ 350.503043][ T704] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 350.503153][ T678] EXT4-fs (loop4): Remounting filesystem read-only [ 350.525426][ T707] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.11154: corrupted inode contents [ 350.542330][ T707] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.11154: mark_inode_dirty error [ 350.561741][ T707] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.11154: corrupted inode contents [ 350.574172][ T707] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.11154: mark_inode_dirty error [ 350.586189][ T707] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #2: comm syz.6.11154: corrupted inode contents [ 350.604932][ T707] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #2: comm syz.6.11154: mark_inode_dirty error [ 350.632693][ T714] loop4: detected capacity change from 0 to 2048 [ 350.648182][ T714] EXT4-fs (loop4): failed to initialize system zone (-117) [ 350.656405][ T714] EXT4-fs (loop4): mount failed [ 350.907025][ T757] loop9: detected capacity change from 0 to 2048 [ 350.955633][ T757] Alternate GPT is invalid, using primary GPT. [ 350.961964][ T757] loop9: p1 p2 p3 [ 351.191231][ T802] __nla_validate_parse: 5 callbacks suppressed [ 351.191246][ T802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11189'. [ 351.206828][ T802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11189'. [ 351.215958][ T802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11189'. [ 351.329680][ T817] loop6: detected capacity change from 0 to 256 [ 351.338192][ T819] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11196'. [ 351.348111][ T821] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.403920][ T821] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.504437][ T821] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.522893][ T851] loop6: detected capacity change from 0 to 128 [ 351.551271][ T821] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.615056][ T868] loop9: detected capacity change from 0 to 1024 [ 351.625482][ T868] EXT4-fs: Ignoring removed orlov option [ 351.635366][ T868] EXT4-fs (loop9): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 351.639831][ T821] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.661789][ T821] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.682122][ T889] loop3: detected capacity change from 0 to 256 [ 351.682444][ T821] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 351.706961][ T821] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 352.122705][T11803] hid-generic 0003:0000:0000.0014: unknown main item tag 0x0 [ 352.133059][T11803] hid-generic 0003:0000:0000.0014: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 352.298236][ T981] loop6: detected capacity change from 0 to 512 [ 352.327233][ T981] ext4 filesystem being mounted at /258/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.596967][ T1035] loop4: detected capacity change from 0 to 512 [ 352.642089][ T1035] ext4 filesystem being mounted at /1185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.897130][ T1067] SELinux: syz.6.11272 (1067) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 353.013003][ T1073] loop6: detected capacity change from 0 to 512 [ 353.034066][ T1073] ext4 filesystem being mounted at /269/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.197957][ T1116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.208312][ T1116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.216950][ T1122] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11289'. [ 353.226187][ T1122] netlink: 28 bytes leftover after parsing attributes in process `syz.6.11289'. [ 353.320189][ T1133] loop3: detected capacity change from 0 to 512 [ 353.345940][ T1133] ext4 filesystem being mounted at /1948/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.468856][ T1161] syz_tun: entered promiscuous mode [ 353.478342][ T1161] batadv_slave_0: entered promiscuous mode [ 353.487643][ T1161] hsr2: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 353.503803][ T1170] loop9: detected capacity change from 0 to 512 [ 353.516556][ T1161] hsr2: entered allmulticast mode [ 353.521688][ T1161] syz_tun: entered allmulticast mode [ 353.527111][ T1161] batadv_slave_0: entered allmulticast mode [ 353.539129][ T1170] ext4 filesystem being mounted at /2217/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.643352][ T1193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11317'. [ 353.700864][ T1203] syz_tun: entered promiscuous mode [ 353.707423][ T1203] batadv_slave_0: entered promiscuous mode [ 353.713887][ T1203] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 353.721823][ T1203] Cannot create hsr debugfs directory [ 353.727365][ T1203] hsr0: entered allmulticast mode [ 353.732533][ T1203] syz_tun: entered allmulticast mode [ 353.737876][ T1203] batadv_slave_0: entered allmulticast mode [ 353.771342][ T1210] loop8: detected capacity change from 0 to 512 [ 353.790619][ T1210] ext4 filesystem being mounted at /2134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 353.888934][ T1238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11332'. [ 353.900354][ T1240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.913981][ T1240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.975377][ T1254] xt_cluster: node mask cannot exceed total number of nodes [ 354.092958][ T1278] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11348'. [ 354.095896][ T1282] netlink: 'syz.3.11349': attribute type 3 has an invalid length. [ 354.110082][ T1282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11349'. [ 354.140009][ T1290] netlink: 'syz.3.11350': attribute type 3 has an invalid length. [ 354.291043][ T1313] syzkaller1: entered promiscuous mode [ 354.296657][ T1313] syzkaller1: entered allmulticast mode [ 354.312744][ T1317] loop8: detected capacity change from 0 to 2048 [ 354.422710][ T1327] loop8: detected capacity change from 0 to 8192 [ 354.433758][ T1327] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 354.463436][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 354.463470][ T29] audit: type=1400 audit(1751690007.764:11985): avc: denied { nlmsg_read } for pid=1339 comm="syz.3.11366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 354.503968][ T29] audit: type=1400 audit(1751690007.807:11986): avc: denied { create } for pid=1343 comm="syz.6.11367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 354.534971][ T29] audit: type=1400 audit(1751690007.850:11987): avc: denied { ioctl } for pid=1343 comm="syz.6.11367" path="socket:[91992]" dev="sockfs" ino=91992 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 354.590114][ T1352] netlink: 'syz.6.11370': attribute type 1 has an invalid length. [ 354.647775][ T29] audit: type=1326 audit(1751690007.968:11988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.6.11374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e5cce929 code=0x7ffc0000 [ 354.671609][ T29] audit: type=1326 audit(1751690007.968:11989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.6.11374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e5cce929 code=0x7ffc0000 [ 354.701853][ T29] audit: type=1326 audit(1751690008.022:11990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.6.11374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f42e5cce929 code=0x7ffc0000 [ 354.725706][ T29] audit: type=1326 audit(1751690008.022:11991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.6.11374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e5cce929 code=0x7ffc0000 [ 354.749407][ T29] audit: type=1326 audit(1751690008.022:11992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1357 comm="syz.6.11374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e5cce929 code=0x7ffc0000 [ 354.820708][ T1362] loop9: detected capacity change from 0 to 1764 [ 354.850763][ T29] audit: type=1400 audit(1751690008.172:11993): avc: denied { mount } for pid=1361 comm="syz.9.11375" name="/" dev="loop9" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 354.887312][ T29] audit: type=1400 audit(1751690008.215:11994): avc: denied { audit_write } for pid=1371 comm="syz.4.11379" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 355.041502][ T1399] netlink: 'syz.9.11391': attribute type 3 has an invalid length. [ 355.064968][ T1392] loop6: detected capacity change from 0 to 8192 [ 355.073527][ T1392] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 355.150182][ T1418] xt_cluster: node mask cannot exceed total number of nodes [ 355.217551][ T1450] loop8: detected capacity change from 0 to 128 [ 355.231817][ T1450] FAT-fs (loop8): Directory bread(block 162) failed [ 355.238653][ T1450] FAT-fs (loop8): Directory bread(block 163) failed [ 355.247181][ T1450] FAT-fs (loop8): Directory bread(block 164) failed [ 355.254456][ T1450] FAT-fs (loop8): Directory bread(block 165) failed [ 355.261356][ T1450] FAT-fs (loop8): Directory bread(block 166) failed [ 355.268831][ T1450] FAT-fs (loop8): Directory bread(block 167) failed [ 355.276034][ T1450] FAT-fs (loop8): Directory bread(block 168) failed [ 355.283043][ T1450] FAT-fs (loop8): Directory bread(block 169) failed [ 355.294427][ T1450] FAT-fs (loop8): Directory bread(block 162) failed [ 355.307738][ T1450] FAT-fs (loop8): Directory bread(block 163) failed [ 355.316583][ T1450] bio_check_eod: 34 callbacks suppressed [ 355.316602][ T1450] syz.8.11400: attempt to access beyond end of device [ 355.316602][ T1450] loop8: rw=3, sector=226, nr_sectors = 6 limit=128 [ 355.337359][ T1450] syz.8.11400: attempt to access beyond end of device [ 355.337359][ T1450] loop8: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 355.657761][ T1510] SELinux: failed to load policy [ 355.839775][ T1554] loop9: detected capacity change from 0 to 128 [ 355.849047][ T1554] FAT-fs (loop9): Directory bread(block 162) failed [ 355.855741][ T1554] FAT-fs (loop9): Directory bread(block 163) failed [ 355.857576][ T1549] team0 (unregistering): Port device team_slave_0 removed [ 355.862474][ T1554] FAT-fs (loop9): Directory bread(block 164) failed [ 355.876577][ T1554] FAT-fs (loop9): Directory bread(block 165) failed [ 355.879635][ T1549] team0 (unregistering): Port device team_slave_1 removed [ 355.883431][ T1554] FAT-fs (loop9): Directory bread(block 166) failed [ 355.902187][ T1554] FAT-fs (loop9): Directory bread(block 167) failed [ 355.908929][ T1554] FAT-fs (loop9): Directory bread(block 168) failed [ 355.915857][ T1554] FAT-fs (loop9): Directory bread(block 169) failed [ 355.931455][ T1554] FAT-fs (loop9): Directory bread(block 162) failed [ 355.946569][ T1554] FAT-fs (loop9): Directory bread(block 163) failed [ 355.954613][ T1554] syz.9.11435: attempt to access beyond end of device [ 355.954613][ T1554] loop9: rw=3, sector=226, nr_sectors = 6 limit=128 [ 355.980950][ T1594] loop4: detected capacity change from 0 to 2048 [ 355.987854][ T1554] syz.9.11435: attempt to access beyond end of device [ 355.987854][ T1554] loop9: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 356.127762][ T1630] loop9: detected capacity change from 0 to 1024 [ 356.152921][ T1630] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 356.165458][ T1630] EXT4-fs (loop9): This should not happen!! Data will be lost [ 356.165458][ T1630] [ 356.175249][ T1630] EXT4-fs (loop9): Total free blocks count 0 [ 356.181243][ T1630] EXT4-fs (loop9): Free/Dirty block details [ 356.187204][ T1630] EXT4-fs (loop9): free_blocks=0 [ 356.192414][ T1630] EXT4-fs (loop9): dirty_blocks=0 [ 356.197457][ T1630] EXT4-fs (loop9): Block reservation details [ 356.203483][ T1630] EXT4-fs (loop9): i_reserved_data_blocks=0 [ 356.272635][ T1649] loop4: detected capacity change from 0 to 128 [ 356.282587][ T1649] FAT-fs (loop4): Directory bread(block 162) failed [ 356.292196][ T1649] FAT-fs (loop4): Directory bread(block 163) failed [ 356.300440][ T1649] FAT-fs (loop4): Directory bread(block 164) failed [ 356.307620][ T1649] FAT-fs (loop4): Directory bread(block 165) failed [ 356.320214][ T1649] FAT-fs (loop4): Directory bread(block 166) failed [ 356.326456][ T1656] __nla_validate_parse: 5 callbacks suppressed [ 356.326486][ T1656] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11446'. [ 356.327238][ T1649] FAT-fs (loop4): Directory bread(block 167) failed [ 356.333082][ T1656] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11446'. [ 356.344201][ T1649] FAT-fs (loop4): Directory bread(block 168) failed [ 356.366826][ T1649] FAT-fs (loop4): Directory bread(block 169) failed [ 356.382314][ T1649] FAT-fs (loop4): Directory bread(block 162) failed [ 356.389718][ T1649] FAT-fs (loop4): Directory bread(block 163) failed [ 356.397861][ T1649] syz.4.11442: attempt to access beyond end of device [ 356.397861][ T1649] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 356.411283][ T1649] syz.4.11442: attempt to access beyond end of device [ 356.411283][ T1649] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 356.447376][ T1664] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.473819][ T1670] loop4: detected capacity change from 0 to 2048 [ 356.492866][ T1664] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.546724][ T1664] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.604588][ T1664] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.667429][ T1664] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.679758][ T1664] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.691824][ T1664] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.721843][ T1664] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.766377][ T1728] IPv6: addrconf: prefix option has invalid lifetime [ 356.925009][ T1746] 9pnet: Could not find request transport: 0xffffffffffffffff [ 356.940168][ T1744] loop3: detected capacity change from 0 to 1024 [ 356.959205][ T1744] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12806!=20869) [ 356.992083][ T1744] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 357.029736][ T1744] System zones: 0-1, 3-36 [ 357.034580][ T1744] EXT4-fs (loop3): orphan cleanup on readonly fs [ 357.059005][ T1744] EXT4-fs (loop3): 1 orphan inode deleted [ 357.076660][ T1773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.099369][ T1773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.144701][ T1783] loop3: detected capacity change from 0 to 2048 [ 357.304669][ T6505] EXT4-fs unmount: 71 callbacks suppressed [ 357.304688][ T6505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.349008][ T1808] pim6reg: entered allmulticast mode [ 357.359579][ T1812] wireguard0: entered promiscuous mode [ 357.365287][ T1812] wireguard0: entered allmulticast mode [ 357.376737][ T1808] pim6reg: left allmulticast mode [ 357.653441][ T1864] loop6: detected capacity change from 0 to 1024 [ 357.668669][ T1864] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.689811][ T1864] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 49 with max blocks 4 with error 28 [ 357.702176][ T1864] EXT4-fs (loop6): This should not happen!! Data will be lost [ 357.702176][ T1864] [ 357.711905][ T1864] EXT4-fs (loop6): Total free blocks count 0 [ 357.717991][ T1864] EXT4-fs (loop6): Free/Dirty block details [ 357.723943][ T1864] EXT4-fs (loop6): free_blocks=0 [ 357.728965][ T1864] EXT4-fs (loop6): dirty_blocks=0 [ 357.734048][ T1864] EXT4-fs (loop6): Block reservation details [ 357.740101][ T1864] EXT4-fs (loop6): i_reserved_data_blocks=0 [ 357.781035][T29350] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.805263][ T1874] loop9: detected capacity change from 0 to 2048 [ 357.811748][ T1870] loop3: detected capacity change from 0 to 8192 [ 357.826113][ T1874] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.967952][ T6113] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.098474][ T1908] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11516'. [ 358.409667][ T1957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11527'. [ 358.409691][ T1957] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11527'. [ 358.577370][ T1971] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.607483][ T1971] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.653729][ T1971] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.701062][ T1971] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.754761][ T1971] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.774886][ T1971] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.784325][ T1971] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.821924][ T1971] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.978367][ T2026] serio: Serial port ptm0 [ 359.002829][ T2033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11540'. [ 359.002851][ T2033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11540'. [ 359.134143][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 359.134158][ T29] audit: type=1400 audit(1751690012.775:12133): avc: denied { execmem } for pid=2050 comm="syz.3.11550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 359.189253][ T29] audit: type=1400 audit(1751690012.839:12134): avc: denied { ioctl } for pid=2043 comm="syz.8.11545" path="socket:[94427]" dev="sockfs" ino=94427 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 359.238151][ T29] audit: type=1400 audit(1751690012.882:12135): avc: denied { write } for pid=2059 comm="syz.3.11552" name="kcm" dev="proc" ino=4026533211 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 359.277757][ T29] audit: type=1400 audit(1751690012.925:12136): avc: denied { kexec_image_load } for pid=2061 comm="syz.9.11553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 359.306638][ T2066] wireguard2: entered promiscuous mode [ 359.312194][ T2066] wireguard2: entered allmulticast mode [ 359.314291][ T29] audit: type=1400 audit(1751690012.957:12137): avc: denied { create } for pid=2065 comm="syz.3.11554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.337768][ T29] audit: type=1400 audit(1751690012.957:12138): avc: denied { ioctl } for pid=2065 comm="syz.3.11554" path="socket:[93924]" dev="sockfs" ino=93924 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.404915][ T29] audit: type=1400 audit(1751690013.064:12139): avc: denied { setopt } for pid=2079 comm="syz.9.11556" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 359.435388][ T29] audit: type=1400 audit(1751690013.064:12140): avc: denied { read } for pid=2078 comm="syz.8.11557" dev="nsfs" ino=4026532408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 359.456832][ T29] audit: type=1400 audit(1751690013.064:12141): avc: denied { open } for pid=2078 comm="syz.8.11557" path="net:[4026532408]" dev="nsfs" ino=4026532408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 359.480362][ T29] audit: type=1400 audit(1751690013.064:12142): avc: denied { create } for pid=2078 comm="syz.8.11557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 359.974730][ T2141] IPv6: Can't replace route, no match found [ 359.981943][ T2146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.997469][ T2148] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.013089][ T2146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.064040][ T2158] serio: Serial port ptm0 [ 360.069987][ T2148] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.090145][ T2169] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11582'. [ 360.099340][ T2169] netlink: 8 bytes leftover after parsing attributes in process `syz.9.11582'. [ 360.137575][ T2148] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.152391][ T2175] netlink: 'syz.9.11585': attribute type 1 has an invalid length. [ 360.193999][ T2148] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.249203][ T2191] SELinux: syz.8.11589 (2191) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 360.250662][ T2148] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.277694][ T2148] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.290272][ T2148] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.303443][ T2148] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.400847][ T2219] loop6: detected capacity change from 0 to 128 [ 360.571790][ T2241] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11607'. [ 360.606016][ T2246] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.648311][ T2246] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.704288][ T2246] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.755542][ T2246] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.790486][ C1] vcan0: j1939_tp_rxtimer: 0xffff88813aad0400: rx timeout, send abort [ 360.798787][ C1] vcan0: j1939_tp_rxtimer: 0xffff88813aad0200: rx timeout, send abort [ 360.807231][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88813aad0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 360.821556][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88813aad0200: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 361.015450][ T2298] __nla_validate_parse: 2 callbacks suppressed [ 361.015469][ T2298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11620'. [ 361.023395][ T2300] SET target dimension over the limit! [ 361.165224][T11796] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 361.175507][T11796] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 361.370862][ T2345] netlink: 16 bytes leftover after parsing attributes in process `syz.8.11647'. [ 361.470619][ T2359] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11642'. [ 361.488611][ T2359] netlink: 32 bytes leftover after parsing attributes in process `syz.4.11642'. [ 361.508583][ T2365] netlink: 104 bytes leftover after parsing attributes in process `syz.9.11645'. [ 362.537767][ T2390] loop8: detected capacity change from 0 to 1024 [ 362.548638][ T2389] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11654'. [ 362.575567][ T2390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 362.592623][ T2390] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 362.597488][T11784] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 362.620302][ T2390] EXT4-fs (loop8): Remounting filesystem read-only [ 362.627198][ T2390] EXT4-fs (loop8): error restoring inline_data for inode -- potential data loss! (inode 15, error -30) [ 362.638998][T11784] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.700093][ T5975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 362.783729][ T2423] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11661'. [ 362.813309][ T2423] netlink: 32 bytes leftover after parsing attributes in process `syz.8.11661'. [ 362.831122][ T2425] loop4: detected capacity change from 0 to 512 [ 362.858084][ T2425] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.11667: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 362.907708][ T2425] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.11667: Bad quota inode: 3, type: 0 [ 362.920208][ T2425] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 362.935306][ T2425] EXT4-fs (loop4): mount failed [ 362.939240][T11796] kernel write not supported for file bpf-prog (pid: 11796 comm: kworker/0:7) [ 363.189859][ T2463] loop3: detected capacity change from 0 to 512 [ 363.209136][ T2471] loop8: detected capacity change from 0 to 512 [ 363.216341][ T2471] EXT4-fs: Ignoring removed mblk_io_submit option [ 363.224208][ T2463] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 363.234467][ T2471] EXT4-fs: Ignoring removed mblk_io_submit option [ 363.234853][ T2463] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.254218][ T2471] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 363.255298][ T2463] ext4 filesystem being mounted at /2019/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 363.279801][ T2471] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 363.288935][ T2471] System zones: 1-12 [ 363.293065][ T2471] EXT4-fs error (device loop8): ext4_iget_extra_inode:5035: inode #15: comm syz.8.11682: corrupted in-inode xattr: e_value size too large [ 363.317060][ T2471] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.11682: couldn't read orphan inode 15 (err -117) [ 363.331696][ T2471] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 363.351433][ T2471] EXT4-fs warning (device loop8): dx_probe:801: inode #2: comm syz.8.11682: Unrecognised inode hash code 4 [ 363.362963][ T2471] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.11682: Corrupt directory, running e2fsck is recommended [ 363.365081][ T6505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.398271][ T5975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.441077][ T2494] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11691'. [ 363.467906][ T2496] netlink: 52 bytes leftover after parsing attributes in process `syz.9.11692'. [ 363.837709][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 363.837728][ T29] audit: type=1400 audit(1751690017.828:12396): avc: denied { create } for pid=2546 comm="syz.4.11715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 363.865650][ T29] audit: type=1400 audit(1751690017.839:12397): avc: denied { ioctl } for pid=2546 comm="syz.4.11715" path="socket:[95151]" dev="sockfs" ino=95151 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 363.940691][ T2558] loop4: detected capacity change from 0 to 512 [ 363.961137][ T2558] EXT4-fs: Ignoring removed mblk_io_submit option [ 363.969564][ T2558] EXT4-fs: Ignoring removed mblk_io_submit option [ 363.976586][ T2558] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 363.978955][ T2566] loop8: detected capacity change from 0 to 1024 [ 363.993362][ T2558] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002] [ 364.001338][ T2558] System zones: 1-12 [ 364.005823][ T2558] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.11718: corrupted in-inode xattr: e_value size too large [ 364.020568][ T2558] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.11718: couldn't read orphan inode 15 (err -117) [ 364.023172][ T2566] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.033623][ T2558] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.081900][ T5975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.101599][ T2558] EXT4-fs warning (device loop4): dx_probe:801: inode #2: comm syz.4.11718: Unrecognised inode hash code 4 [ 364.113180][ T2558] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.11718: Corrupt directory, running e2fsck is recommended [ 364.134772][ T29] audit: type=1400 audit(1751690018.150:12398): avc: denied { setopt } for pid=2575 comm="syz.8.11725" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 364.177278][T14888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.267922][ T29] audit: type=1326 audit(1751690018.289:12399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2593 comm="syz.9.11736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086232e929 code=0x7ffc0000 [ 364.269314][ T2246] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.291874][ T29] audit: type=1326 audit(1751690018.289:12400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2593 comm="syz.9.11736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086232e929 code=0x7ffc0000 [ 364.306504][ T2246] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.356493][ T29] audit: type=1326 audit(1751690018.354:12401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2593 comm="syz.9.11736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f086232e929 code=0x7ffc0000 [ 364.380268][ T29] audit: type=1326 audit(1751690018.354:12402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2593 comm="syz.9.11736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086232e929 code=0x7ffc0000 [ 364.404046][ T29] audit: type=1326 audit(1751690018.354:12403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2593 comm="syz.9.11736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086232e929 code=0x7ffc0000 [ 364.427810][ T29] audit: type=1326 audit(1751690018.354:12404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2593 comm="syz.9.11736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f086232e929 code=0x7ffc0000 [ 364.432046][ T2246] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.451462][ T29] audit: type=1326 audit(1751690018.354:12405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2593 comm="syz.9.11736" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086232e929 code=0x7ffc0000 [ 364.518680][ T2608] netlink: 'syz.4.11740': attribute type 21 has an invalid length. [ 364.534619][ T2246] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.544960][ T2608] netlink: 'syz.4.11740': attribute type 1 has an invalid length. [ 364.576151][ T2619] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 364.598130][ T2624] loop4: detected capacity change from 0 to 512 [ 364.606760][ T2624] EXT4-fs: Ignoring removed nobh option [ 364.612532][ T2624] ext2: Unknown parameter 'appraise' [ 364.800327][ T2657] netlink: 'syz.6.11758': attribute type 4 has an invalid length. [ 364.820813][ T2657] netlink: 'syz.6.11758': attribute type 4 has an invalid length. [ 365.000838][ T2681] loop8: detected capacity change from 0 to 1024 [ 365.007629][ T2681] EXT4-fs: Ignoring removed orlov option [ 365.056664][ T2681] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 365.099562][ T2703] netlink: 'syz.9.11776': attribute type 4 has an invalid length. [ 365.109574][ T2703] netlink: 'syz.9.11776': attribute type 4 has an invalid length. [ 365.149370][ T5975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 365.285332][ T2737] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 365.286798][ T2738] netlink: 'syz.8.11790': attribute type 4 has an invalid length. [ 365.307050][ T2738] netlink: 'syz.8.11790': attribute type 4 has an invalid length. [ 365.436154][ T2755] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.484233][ T2755] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.525013][ T2755] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.569097][ T2755] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.621410][ T2755] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.635013][ T2755] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.647271][ T2755] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.659656][ T2755] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.874180][ T2822] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.933252][ T2822] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.980749][ T2822] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.064488][ T2822] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.276932][ T2875] __nla_validate_parse: 6 callbacks suppressed [ 366.277018][ T2875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11847'. [ 366.460700][ T2912] loop4: detected capacity change from 0 to 1024 [ 366.472785][ T2912] EXT4-fs: Ignoring removed orlov option [ 366.488512][ T2912] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 366.607742][ T2936] loop8: detected capacity change from 0 to 1024 [ 366.615214][ T2936] EXT4-fs: inline encryption not supported [ 366.621439][ T2936] EXT4-fs: Ignoring removed bh option [ 366.635723][ T2936] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 366.648199][ T2943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11862'. [ 366.677639][ T2921] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.11856: Allocating blocks 497-513 which overlap fs metadata [ 366.692971][ T2921] EXT4-fs (loop8): Remounting filesystem read-only [ 366.701492][ T2920] EXT4-fs (loop8): pa ffff888106e68e00: logic 256, phys. 385, len 8 [ 366.711421][T14888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.783408][ T5975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 366.828359][ T2960] loop3: detected capacity change from 0 to 512 [ 366.837896][ T2962] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11866'. [ 366.847144][ T2962] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11866'. [ 366.856323][ T2962] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11866'. [ 366.868181][ T2960] EXT4-fs: Ignoring removed nomblk_io_submit option [ 366.873464][ T2962] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11866'. [ 366.884005][ T2962] netlink: 'syz.8.11866': attribute type 6 has an invalid length. [ 366.897577][ T2960] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 366.941917][ T2960] EXT4-fs (loop3): 1 truncate cleaned up [ 366.951353][ T2965] random: crng reseeded on system resumption [ 366.982287][ T2960] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.024942][ T2977] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 367.077515][ T6505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.102111][ T2982] vhci_hcd: invalid port number 236 [ 367.164604][ T2992] serio: Serial port ptm0 [ 367.272092][ T2999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11880'. [ 367.434801][ T3012] loop3: detected capacity change from 0 to 512 [ 367.444404][ T3012] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.11886: bad orphan inode 17 [ 367.455198][ T3012] ext4_test_bit(bit=16, block=4) = 1 [ 367.460759][ T3012] is_bad_inode(inode)=0 [ 367.463578][ T3018] SELinux: security_context_str_to_sid () failed with errno=-22 [ 367.464953][ T3012] NEXT_ORPHAN(inode)=0 [ 367.476768][ T3012] max_ino=32 [ 367.480059][ T3012] i_nlink=1 [ 367.484920][ T3012] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.516450][ T6505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.568887][ T3030] netlink: 'syz.9.11893': attribute type 298 has an invalid length. [ 367.578937][ T3032] netlink: 'syz.3.11894': attribute type 1 has an invalid length. [ 367.597040][ T3034] netlink: 'syz.9.11895': attribute type 1 has an invalid length. [ 367.613777][ T3034] bond2: entered promiscuous mode [ 367.621086][ T3034] 8021q: adding VLAN 0 to HW filter on device bond2 [ 367.641405][ T3034] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 367.650572][ T3034] bond2: (slave batadv1): making interface the new active one [ 367.658191][ T3034] batadv1: entered promiscuous mode [ 367.665591][ T3034] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 367.697449][ T3078] loop3: detected capacity change from 0 to 512 [ 367.706862][ T3078] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.11899: corrupted in-inode xattr: invalid ea_ino [ 367.721697][ T3078] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.11899: couldn't read orphan inode 15 (err -117) [ 367.735233][ T3078] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.766252][ T6505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.055136][ T3122] netlink: 132 bytes leftover after parsing attributes in process `syz.9.11915'. [ 368.275361][ T3148] loop3: detected capacity change from 0 to 1024 [ 368.339947][ T3151] loop4: detected capacity change from 0 to 512 [ 368.350154][ T3148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.395669][ T3151] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.411419][ T3151] ext4 filesystem being mounted at /1342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 368.423302][ T6505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.436108][ T3151] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.11925: corrupted inode contents [ 368.449742][ T3151] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #2: comm syz.4.11925: mark_inode_dirty error [ 368.462118][ T3151] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #2: comm syz.4.11925: corrupted inode contents [ 368.481544][ T3151] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.11925: mark_inode_dirty error [ 368.483918][ T2822] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.506134][ T2822] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.530821][ T2822] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.543511][ T2822] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.573432][T14888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.596675][ T3194] loop6: detected capacity change from 0 to 1024 [ 368.620746][ T3194] journal_path: Non-blockdev passed as './file1' [ 368.627192][ T3194] EXT4-fs: error: could not find journal device path [ 368.716597][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 368.716634][ T29] audit: type=1400 audit(1751690023.053:12602): avc: denied { ioctl } for pid=3211 comm="syz.4.11933" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 368.810155][ T3226] loop4: detected capacity change from 0 to 1024 [ 368.831076][ T3226] EXT4-fs: Ignoring removed bh option [ 368.847529][ T3226] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 368.858432][T11784] usb usb8-port4: attempt power cycle [ 368.908371][ T3226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.926120][ T3226] EXT4-fs error (device loop4): ext4_check_all_de:659: inode #12: block 7: comm syz.4.11936: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=124 fake=0 [ 368.947784][ T3226] EXT4-fs (loop4): Remounting filesystem read-only [ 368.968734][T14888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.989668][ T29] audit: type=1400 audit(1751690023.353:12603): avc: denied { bind } for pid=3253 comm="syz.4.11937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 369.009297][ T29] audit: type=1400 audit(1751690023.353:12604): avc: denied { name_bind } for pid=3253 comm="syz.4.11937" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 369.031442][ T29] audit: type=1400 audit(1751690023.353:12605): avc: denied { node_bind } for pid=3253 comm="syz.4.11937" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 369.082091][ T29] audit: type=1400 audit(1751690023.450:12606): avc: denied { create } for pid=3256 comm="syz.4.11938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 369.102054][ T29] audit: type=1400 audit(1751690023.450:12607): avc: denied { connect } for pid=3256 comm="syz.4.11938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 369.121982][ T29] audit: type=1400 audit(1751690023.450:12608): avc: denied { write } for pid=3256 comm="syz.4.11938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 369.166730][ T29] audit: type=1326 audit(1751690023.525:12609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3259 comm="syz.4.11939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efded4de929 code=0x7ffc0000 [ 369.190462][ T29] audit: type=1326 audit(1751690023.525:12610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3259 comm="syz.4.11939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efded4de929 code=0x7ffc0000 [ 369.214243][ T29] audit: type=1326 audit(1751690023.525:12611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3259 comm="syz.4.11939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7efded4de929 code=0x7ffc0000 [ 369.708628][ T3337] netlink: 132 bytes leftover after parsing attributes in process `syz.9.11971'. [ 369.762138][ T3347] rdma_op ffff88814c0d3580 conn xmit_rdma 0000000000000000 [ 369.791715][ T3351] dvmrp1: entered allmulticast mode [ 369.798862][ T3351] dvmrp1: left allmulticast mode [ 370.112915][ T3371] netlink: 96 bytes leftover after parsing attributes in process `syz.4.11985'. [ 370.199648][ T3377] loop4: detected capacity change from 0 to 2048 [ 370.243290][ T3377] Alternate GPT is invalid, using primary GPT. [ 370.249687][ T3377] loop4: p1 p2 p3 [ 370.493431][ T3407] hub 9-0:1.0: USB hub found [ 370.498443][ T3407] hub 9-0:1.0: 8 ports detected [ 370.573579][T11784] usb usb8-port4: unable to enumerate USB device [ 370.616973][ T3421] netlink: 'syz.4.12000': attribute type 13 has an invalid length. [ 370.722678][ T3421] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.731210][ T3421] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.739671][ T3421] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.748160][ T3421] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 370.907305][ T3445] loop8: detected capacity change from 0 to 1024 [ 370.922026][ T3445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.997061][ T5975] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.072802][ T3463] loop8: detected capacity change from 0 to 1024 [ 371.080723][ T3463] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 371.105804][ T3463] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 371.116835][ T3463] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 371.129497][ T3463] JBD2: no valid journal superblock found [ 371.135479][ T3463] EXT4-fs (loop8): Could not load journal inode [ 371.256176][ T3483] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 371.529651][ T3527] $Hÿ: renamed from bond0 [ 371.536361][ T3527] $Hÿ: entered promiscuous mode [ 371.541449][ T3527] bond_slave_0: entered promiscuous mode [ 371.547445][ T3527] bond_slave_1: entered promiscuous mode [ 371.620533][ T3541] sd 0:0:1:0: device reset [ 371.632536][ T3543] serio: Serial port ptm0 [ 371.898814][ T3570] sd 0:0:1:0: device reset [ 371.956789][ T3578] sch_tbf: burst 0 is lower than device lo mtu (1550) ! [ 372.023016][ T3585] loop4: detected capacity change from 0 to 1024 [ 372.037805][ T3585] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 372.060345][T14888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.254473][ T3613] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12074'. [ 372.263809][ T3613] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12074'. [ 372.273005][ T3613] netlink: 36 bytes leftover after parsing attributes in process `syz.6.12074'. [ 372.285762][ T3615] blktrace: Concurrent blktraces are not allowed on loop8 [ 372.308927][ T3617] netlink: 'syz.4.12076': attribute type 1 has an invalid length. [ 372.463690][ T3635] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.471069][ T3635] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.485436][ T3642] loop8: detected capacity change from 0 to 128 [ 372.543954][ T3635] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.554596][ T3649] loop8: detected capacity change from 0 to 128 [ 372.564188][ T3635] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.574048][ T3649] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 372.613276][T15600] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 372.632957][ T3635] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.641784][ T3635] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.650312][ T3635] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.658754][ T3635] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.382733][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 373.382761][ T29] audit: type=1326 audit(1751690028.064:12920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.3.12146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af028e929 code=0x7ffc0000 [ 373.451928][ T29] audit: type=1326 audit(1751690028.064:12921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.3.12146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af028e929 code=0x7ffc0000 [ 373.475682][ T29] audit: type=1326 audit(1751690028.064:12922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.3.12146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af028e929 code=0x7ffc0000 [ 373.499692][ T29] audit: type=1400 audit(1751690028.064:12923): avc: denied { map_create } for pid=3774 comm="syz.3.12146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 373.519139][ T29] audit: type=1326 audit(1751690028.064:12924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.3.12146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af028e929 code=0x7ffc0000 [ 373.543019][ T29] audit: type=1326 audit(1751690028.064:12925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.3.12146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af028e929 code=0x7ffc0000 [ 373.566992][ T29] audit: type=1326 audit(1751690028.064:12926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.3.12146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6af028e929 code=0x7ffc0000 [ 373.590942][ T29] audit: type=1400 audit(1751690028.064:12927): avc: denied { prog_load } for pid=3774 comm="syz.3.12146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 373.610508][ T29] audit: type=1326 audit(1751690028.064:12928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.3.12146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af028e929 code=0x7ffc0000 [ 373.634181][ T29] audit: type=1326 audit(1751690028.064:12929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3774 comm="syz.3.12146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6af028e929 code=0x7ffc0000 [ 373.882702][ T3835] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12169'. [ 373.892015][ T3835] netlink: 'syz.3.12169': attribute type 7 has an invalid length. [ 373.899866][ T3835] netlink: 'syz.3.12169': attribute type 8 has an invalid length. [ 373.907827][ T3835] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12169'. [ 374.242602][ T3904] SELinux: syz.3.12201 (3904) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 374.616405][ T3966] netlink: 4 bytes leftover after parsing attributes in process `syz.8.12226'. [ 374.625588][ T3966] netlink: 'syz.8.12226': attribute type 15 has an invalid length. [ 374.633692][ T3966] netlink: 'syz.8.12226': attribute type 18 has an invalid length. [ 374.648610][ T3966] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.656986][ T3966] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.665224][ T3966] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.673408][ T3966] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.683514][ T3966] vxlan0: entered promiscuous mode [ 374.851074][ T3974] wireguard0: entered promiscuous mode [ 374.944458][ T3999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12242'. [ 375.070934][ T4015] veth3: entered promiscuous mode [ 375.120508][ T4031] netlink: 5 bytes leftover after parsing attributes in process `syz.3.12249'. [ 375.148650][ T4031] 0ªî{X¹¦: renamed from 30ªX¹¦D (while UP) [ 375.157771][ T4031] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 375.287066][ T4052] ALSA: seq fatal error: cannot create timer (-19) [ 375.329310][T13815] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 375.340639][ T4059] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 375.691039][ T4101] ALSA: seq fatal error: cannot create timer (-19) [ 376.080456][ T4120] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.12291'. [ 376.250466][ T4154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12307'. [ 377.203875][ T4288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12364'. [ 377.213039][ T4288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12364'. [ 377.222242][ T4288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12364'. [ 377.235309][ T4288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12364'. [ 377.244450][ T4288] netlink: 'syz.3.12364': attribute type 6 has an invalid length. [ 377.440025][ T4323] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12383'. [ 377.519401][ T4337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12388'. [ 377.528617][ T4337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12388'. [ 377.537814][ T4337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12388'. [ 377.552014][ T4337] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12388'. [ 377.561187][ T4337] netlink: 'syz.4.12388': attribute type 6 has an invalid length. [ 377.731160][ T4358] netlink: 'syz.4.12399': attribute type 1 has an invalid length. [ 377.775647][ T4358] bond0: entered promiscuous mode [ 377.784435][ T4358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.815993][ T4396] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 377.828489][ T4396] bond0: (slave batadv1): making interface the new active one [ 377.836139][ T4396] batadv1: entered promiscuous mode [ 377.850034][ T4396] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 377.858891][ T4406] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12405'. [ 377.868396][ T4406] netlink: 'syz.6.12405': attribute type 6 has an invalid length. [ 378.082179][ T29] kauditd_printk_skb: 1053 callbacks suppressed [ 378.082246][ T29] audit: type=1400 audit(1751690033.106:13983): avc: denied { create } for pid=4434 comm="syz.6.12418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=0 [ 378.166424][ T29] audit: type=1400 audit(1751690033.106:13984): avc: denied { prog_load } for pid=4434 comm="syz.6.12418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 378.186173][ T29] audit: type=1400 audit(1751690033.138:13985): avc: denied { read write } for pid=29350 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 378.210780][ T29] audit: type=1400 audit(1751690033.181:13986): avc: denied { read write } for pid=14888 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 378.235283][ T29] audit: type=1400 audit(1751690033.181:13987): avc: denied { prog_load } for pid=4436 comm="syz.6.12419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 378.254544][ T29] audit: type=1400 audit(1751690033.181:13988): avc: denied { map_create } for pid=4439 comm="syz.4.12420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 378.273938][ T29] audit: type=1400 audit(1751690033.181:13989): avc: denied { prog_load } for pid=4439 comm="syz.4.12420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 378.293302][ T29] audit: type=1400 audit(1751690033.181:13990): avc: denied { prog_load } for pid=4439 comm="syz.4.12420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 378.312676][ T29] audit: type=1400 audit(1751690033.192:13991): avc: denied { read write } for pid=14888 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 378.337801][ T29] audit: type=1400 audit(1751690033.192:13992): avc: denied { prog_load } for pid=4441 comm="syz.4.12421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 378.562537][ T4487] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 378.784621][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 379.010398][ T4552] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 380.171149][ T4690] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 380.286909][ T4709] serio: Serial port ptm0 [ 380.453439][ T4736] netlink: 'syz.8.12511': attribute type 13 has an invalid length. [ 380.485595][ T4736] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.494193][ T4736] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.502639][ T4736] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.511055][ T4736] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.758523][ T4785] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 381.779449][ T4911] $Hÿ: left promiscuous mode [ 381.784359][ T4911] bond_slave_0: left promiscuous mode [ 381.790090][ T4911] bond_slave_1: left promiscuous mode [ 381.814613][ T4911] vxlan0: left promiscuous mode [ 382.748020][ T29] kauditd_printk_skb: 646 callbacks suppressed [ 382.748039][ T29] audit: type=1400 audit(1751690038.117:14639): avc: denied { create } for pid=4995 comm="syz.9.12601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 382.801411][ T29] audit: type=1400 audit(1751690038.117:14640): avc: denied { map_create } for pid=4995 comm="syz.9.12601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 382.821006][ T29] audit: type=1400 audit(1751690038.127:14641): avc: denied { prog_load } for pid=4995 comm="syz.9.12601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 382.840384][ T29] audit: type=1400 audit(1751690038.160:14642): avc: denied { read write } for pid=5975 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 382.864790][ T29] audit: type=1400 audit(1751690038.160:14643): avc: denied { read write } for pid=29350 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 382.889260][ T29] audit: type=1400 audit(1751690038.170:14644): avc: denied { read write } for pid=6505 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 383.004072][ T29] audit: type=1400 audit(1751690038.181:14645): avc: denied { prog_load } for pid=4999 comm="syz.6.12605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 383.023524][ T29] audit: type=1400 audit(1751690038.202:14646): avc: denied { open } for pid=5002 comm="syz.9.12604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 383.043305][ T29] audit: type=1400 audit(1751690038.202:14647): avc: denied { prog_load } for pid=5002 comm="syz.9.12604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 383.058664][ T5020] $Hÿ: renamed from bond0 [ 383.062558][ T29] audit: type=1400 audit(1751690038.202:14648): avc: denied { execute } for pid=5002 comm="syz.9.12604" name="file1" dev="tmpfs" ino=12970 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 383.091813][ T5020] $Hÿ: entered promiscuous mode [ 383.096958][ T5020] bond_slave_0: entered promiscuous mode [ 383.102843][ T5020] bond_slave_1: entered promiscuous mode [ 383.211705][ T5034] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 383.507880][ T5064] netlink: 'syz.3.12630': attribute type 13 has an invalid length. [ 383.584646][ T5064] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.627578][ T5064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.645984][ T5064] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.654500][ T5064] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.663075][ T5064] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.671557][ T5064] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.689152][ T5069] geneve1: left promiscuous mode [ 383.694296][ T5069] wireguard0: left promiscuous mode [ 383.701365][ T5069] bond0: left promiscuous mode [ 383.706245][ T5069] batadv1: left promiscuous mode [ 383.814202][ T5090] $Hÿ: renamed from bond0 [ 383.827404][ T5090] $Hÿ: entered promiscuous mode [ 383.928209][ T5110] $Hÿ: left promiscuous mode [ 383.949097][ T5110] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.957688][ T5110] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.966088][ T5110] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.974536][ T5110] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.984780][ T5110] geneve1: left promiscuous mode [ 384.014101][ T5110] bond2: left promiscuous mode [ 384.018965][ T5110] batadv1: left promiscuous mode [ 384.111598][ T5131] geneve1: left promiscuous mode [ 384.116996][ T5131] gretap1: left promiscuous mode [ 384.122062][ T5131] wireguard1: left promiscuous mode [ 384.131788][ T5131] veth3: left promiscuous mode [ 384.888481][ T5249] __nla_validate_parse: 6 callbacks suppressed [ 384.888503][ T5249] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12722'. [ 384.904033][ T5249] netlink: 'syz.6.12722': attribute type 15 has an invalid length. [ 384.912431][ T5249] netlink: 'syz.6.12722': attribute type 18 has an invalid length. [ 384.941222][ T5249] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.949537][ T5249] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.957820][ T5249] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.966248][ T5249] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 384.983350][ T5249] vxlan0: entered promiscuous mode [ 385.691965][ T5322] netlink: 132 bytes leftover after parsing attributes in process `syz.9.12740'. [ 385.717106][ T5325] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.12739'. [ 385.735694][ T5317] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.12739'. [ 385.756693][ T5327] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12753'. [ 385.823588][ T5346] netlink: 132 bytes leftover after parsing attributes in process `syz.6.12750'. [ 385.859966][ T5350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12748'. [ 385.869085][ T5350] netlink: 'syz.3.12748': attribute type 15 has an invalid length. [ 385.877070][ T5350] netlink: 'syz.3.12748': attribute type 18 has an invalid length. [ 385.889272][ T5350] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.897638][ T5350] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.905939][ T5350] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.914169][ T5350] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.931239][ T5355] netlink: 5 bytes leftover after parsing attributes in process `syz.6.12752'. [ 385.932133][ T5350] vxlan0: entered promiscuous mode [ 385.946555][ T5355] 0ªî{X¹¦: renamed from 30ªX¹¦D [ 385.961833][ T5355] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 386.102588][ T5367] netlink: 'syz.6.12759': attribute type 10 has an invalid length. [ 386.110624][ T5367] netlink: 40 bytes leftover after parsing attributes in process `syz.6.12759'. [ 386.143842][ T5367] dummy0: entered promiscuous mode [ 386.158553][ T5367] team0: Port device dummy0 removed [ 386.170821][ T5367] bridge0: port 3(dummy0) entered blocking state [ 386.177351][ T5367] bridge0: port 3(dummy0) entered disabled state [ 386.190801][ T5367] dummy0: entered allmulticast mode [ 386.257257][ T5384] veth3: entered promiscuous mode [ 386.622472][ T5440] netlink: 14593 bytes leftover after parsing attributes in process `syz.9.12787'. [ 387.419956][ T29] kauditd_printk_skb: 858 callbacks suppressed [ 387.419971][ T29] audit: type=1400 audit(1751690043.127:15507): avc: denied { read write } for pid=6505 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 387.458714][ T29] audit: type=1400 audit(1751690043.170:15508): avc: denied { map_create } for pid=5551 comm="syz.3.12837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.488682][ T29] audit: type=1400 audit(1751690043.170:15509): avc: denied { prog_load } for pid=5551 comm="syz.3.12837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.508156][ T29] audit: type=1400 audit(1751690043.191:15510): avc: denied { read write } for pid=5975 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 387.532491][ T29] audit: type=1400 audit(1751690043.191:15511): avc: denied { read write } for pid=6505 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 387.558596][ T5557] sock: sock_set_timeout: `syz.3.12839' (pid 5557) tries to set negative timeout [ 387.611297][ T29] audit: type=1400 audit(1751690043.224:15512): avc: denied { read write } for pid=29350 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 387.635819][ T29] audit: type=1400 audit(1751690043.288:15513): avc: denied { map_create } for pid=5553 comm="syz.8.12838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.655213][ T29] audit: type=1400 audit(1751690043.299:15514): avc: denied { prog_load } for pid=5553 comm="syz.8.12838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.674590][ T29] audit: type=1400 audit(1751690043.309:15515): avc: denied { relabelfrom } for pid=5553 comm="syz.8.12838" name="" dev="pipefs" ino=103750 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=0 [ 387.697391][ T29] audit: type=1400 audit(1751690043.309:15516): avc: denied { name_bind } for pid=5561 comm="syz.6.12836" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=0 [ 388.870311][ T5736] sock: sock_set_timeout: `syz.9.12902' (pid 5736) tries to set negative timeout [ 389.674365][ T5880] __nla_validate_parse: 4 callbacks suppressed [ 389.674384][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.12957'. [ 389.798842][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12976'. [ 389.808020][ T5906] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12976'. [ 389.817204][ T5906] netlink: 12 bytes leftover after parsing attributes in process `syz.6.12976'. [ 389.826561][ T5906] netlink: 28 bytes leftover after parsing attributes in process `syz.6.12976'. [ 389.835767][ T5906] netlink: 'syz.6.12976': attribute type 6 has an invalid length. [ 390.587419][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13010'. [ 390.611717][ T6024] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.620115][ T6024] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.628485][ T6024] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.636886][ T6024] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.648908][ T6024] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.657464][ T6024] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.665912][ T6024] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 390.674590][ T6024] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.006927][ T6090] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6090 comm=syz.6.13039 [ 391.573705][ T6162] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=6162 comm=syz.3.13071 [ 391.950663][ T6231] vlan2: entered allmulticast mode [ 391.956014][ T6231] $Hÿ: entered allmulticast mode [ 391.961173][ T6231] bond_slave_0: entered allmulticast mode [ 391.967014][ T6231] bond_slave_1: entered allmulticast mode [ 392.114389][ T29] kauditd_printk_skb: 980 callbacks suppressed [ 392.114406][ T29] audit: type=1400 audit(1751690048.170:16497): avc: denied { read write } for pid=6505 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 392.168656][ T29] audit: type=1400 audit(1751690048.202:16498): avc: denied { map_create } for pid=6258 comm="syz.9.13098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 392.188169][ T29] audit: type=1400 audit(1751690048.202:16499): avc: denied { prog_load } for pid=6258 comm="syz.9.13098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 392.207486][ T29] audit: type=1326 audit(1751690048.202:16500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.9.13098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086232e929 code=0x7ffc0000 [ 392.231193][ T29] audit: type=1326 audit(1751690048.202:16501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.9.13098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086232e929 code=0x7ffc0000 [ 392.254929][ T29] audit: type=1400 audit(1751690048.202:16502): avc: denied { read write } for pid=6256 comm="syz.4.13097" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 392.279132][ T29] audit: type=1326 audit(1751690048.202:16503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.9.13098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f086232e929 code=0x7ffc0000 [ 392.302805][ T29] audit: type=1400 audit(1751690048.202:16504): avc: denied { prog_load } for pid=6258 comm="syz.9.13098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 392.322223][ T29] audit: type=1326 audit(1751690048.202:16505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.9.13098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086232e929 code=0x7ffc0000 [ 392.345913][ T29] audit: type=1326 audit(1751690048.202:16506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6258 comm="syz.9.13098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f086232e929 code=0x7ffc0000 [ 392.530382][ T6294] vlan2: entered allmulticast mode [ 392.535625][ T6294] $Hÿ: entered allmulticast mode [ 392.540783][ T6294] bond_slave_0: entered allmulticast mode [ 392.546645][ T6294] bond_slave_1: entered allmulticast mode [ 392.857292][ T6364] netlink: 'syz.3.13144': attribute type 29 has an invalid length. [ 392.868500][ T6364] netlink: 'syz.3.13144': attribute type 29 has an invalid length. [ 393.000592][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13157'. [ 393.371785][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13185'. [ 393.383879][ T6455] syz_tun (unregistering): left promiscuous mode [ 393.541383][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13196'. [ 393.632831][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13203'. [ 394.851479][ T6673] ªªªªªª: renamed from vlan0 [ 394.958121][ T6691] __nla_validate_parse: 1 callbacks suppressed [ 394.958141][ T6691] netlink: 32 bytes leftover after parsing attributes in process `syz.9.13285'. [ 394.973654][ T6691] netem: unknown loss type 13 [ 394.978421][ T6691] netem: change failed [ 395.125985][ T6720] SELinux: syz.4.13296 (6720) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 395.961330][ T6792] netlink: 12 bytes leftover after parsing attributes in process `syz.9.13333'. [ 395.970577][ T6792] netlink: 16 bytes leftover after parsing attributes in process `syz.9.13333'. [ 396.111296][ T6827] x_tables: duplicate entry at hook 3 [ 396.136690][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13338'. [ 396.145988][ T6834] netlink: 16 bytes leftover after parsing attributes in process `syz.6.13338'. [ 396.656881][ T6916] x_tables: duplicate entry at hook 3 [ 396.812603][ T29] kauditd_printk_skb: 1005 callbacks suppressed [ 396.812621][ T29] audit: type=1400 audit(1751690053.202:17512): avc: denied { read write } for pid=14888 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 396.874407][ T29] audit: type=1400 audit(1751690053.266:17513): avc: denied { prog_load } for pid=6921 comm="syz.4.13377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 396.897214][ T29] audit: type=1400 audit(1751690053.287:17514): avc: denied { map_create } for pid=6923 comm="syz.6.13376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 396.916668][ T29] audit: type=1400 audit(1751690053.298:17516): avc: denied { prog_load } for pid=6923 comm="syz.6.13376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 396.936099][ T29] audit: type=1400 audit(1751690053.298:17515): avc: denied { create } for pid=6921 comm="syz.4.13377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 396.936419][ T6926] ALSA: seq fatal error: cannot create timer (-19) [ 396.955885][ T29] audit: type=1400 audit(1751690053.298:17517): avc: denied { map_create } for pid=6924 comm="syz.3.13378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 396.955919][ T29] audit: type=1400 audit(1751690053.298:17518): avc: denied { prog_load } for pid=6923 comm="syz.6.13376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 396.955949][ T29] audit: type=1400 audit(1751690053.298:17519): avc: denied { prog_load } for pid=6927 comm="syz.9.13375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 396.956244][ T29] audit: type=1400 audit(1751690053.309:17520): avc: denied { read write } for pid=14888 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 397.044699][ T29] audit: type=1326 audit(1751690053.320:17521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6929 comm="syz.4.13379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efded4de929 code=0x7ffc0000 [ 397.106665][ T6942] x_tables: duplicate entry at hook 3 [ 397.295711][ T6976] Cannot find add_set index 0 as target [ 397.388872][ T6998] netlink: 'syz.9.13413': attribute type 10 has an invalid length. [ 397.396918][ T6998] veth0_vlan: entered allmulticast mode [ 398.306478][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13451'. [ 398.321787][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13451'. [ 398.385194][ T7160] netlink: 'syz.6.13465': attribute type 3 has an invalid length. [ 398.515759][ T7191] SET target dimension over the limit! [ 398.670164][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13487'. [ 398.698986][ T7214] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13487'. [ 398.742837][ T7222] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13491'. [ 399.000842][ T7262] netlink: 'syz.8.13508': attribute type 6 has an invalid length. [ 399.680965][ T7309] SET target dimension over the limit! [ 399.731475][ T7316] netlink: 'syz.3.13528': attribute type 6 has an invalid length. [ 399.739432][ T7316] __nla_validate_parse: 4 callbacks suppressed [ 399.739445][ T7316] netlink: 100 bytes leftover after parsing attributes in process `syz.3.13528'. [ 400.014169][ T7343] netlink: 'syz.6.13538': attribute type 10 has an invalid length. [ 400.026875][ T7344] SET target dimension over the limit! [ 400.034787][ T7343] bridge0: entered promiscuous mode [ 400.040368][ T7343] bridge0: entered allmulticast mode [ 400.047882][ T7343] $Hÿ: (slave bridge0): Enslaving as an active interface with an up link [ 400.061766][ T7346] netlink: 'syz.4.13540': attribute type 6 has an invalid length. [ 400.069751][ T7346] netlink: 100 bytes leftover after parsing attributes in process `syz.4.13540'. [ 400.195215][ T7376] SET target dimension over the limit! [ 400.219853][ T7384] netlink: 'syz.3.13557': attribute type 10 has an invalid length. [ 400.317666][ T7390] netlink: 'syz.8.13569': attribute type 10 has an invalid length. [ 400.327230][ T7390] bridge0: entered allmulticast mode [ 400.333237][ T7390] $Hÿ: (slave bridge0): Enslaving as an active interface with an up link [ 400.493349][ T7418] netlink: 'syz.4.13572': attribute type 10 has an invalid length. [ 401.342565][ T7568] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7568 comm=syz.3.13638 [ 401.481869][ T29] kauditd_printk_skb: 895 callbacks suppressed [ 401.481889][ T29] audit: type=1400 audit(1751690058.212:18417): avc: denied { read write } for pid=6505 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 401.520446][ T29] audit: type=1400 audit(1751690058.212:18418): avc: denied { map_create } for pid=7589 comm="syz.3.13645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 401.539925][ T29] audit: type=1400 audit(1751690058.212:18419): avc: denied { prog_load } for pid=7589 comm="syz.3.13645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 401.559297][ T29] audit: type=1400 audit(1751690058.212:18420): avc: denied { prog_load } for pid=7589 comm="syz.3.13645" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 401.578795][ T29] audit: type=1400 audit(1751690058.212:18421): avc: denied { append } for pid=7589 comm="syz.3.13645" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=0 [ 401.601909][ T29] audit: type=1400 audit(1751690058.212:18422): avc: denied { read write } for pid=6505 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 401.626279][ T29] audit: type=1400 audit(1751690058.212:18423): avc: denied { allowed } for pid=7591 comm="syz.3.13646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 401.645822][ T29] audit: type=1400 audit(1751690058.212:18424): avc: denied { create } for pid=7591 comm="syz.3.13646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 401.665443][ T29] audit: type=1400 audit(1751690058.255:18425): avc: denied { read write } for pid=6505 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 401.693784][ T29] audit: type=1400 audit(1751690058.276:18426): avc: denied { prog_load } for pid=7593 comm="syz.3.13647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 401.887566][ T7638] netlink: 'syz.3.13667': attribute type 3 has an invalid length. [ 401.975362][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13675'. [ 401.985071][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13675'. [ 401.994433][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13675'. [ 402.256007][ T7695] syz_tun: entered promiscuous mode [ 402.262073][ T7695] batadv_slave_0: entered promiscuous mode [ 402.296806][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13697'. [ 402.306701][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13697'. [ 402.316050][ T7702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13697'. [ 402.581887][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13717'. [ 402.590996][ T7745] netlink: 'syz.9.13717': attribute type 30 has an invalid length. [ 402.633008][ T7745] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.641323][ T7745] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.649679][ T7745] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.658007][ T7745] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 402.694708][ T7745] netlink: 8 bytes leftover after parsing attributes in process `syz.9.13717'. [ 402.703941][ T7745] netlink: 'syz.9.13717': attribute type 30 has an invalid length. [ 403.026335][ T7790] netlink: 'syz.8.13736': attribute type 21 has an invalid length. [ 403.189838][ T7809] serio: Serial port ptm0 [ 403.746599][ T7860] netlink: 'wg1': attribute type 10 has an invalid length. [ 404.707066][ T8011] ALSA: seq fatal error: cannot create timer (-19) [ 404.818159][ T8043] pim6reg1: entered promiscuous mode [ 404.823530][ T8043] pim6reg1: entered allmulticast mode [ 405.756566][ T8220] pim6reg1: entered promiscuous mode [ 405.761992][ T8220] pim6reg1: entered allmulticast mode [ 405.797560][ T8224] binfmt_misc: register: failed to install interpreter file ./file0 [ 405.919969][ T8261] 0ªî{X¹¦: left allmulticast mode [ 405.930465][ T8267] __nla_validate_parse: 7 callbacks suppressed [ 405.930485][ T8267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.13911'. [ 405.934050][ T8261] veth0_vlan: left allmulticast mode [ 405.952771][ T8261] macsec1: left allmulticast mode [ 405.984960][ T8261] netdevsim netdevsim9 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 405.993516][ T8261] netdevsim netdevsim9 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.002033][ T8261] netdevsim netdevsim9 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.010525][ T8261] netdevsim netdevsim9 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.163795][ T29] kauditd_printk_skb: 893 callbacks suppressed [ 406.163834][ T29] audit: type=1400 audit(1751690063.233:19320): avc: denied { prog_load } for pid=8296 comm="syz.8.13927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 406.190096][ T29] audit: type=1400 audit(1751690063.233:19321): avc: denied { read write } for pid=14888 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 406.214575][ T29] audit: type=1400 audit(1751690063.244:19322): avc: denied { map_create } for pid=8298 comm="syz.9.13928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 406.233973][ T29] audit: type=1400 audit(1751690063.244:19323): avc: denied { prog_load } for pid=8298 comm="syz.9.13928" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 406.253374][ T29] audit: type=1400 audit(1751690063.265:19324): avc: denied { prog_load } for pid=8296 comm="syz.8.13927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 406.272934][ T29] audit: type=1400 audit(1751690063.340:19325): avc: denied { execmem } for pid=8301 comm="GPL" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 406.291698][ T29] audit: type=1400 audit(1751690063.340:19326): avc: denied { read write } for pid=5975 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 406.316206][ T29] audit: type=1400 audit(1751690063.362:19327): avc: denied { prog_load } for pid=8301 comm="syz.4.13930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 406.341223][ T29] audit: type=1400 audit(1751690063.426:19328): avc: denied { read write } for pid=14888 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 406.365771][ T29] audit: type=1400 audit(1751690063.426:19329): avc: denied { prog_load } for pid=8307 comm="syz.8.13931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 406.673987][ T8336] 0ªX¹¦D: left allmulticast mode [ 406.682681][ T8336] wireguard0: left allmulticast mode [ 406.689056][ T8336] hsr2: left allmulticast mode [ 406.694001][ T8336] batadv_slave_0: left allmulticast mode [ 406.772241][ T8354] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13942'. [ 406.788571][ T8354] batadv2: entered promiscuous mode [ 406.794057][ T8354] batadv2: entered allmulticast mode [ 406.832094][ T8367] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13942'. [ 406.842499][ T8368] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13944'. [ 406.845563][ T8367] batadv2: entered promiscuous mode [ 406.856902][ T8367] batadv2: entered allmulticast mode [ 406.965127][ T8381] 0ªî{X¹¦: left allmulticast mode [ 406.973350][ T8381] gretap1: left allmulticast mode [ 406.978764][ T8381] wireguard1: left allmulticast mode [ 406.984225][ T8381] hsr0: left allmulticast mode [ 406.989074][ T8381] syz_tun: left allmulticast mode [ 406.994189][ T8381] batadv_slave_0: left allmulticast mode [ 407.001705][ T8381] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.010288][ T8381] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.018841][ T8381] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.027392][ T8381] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 407.036532][ T8381] vxlan0: left promiscuous mode [ 407.127790][ T8405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13955'. [ 407.136865][ T8405] netlink: 'syz.4.13955': attribute type 15 has an invalid length. [ 407.144830][ T8405] netlink: 'syz.4.13955': attribute type 18 has an invalid length. [ 407.155616][ T8405] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.164001][ T8405] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.172313][ T8405] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.180624][ T8405] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 407.189272][ T8405] vxlan1: entered promiscuous mode [ 407.297856][ T8433] sch_tbf: burst 1885 is lower than device lo mtu (11337746) ! [ 407.739566][ T8470] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8470 comm=syz.3.13999 [ 408.067676][ T8531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14005'. [ 408.076848][ T8531] netlink: 'syz.3.14005': attribute type 15 has an invalid length. [ 408.084893][ T8531] netlink: 'syz.3.14005': attribute type 18 has an invalid length. [ 408.836755][ T8712] loop3: detected capacity change from 0 to 128 [ 409.415863][ T8766] wireguard0: entered promiscuous mode [ 409.466202][ T8777] loop6: detected capacity change from 0 to 512 [ 409.490743][ T8777] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 409.507277][ T8777] EXT4-fs (loop6): mount failed [ 409.685025][ T8802] sch_tbf: burst 1885 is lower than device lo mtu (11337746) ! [ 409.715161][ T8807] loop6: detected capacity change from 0 to 128 [ 409.908801][ T8817] IPVS: Error connecting to the multicast addr [ 409.967040][ T3416] hid-generic 0000:0004:0000.0017: unknown main item tag 0x0 [ 409.974606][ T3416] hid-generic 0000:0004:0000.0017: unknown main item tag 0x0 [ 409.982074][ T3416] hid-generic 0000:0004:0000.0017: unknown main item tag 0x0 [ 410.008743][ T3416] hid-generic 0000:0004:0000.0017: hidraw0: HID v0.00 Device [syz0] on syz1 [ 410.075685][ T8841] sch_tbf: burst 1885 is lower than device lo mtu (11337746) ! [ 410.116890][ T8846] loop8: detected capacity change from 0 to 1024 [ 410.125265][ T8846] EXT4-fs: Ignoring removed oldalloc option [ 410.143080][ T8846] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 410.154525][ T8849] loop6: detected capacity change from 0 to 2048 [ 410.195778][ T8849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.430800][ T8880] IPVS: Error connecting to the multicast addr [ 410.501220][T29350] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.904961][ T8917] loop6: detected capacity change from 0 to 1024 [ 410.922177][ T8917] EXT4-fs: Ignoring removed oldalloc option [ 410.928304][ T8915] wireguard2: entered promiscuous mode [ 410.937195][ T8917] EXT4-fs (loop6): VFS: Can't find ext4 filesystem [ 410.947205][ T8926] loop3: detected capacity change from 0 to 512 [ 410.982862][ T8930] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 411.008286][ T8926] __quota_error: 348 callbacks suppressed [ 411.008305][ T8926] Quota error (device loop3): v2_read_file_info: Free block number 1 out of range (1, 6). [ 411.029985][ T29] audit: type=1400 audit(1751690068.458:19677): avc: denied { firmware_load } for pid=8929 comm="+}[@" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 411.033559][ T8926] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 411.137266][ T8926] EXT4-fs (loop3): mount failed [ 411.278084][ T3416] hid-generic 0000:0004:0000.0018: unknown main item tag 0x0 [ 411.285776][ T3416] hid-generic 0000:0004:0000.0018: unknown main item tag 0x0 [ 411.293267][ T3416] hid-generic 0000:0004:0000.0018: unknown main item tag 0x0 [ 411.307316][ T8952] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.14104'. [ 411.325296][ T3416] hid-generic 0000:0004:0000.0018: hidraw0: HID v0.00 Device [syz0] on syz1 [ 411.379884][ T29] audit: type=1400 audit(1751690068.834:19678): avc: denied { module_request } for pid=8958 comm="syz.3.14112" kmod="netdev-bond0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 411.434267][ T29] audit: type=1400 audit(1751690068.887:19679): avc: denied { sys_module } for pid=8958 comm="syz.3.14112" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 411.455644][ T29] audit: type=1400 audit(1751690068.898:19680): avc: denied { create } for pid=8962 comm="syz.6.14113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 411.492351][ T8971] 9pnet: Could not find request transport: switch [ 411.570640][ T29] audit: type=1400 audit(1751690068.952:19681): avc: denied { setopt } for pid=8962 comm="syz.6.14113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 411.629130][ T8986] wireguard1: entered promiscuous mode [ 411.678679][ T8993] loop4: detected capacity change from 0 to 512 [ 411.701266][ T8993] Quota error (device loop4): v2_read_file_info: Free block number 1 out of range (1, 6). [ 411.752690][ T8993] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 411.807785][ T8993] EXT4-fs (loop4): mount failed [ 411.880598][ T9001] x_tables: ip6_tables: tcpmss match: only valid for protocol 6 [ 411.978588][ T29] audit: type=1400 audit(1751690069.477:19682): avc: denied { map } for pid=9008 comm="syz.8.14123" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=111336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 412.003131][ T29] audit: type=1400 audit(1751690069.477:19683): avc: denied { read write } for pid=9008 comm="syz.8.14123" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=111336 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 412.031017][ T9011] SELinux: security policydb version 18 (MLS) not backwards compatible [ 412.048052][ T9011] SELinux: failed to load policy [ 412.062470][ T29] audit: type=1400 audit(1751690069.477:19684): avc: denied { create } for pid=9008 comm="syz.8.14123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 412.243614][ T9021] SELinux: ebitmap: truncated map [ 412.260350][ T9021] SELinux: failed to load policy [ 412.334106][ T9032] wireguard0: entered promiscuous mode [ 412.392417][ T9044] loop8: detected capacity change from 0 to 512 [ 412.418754][ T9046] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.14138'. [ 412.461682][ T9044] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 412.507731][ T9044] EXT4-fs (loop8): mount failed [ 412.655129][ T9066] netlink: 'syz.3.14141': attribute type 4 has an invalid length. [ 412.663043][ T9066] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.14141'. [ 413.152281][T13817] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 413.159738][ T9110] SELinux: ebitmap: truncated map [ 413.169531][ T9110] SELinux: failed to load policy [ 414.260594][ T9185] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 414.323591][ T9185] SELinux: failed to load policy [ 414.543565][T13864] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 414.659685][ T9233] serio: Serial port ttyS3 [ 414.900569][ T9246] netlink: 40 bytes leftover after parsing attributes in process `syz.9.14191'. [ 414.959801][ T9254] random: crng reseeded on system resumption [ 415.447611][ T9274] openvswitch: netlink: Message has 6 unknown bytes. [ 415.469695][ T9278] netlink: 40 bytes leftover after parsing attributes in process `syz.6.14212'. [ 415.675169][ T9304] random: crng reseeded on system resumption [ 415.712197][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 415.712214][ T29] audit: type=1326 audit(1751690073.490:19746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.4.14216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efded4de929 code=0x7ffc0000 [ 415.765361][ T29] audit: type=1326 audit(1751690073.512:19747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.4.14216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efded4de929 code=0x7ffc0000 [ 415.789120][ T29] audit: type=1326 audit(1751690073.512:19748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.4.14216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efded4de929 code=0x7ffc0000 [ 415.812799][ T29] audit: type=1326 audit(1751690073.512:19749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.4.14216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efded4de929 code=0x7ffc0000 [ 415.836459][ T29] audit: type=1326 audit(1751690073.512:19750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.4.14216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efded4de929 code=0x7ffc0000 [ 415.860191][ T29] audit: type=1326 audit(1751690073.512:19751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.4.14216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7efded4de929 code=0x7ffc0000 [ 415.883884][ T29] audit: type=1326 audit(1751690073.512:19752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9305 comm="syz.4.14216" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efded4de929 code=0x7ffc0000 [ 415.976692][ T29] audit: type=1400 audit(1751690073.769:19753): avc: denied { create } for pid=9316 comm="syz.8.14223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 415.980086][ T9317] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 416.008940][ T29] audit: type=1400 audit(1751690073.769:19754): avc: denied { ioctl } for pid=9316 comm="syz.8.14223" path="socket:[112702]" dev="sockfs" ino=112702 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 416.034151][ T29] audit: type=1400 audit(1751690073.769:19755): avc: denied { bind } for pid=9316 comm="syz.8.14223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 416.130054][ T9336] openvswitch: netlink: Message has 6 unknown bytes. [ 416.537963][ T9407] syzkaller1: entered promiscuous mode [ 416.543648][ T9407] syzkaller1: entered allmulticast mode [ 416.563747][ T9417] loop8: detected capacity change from 0 to 256 [ 416.687341][ T9434] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14268'. [ 416.733051][ T9438] SELinux: ebitmap: truncated map [ 416.739271][ T9438] SELinux: failed to load policy [ 416.757044][ T9441] loop3: detected capacity change from 0 to 512 [ 416.771578][ T9441] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 416.792538][ T9441] EXT4-fs (loop3): 1 truncate cleaned up [ 416.820968][ T9441] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.835227][ T9454] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14278'. [ 416.849037][ T9456] netlink: 'syz.9.14279': attribute type 1 has an invalid length. [ 416.927469][ T6505] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 417.211220][T11803] kernel read not supported for file /vga_arbiter (pid: 11803 comm: kworker/0:10) [ 417.289336][ T9513] netlink: 830 bytes leftover after parsing attributes in process `syz.3.14300'. [ 417.540222][ T9540] netlink: 16 bytes leftover after parsing attributes in process `syz.9.14313'. [ 417.807033][ T9550] loop3: detected capacity change from 0 to 8192 [ 418.052320][T13864] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 418.087819][ T9617] xt_CT: No such helper "pptp" [ 418.188240][ T9624] loop4: detected capacity change from 0 to 1024 [ 418.195767][ T9624] EXT4-fs: Ignoring removed nobh option [ 418.201511][ T9624] EXT4-fs: Ignoring removed bh option [ 418.212787][ T9624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.239417][T14888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.278227][ T9639] netlink: 108 bytes leftover after parsing attributes in process `syz.4.14348'. [ 418.287470][ T9639] netlink: 108 bytes leftover after parsing attributes in process `syz.4.14348'. [ 418.296717][ T9639] netlink: 108 bytes leftover after parsing attributes in process `syz.4.14348'. [ 418.423975][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.14354'. [ 418.616071][ T9687] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14369'. [ 418.625190][ T9687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14369'. [ 418.730658][ T9708] ip6tnl1: entered promiscuous mode [ 418.958542][ T9743] loop4: detected capacity change from 0 to 128 [ 418.994148][ T9743] syz.4.14393: attempt to access beyond end of device [ 418.994148][ T9743] loop4: rw=2049, sector=132, nr_sectors = 8 limit=128 [ 419.011525][ T9743] syz.4.14393: attempt to access beyond end of device [ 419.011525][ T9743] loop4: rw=2049, sector=148, nr_sectors = 8 limit=128 [ 419.028209][ T9743] syz.4.14393: attempt to access beyond end of device [ 419.028209][ T9743] loop4: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 419.041826][ T9743] buffer_io_error: 26 callbacks suppressed [ 419.041843][ T9743] Buffer I/O error on dev loop4, logical block 142, lost async page write [ 419.058558][ T9743] syz.4.14393: attempt to access beyond end of device [ 419.058558][ T9743] loop4: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 419.072167][ T9743] Buffer I/O error on dev loop4, logical block 143, lost async page write [ 419.082671][ T9743] syz.4.14393: attempt to access beyond end of device [ 419.082671][ T9743] loop4: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 419.096286][ T9743] Buffer I/O error on dev loop4, logical block 144, lost async page write [ 419.109163][ T9743] syz.4.14393: attempt to access beyond end of device [ 419.109163][ T9743] loop4: rw=2049, sector=145, nr_sectors = 1 limit=128 [ 419.122891][ T9743] Buffer I/O error on dev loop4, logical block 145, lost async page write [ 419.133732][ T9743] syz.4.14393: attempt to access beyond end of device [ 419.133732][ T9743] loop4: rw=2049, sector=146, nr_sectors = 1 limit=128 [ 419.147345][ T9743] Buffer I/O error on dev loop4, logical block 146, lost async page write [ 419.158108][ T9743] syz.4.14393: attempt to access beyond end of device [ 419.158108][ T9743] loop4: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 419.171806][ T9743] Buffer I/O error on dev loop4, logical block 147, lost async page write [ 419.182433][ T9743] syz.4.14393: attempt to access beyond end of device [ 419.182433][ T9743] loop4: rw=2049, sector=156, nr_sectors = 1 limit=128 [ 419.196033][ T9743] Buffer I/O error on dev loop4, logical block 156, lost async page write [ 419.206910][ T9743] syz.4.14393: attempt to access beyond end of device [ 419.206910][ T9743] loop4: rw=2049, sector=157, nr_sectors = 1 limit=128 [ 419.220541][ T9743] Buffer I/O error on dev loop4, logical block 157, lost async page write [ 419.231882][ T9743] Buffer I/O error on dev loop4, logical block 160, lost async page write [ 419.240955][ T9743] Buffer I/O error on dev loop4, logical block 161, lost async page write [ 419.353349][T13864] ================================================================== [ 419.361495][T13864] BUG: KCSAN: data-race in copy_process / free_pid [ 419.368022][T13864] [ 419.370361][T13864] read-write to 0xffffffff86860860 of 4 bytes by task 9767 on cpu 0: [ 419.378443][T13864] free_pid+0x77/0x180 [ 419.382532][T13864] free_pids+0x7a/0xb0 [ 419.386617][T13864] release_task+0x9a9/0xb60 [ 419.391179][T13864] do_exit+0xd81/0x1590 [ 419.395361][T13864] call_usermodehelper_exec_async+0x247/0x250 [ 419.401463][T13864] ret_from_fork+0xda/0x150 [ 419.405989][T13864] ret_from_fork_asm+0x1a/0x30 [ 419.410776][T13864] [ 419.413118][T13864] read to 0xffffffff86860860 of 4 bytes by task 13864 on cpu 1: [ 419.420763][T13864] copy_process+0x148f/0x1fe0 [ 419.425464][T13864] kernel_clone+0x16c/0x5b0 [ 419.429995][T13864] user_mode_thread+0x7d/0xb0 [ 419.434698][T13864] call_usermodehelper_exec_work+0x41/0x160 [ 419.440635][T13864] process_scheduled_works+0x4cb/0x9d0 [ 419.446129][T13864] worker_thread+0x582/0x770 [ 419.450753][T13864] kthread+0x489/0x510 [ 419.454849][T13864] ret_from_fork+0xda/0x150 [ 419.459376][T13864] ret_from_fork_asm+0x1a/0x30 [ 419.464162][T13864] [ 419.466502][T13864] value changed: 0x80000170 -> 0x8000016f [ 419.472234][T13864] [ 419.474568][T13864] Reported by Kernel Concurrency Sanitizer on: [ 419.480753][T13864] CPU: 1 UID: 0 PID: 13864 Comm: kworker/u8:49 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(voluntary) [ 419.493534][T13864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.503619][T13864] Workqueue: events_unbound call_usermodehelper_exec_work [ 419.510772][T13864] ================================================================== [ 419.532857][ T9764] wireguard2: entered promiscuous mode