last executing test programs: 3m0.564057439s ago: executing program 2 (id=3837): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa312, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000027c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xb, 0x1}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) 3m0.45093729s ago: executing program 2 (id=3843): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2}}, 0x20) 3m0.396562606s ago: executing program 2 (id=3845): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000d00)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x6, 0xc, 0x80005, 0xa, "0062ba7d82000000000000000000f7ffffff00"}) syz_open_pts(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) 2m59.580694746s ago: executing program 2 (id=3855): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xab3011, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x80000, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) 2m59.518298993s ago: executing program 2 (id=3859): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e23, 0x0, @loopback}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000240)="0ea415"}, {&(0x7f0000000740)="8b0a751c7aead06880515a5d", 0xc}, {&(0x7f0000000800)="c8ea972e8fbc5218c56e7b9c7ef9c62f186d531c8a26c50e09e4267c68eedb106c2f9d33ca75", 0xffc9}], 0x3}, 0x200ce0c0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f00000002c0)=@l2tp={0x2, 0x0, @remote}, 0x80, &(0x7f0000000180)=[{&(0x7f0000002b40)="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", 0x2ae}], 0x1}, 0x8400) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000000)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}, 0x0) 2m59.180118606s ago: executing program 2 (id=3872): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) shutdown(r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 2m59.176359477s ago: executing program 32 (id=3872): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000005c0)={0x8, 0x0, 0xfff, 0xfffffffa}, 0x10) sendmmsg$inet(r0, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000140)='`', 0x1}], 0x1}}], 0x1, 0x40081) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) shutdown(r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x5}}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 9.128154066s ago: executing program 5 (id=4980): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000100)={0x1, 0x1, 0x1000, 0x0, &(0x7f0000000640), 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0xfffffffe}, 0x8) bind$bt_sco(r0, &(0x7f0000000100), 0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) listen(r0, 0x0) 7.347130262s ago: executing program 1 (id=4984): add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) pwritev2(r3, &(0x7f0000000300)=[{&(0x7f00000003c0)="1bbc54a603ff246bd56edbce6558", 0xe}, {&(0x7f0000000040)="010130a7cd08f1cac7c721e886dd", 0x4a}], 0x2, 0xa74a, 0x80000000, 0x10) 7.152311521s ago: executing program 5 (id=4986): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) 6.897649817s ago: executing program 5 (id=4989): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) 6.487339427s ago: executing program 0 (id=4991): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000400)=ANY=[@ANYBLOB="120100000d980708b5192100c7980000000109021b00012000ac00090400000107000009090585"], 0x0) 6.304422136s ago: executing program 1 (id=4992): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) socket(0x10, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 5.610727314s ago: executing program 5 (id=4995): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.579639717s ago: executing program 5 (id=4996): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e53100406c256d000000b45c00010902240001000000000904000000000122050009"], 0x0) 5.301885225s ago: executing program 1 (id=4998): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003b40)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f7ff0000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 4.416869393s ago: executing program 3 (id=4999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 4.400996214s ago: executing program 4 (id=5000): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r4, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 3.411212152s ago: executing program 4 (id=5001): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc, 0x7}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000850) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x180, 0x940c, 0x3002, 0x180, 0x2c0, 0x298, 0x3d8, 0x3d8, 0x298, 0x3d8, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private1, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffff00], [0xffffffff, 0xffffffff, 0xff000000, 0xff], 'geneve0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x84, 0x81, 0x2, 0x1d}, 0x0, 0x120, 0x180, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x7}}, @common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e24, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e24, 0x4e21, 0x4e22, 0x4e20, 0x4e20, 0x4e23, 0x4e24, 0x4e22, 0x4e22, 0x4e21], [0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x10]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@broadcast, [0x0, 0xff000000, 0xffffffff, 0xff], 0x4e24, 0x4e21, 0x4e22, 0x4e21, 0xf, 0x21e8, 0x9, 0x1, 0x1}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast1, 'veth1_to_team\x00', {0x12}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x200000000000014a, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000000c0)='netlink_extack\x00', r7}, 0x10) socketpair(0x22, 0x2, 0x3, &(0x7f0000000240)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x40044591, 0x0) 3.23149318s ago: executing program 0 (id=5002): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 3.207941183s ago: executing program 3 (id=5003): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x28) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) socket$tipc(0x1e, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20) 3.192648934s ago: executing program 1 (id=5004): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000000)={[{@errors_remount}, {@noload}, {@bsdgroups}]}, 0x4, 0x56d, &(0x7f0000000c00)="$eJzs3c+PG1cdAPDvzP6w86PdBHqAqpAAhYCieLNOG1W9NLmAUFUJUXFAHNJl11ktseMQe0t3icT2bwAJBCf4EzggcUDqiQM3jkgcEFI5IAWIQFkESEYznt04WVtxYq/d7H4+0mR+vHnzfU/O+D0/e+cFcGSdjYjtiJiPiHciYqE4nhRLXOku2Xn3791Z2bl3ZyWJTuftvyd5enYsevJkThTXLEfE178S8e1kf9zW5taN5Xq9drvYX2w3bi22NrcurDeW12prtZvV6uWlyxdfu/RqdWx1PdP45d0vr7/5jd/8+lMf/n77S9/PinWySOutxzh1qz63FyczGxFvHkSwKZgp1vP7Ul7qn+HKwZaHJ5NGxMci4rP5/b8QM/n/TgDgMOt0fhqdhd59AOCwyz7/nywnaSUi0rToBFS6Y3gvxPG03my1z19vbtxc7Y6VnYq59Pp6vXbxdOmP381Pnkuy/aU8LU/P96uP7F+KiNMR8aPSsXy/stKsr06nywMAR96J/Duwov2PiH+V0rRSGSprn2/1AIBnRnkKOQGA6eptxUtTLAcAMDk+xQPA0TNE+1982b994GUBACbD538AOHq0/wBw9Dxp++83ggDwTPvaW29lS2eneP716rubG3PNdy+s1lo3Ko2NlcpK8/atylqzuZY/s6fxUOZjPdtFn6DebN5aeiU23lts11rtxdbm1rVGc+Nm+1r+XO9rtbmJ1g4A6Of0mQ/+kETE9uvH8iV65nLQVsPhlk67AMDUzDzYrJ140sw6CPBMe7rZvv4z9nIAkzdUE553En534GUBpqPvw7zLfTcf9pMnCOJ3xvCRcu6Tw4//75/jGXiWGf+Ho2vmqXK9MfZyAJP3dOP/wGHQ6SSPzvk/v5cEABxKI/yEr/ODcXVCgKl63GTeY/n+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6ZkxHxnUjSSj4XeJr9m1YqEc9FxKmYS66v12sXI+L5OBMRc6Vsf2nahQYARpT+NSnm/zq38PLJR1Pnk3+X8nVEfO9nb//4veV2+/ZSdvwfe8dLu9OHVR/kG2FeQQBgOJ3SkCfm7Xe1WPd8kL9/787K7nJQhezn7tX4XzEV8crOvTv50k2ZjexgRDnvSxz/ZxKzRZ5yRLwYETNjiL/9fkR8ol/9k3xs5FQx82lv/ChiPzfR+OlD8dM8rbvOOl8fH0NZ4Kj54GpEXOl3/6VxNl/3v//L+TvU6O5e7V5s971vpyf+bBFppk/87J4/O2yMV3771X0HOwvdtPcjXpztFz/Zi58MiP/ykPH/9NKnf/jGgLTOzyPORf/4vbEW241bi63NrQvrjeW12lo5qtXLS5cvvnbp1epiPka9uDtSvd/fXj///KCyZfU/PiB+uW/95/fyfn7I+v/iv+986zMPdkuPxv/i5/q//i/0jd+VtYlfeDhMZ1D85eO/Gjh9dxZ/dUD9H/f6nx+m8hHx4V+2Voc8FQCYgNbm1o3ler12e6SNNHY647jOvo2siMOdvNtdHC3on+MgavGUG3MjV2daG7N7fcXxXvmb2RUnXJ107LUYaeP+pGJN7z0JmIwHN/20SwIAAAAAAAAAAAAAAAwyiT9dmnYdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOLz+HwAA//+WydIx") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000074", @ANYRES32=r2], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r6}, 0x10) syz_open_procfs(0x0, 0x0) pipe(0x0) fsmount(0xffffffffffffffff, 0x1, 0x2) socket$nl_route(0x10, 0x3, 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000040)='u:r:untrusted_app:s0:c512,c768\x00', 0x1f, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000280)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xb9}, 0x18) 2.643698728s ago: executing program 3 (id=5005): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r2, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) 2.283478304s ago: executing program 5 (id=5006): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)=0x2) 2.240488728s ago: executing program 4 (id=5007): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80800) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x4, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 2.134962319s ago: executing program 0 (id=5008): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) rt_sigsuspend(0x0, 0x0) 2.134180769s ago: executing program 1 (id=5009): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}, 0x40408c0) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000003c0), 0x1, 0x540, &(0x7f0000002140)="$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") 2.105087411s ago: executing program 0 (id=5010): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(0xffffffffffffffff, 0xc0406619, &(0x7f0000000080)={@id={0x2, 0x0, @a}}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x24, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_MCAST_FLOOD={0x5, 0x1b, 0x1}, @IFLA_BRPORT_ISOLATED={0x5}, @IFLA_BRPORT_BACKUP_PORT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 2.039841558s ago: executing program 4 (id=5011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$unix(0x1, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000680)='sched_switch\x00', r1}, 0x18) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x800, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) getsockname$packet(r2, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x38, 0x10, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x1114}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x100, 0xac}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0xa}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) 1.91563263s ago: executing program 4 (id=5012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf2501000000000000000b0000000006"], 0x28}, 0x1, 0x0, 0x0, 0x890}, 0x800) 1.824280829s ago: executing program 0 (id=5013): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x200000000000002b, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x25, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002ac0)={0x1a, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2008}, 0x80) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb6000) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) 1.706930721s ago: executing program 4 (id=5014): accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 882.363903ms ago: executing program 3 (id=5015): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000000)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xa, 0x9, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 847.992036ms ago: executing program 3 (id=5016): rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = gettid() rt_sigtimedwait(&(0x7f0000000240)={[0xffffffffffffffff]}, 0x0, 0x0, 0x8) tkill(r1, 0x12) 816.760889ms ago: executing program 0 (id=5017): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000001240)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000004c0)='sched_switch\x00', r0}, 0x18) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000440)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@noextend}]}}) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) 708.24981ms ago: executing program 3 (id=5018): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e53100406c256d000000b45c00010902240001000000000904000000000122050009"], 0x0) 0s ago: executing program 1 (id=5019): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) kernel console output (not intermixed with test programs): 76775.867:223): avc: denied { getopt } for pid=11544 comm="syz.1.3593" lport=39937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 120.177325][ T29] audit: type=1400 audit(1760176776.137:224): avc: denied { name_bind } for pid=11573 comm="syz.4.3606" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 120.255608][T11582] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.3610'. [ 120.461728][T11594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.470312][ T29] audit: type=1400 audit(1760176776.427:225): avc: denied { read write } for pid=11593 comm="syz.4.3616" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.493963][ T29] audit: type=1400 audit(1760176776.427:226): avc: denied { open } for pid=11593 comm="syz.4.3616" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.517407][ T29] audit: type=1400 audit(1760176776.427:227): avc: denied { ioctl } for pid=11593 comm="syz.4.3616" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 120.560205][T11594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.679496][T11596] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11596 comm=syz.0.3617 [ 120.922400][T11623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=11623 comm=syz.1.3630 [ 121.004260][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811e44a600: rx timeout, send abort [ 121.012747][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811e44a600: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 121.038412][ T29] audit: type=1400 audit(1760176777.007:228): avc: denied { read } for pid=2984 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 121.063543][ T29] audit: type=1400 audit(1760176777.007:229): avc: denied { search } for pid=2984 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 121.538297][T11699] 9pnet_fd: Insufficient options for proto=fd [ 121.584722][ T3395] IPVS: starting estimator thread 0... [ 121.687399][T11702] IPVS: using max 2256 ests per chain, 112800 per kthread [ 122.197258][T11753] 9pnet_fd: Insufficient options for proto=fd [ 122.833748][T11783] netlink: 2980 bytes leftover after parsing attributes in process `syz.1.3704'. [ 123.103946][T11803] 9pnet_virtio: no channels available for device syz [ 123.181723][T11814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3719'. [ 123.815425][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 123.815440][ T29] audit: type=1400 audit(1760176779.777:235): avc: denied { connect } for pid=11890 comm="syz.1.3753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.846497][ T29] audit: type=1400 audit(1760176779.787:236): avc: denied { setopt } for pid=11890 comm="syz.1.3753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 123.866511][ T29] audit: type=1400 audit(1760176779.787:237): avc: denied { write } for pid=11890 comm="syz.1.3753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 124.215923][T11951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.227212][T11951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.031196][ T29] audit: type=1400 audit(1760176780.997:238): avc: denied { bind } for pid=12008 comm="syz.4.3803" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 125.585787][T12043] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3820'. [ 125.596337][ T29] audit: type=1400 audit(1760176781.547:239): avc: denied { ioctl } for pid=12042 comm="syz.2.3820" path="socket:[38947]" dev="sockfs" ino=38947 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 126.671887][T12121] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.679192][T12121] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.758756][T12121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.771147][T12121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.088409][T12122] ip6_vti0 speed is unknown, defaulting to 1000 [ 127.088546][ T311] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.108372][T12122] ip6_vti0 speed is unknown, defaulting to 1000 [ 127.114971][T12122] ip6_vti0 speed is unknown, defaulting to 1000 [ 127.115023][ T311] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.130536][ T311] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.139758][ T311] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.220060][T12126] syzkaller0: entered promiscuous mode [ 127.225608][T12126] syzkaller0: entered allmulticast mode [ 127.233357][ T29] audit: type=1400 audit(1760176783.197:240): avc: denied { unmount } for pid=9701 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 127.290138][T12122] infiniband syz2: set down [ 127.294684][T12122] infiniband syz2: added ip6_vti0 [ 127.299962][ T3402] ip6_vti0 speed is unknown, defaulting to 1000 [ 127.317630][T12122] RDS/IB: syz2: added [ 127.321939][T12122] ip6_vti0 speed is unknown, defaulting to 1000 [ 127.384696][T12122] ip6_vti0 speed is unknown, defaulting to 1000 [ 127.494635][T12122] ip6_vti0 speed is unknown, defaulting to 1000 [ 127.560408][T12122] ip6_vti0 speed is unknown, defaulting to 1000 [ 127.643748][T12122] ip6_vti0 speed is unknown, defaulting to 1000 [ 127.752067][T12122] ip6_vti0 speed is unknown, defaulting to 1000 [ 127.921239][T12122] ip6_vti0 speed is unknown, defaulting to 1000 [ 128.011161][T12161] ip6_vti0 speed is unknown, defaulting to 1000 [ 128.117341][T12122] ip6_vti0 speed is unknown, defaulting to 1000 [ 128.217782][T12122] ip6_vti0 speed is unknown, defaulting to 1000 [ 128.237071][T12161] chnl_net:caif_netlink_parms(): no params data found [ 128.343119][T12122] ip6_vti0 speed is unknown, defaulting to 1000 [ 128.439411][T12161] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.446636][T12161] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.458025][ T29] audit: type=1400 audit(1760176784.427:241): avc: denied { read } for pid=12182 comm="syz.0.3881" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.467786][T12161] bridge_slave_0: entered allmulticast mode [ 128.481469][ T29] audit: type=1400 audit(1760176784.427:242): avc: denied { open } for pid=12182 comm="syz.0.3881" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.521824][T12161] bridge_slave_0: entered promiscuous mode [ 128.555292][T12161] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.562493][T12161] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.577997][ T29] audit: type=1400 audit(1760176784.517:243): avc: denied { ioctl } for pid=12182 comm="syz.0.3881" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 128.606437][T12161] bridge_slave_1: entered allmulticast mode [ 128.613769][T12161] bridge_slave_1: entered promiscuous mode [ 128.637711][T12161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.654195][T12161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.723799][T12161] team0: Port device team_slave_0 added [ 128.740739][T12161] team0: Port device team_slave_1 added [ 128.784454][T12161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.791613][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.817801][T12161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.833211][T12161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.840382][T12161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.866428][T12161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.909926][T12161] hsr_slave_0: entered promiscuous mode [ 128.916343][T12161] hsr_slave_1: entered promiscuous mode [ 128.927733][T12161] debugfs: 'hsr0' already exists in 'hsr' [ 128.933607][T12161] Cannot create hsr debugfs directory [ 129.129468][T12161] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 129.264785][ T29] audit: type=1400 audit(1760176785.227:244): avc: denied { map } for pid=12254 comm="syz.3.3909" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 129.289342][ T29] audit: type=1400 audit(1760176785.227:245): avc: denied { read write } for pid=12254 comm="syz.3.3909" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39397 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 129.318390][T12161] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 129.348029][T12161] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 129.368140][T12161] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 129.533572][T12272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.536996][T12161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.544617][T12272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.562613][T12161] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.574490][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.581650][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.607824][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.614967][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.642080][T12161] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.714744][T12161] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.889701][T12161] veth0_vlan: entered promiscuous mode [ 129.899650][T12161] veth1_vlan: entered promiscuous mode [ 129.926804][T12161] veth0_macvtap: entered promiscuous mode [ 129.941976][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3917'. [ 129.943608][T12161] veth1_macvtap: entered promiscuous mode [ 129.963127][T12161] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.975119][T12161] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.989931][ T311] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.999918][ T311] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.024030][ T311] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.053274][ T311] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.199948][ T29] audit: type=1400 audit(1760176787.167:246): avc: denied { lock } for pid=12407 comm="syz.3.3966" path="socket:[40078]" dev="sockfs" ino=40078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 131.933834][ T29] audit: type=1400 audit(1760176787.897:247): avc: denied { connect } for pid=12464 comm="syz.1.3992" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 131.995742][T12469] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.060413][T12469] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.181024][T12469] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.317680][ T1636] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.329333][ T57] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.345564][ T57] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.366872][ T57] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.737035][T12510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.746138][T12510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.082274][T12520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.091798][T12520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.846301][ T29] audit: type=1326 audit(1760176789.797:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.3.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 133.869986][ T29] audit: type=1326 audit(1760176789.797:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.3.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 133.893601][ T29] audit: type=1326 audit(1760176789.797:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.3.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 133.917254][ T29] audit: type=1326 audit(1760176789.807:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.3.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 133.940822][ T29] audit: type=1326 audit(1760176789.807:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.3.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 133.964373][ T29] audit: type=1326 audit(1760176789.807:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12545 comm="syz.3.4028" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f186bc40d5c code=0x7ffc0000 [ 134.208958][T12550] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4029'. [ 134.294434][T12556] ip6_vti0 speed is unknown, defaulting to 1000 [ 134.436311][T12567] loop5: detected capacity change from 0 to 1024 [ 134.443294][T12567] ======================================================= [ 134.443294][T12567] WARNING: The mand mount option has been deprecated and [ 134.443294][T12567] and is ignored by this kernel. Remove the mand [ 134.443294][T12567] option from the mount to silence this warning. [ 134.443294][T12567] ======================================================= [ 134.485258][T12567] EXT4-fs: Ignoring removed nobh option [ 134.491133][T12567] EXT4-fs: Ignoring removed bh option [ 134.500776][T12567] EXT4-fs (loop5): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 134.520019][T12567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.537919][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 134.537932][ T29] audit: type=1400 audit(1760176790.497:262): avc: denied { mount } for pid=12566 comm="syz.5.4035" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 134.565699][ T29] audit: type=1400 audit(1760176790.497:263): avc: denied { add_name } for pid=12566 comm="syz.5.4035" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 134.586572][ T29] audit: type=1400 audit(1760176790.497:264): avc: denied { create } for pid=12566 comm="syz.5.4035" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 134.607039][ T29] audit: type=1400 audit(1760176790.497:265): avc: denied { read write } for pid=12566 comm="syz.5.4035" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.629945][ T29] audit: type=1400 audit(1760176790.497:266): avc: denied { open } for pid=12566 comm="syz.5.4035" path="/15/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 134.714514][ T29] audit: type=1326 audit(1760176790.677:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 134.739656][T12161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.749856][ T29] audit: type=1326 audit(1760176790.697:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f186bc3d710 code=0x7ffc0000 [ 134.774008][ T29] audit: type=1326 audit(1760176790.697:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f186bc3d710 code=0x7ffc0000 [ 134.797737][ T29] audit: type=1326 audit(1760176790.697:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 134.821240][ T29] audit: type=1326 audit(1760176790.697:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12578 comm="syz.3.4039" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 135.776237][T12619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.787580][T12619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.061460][T12629] loop4: detected capacity change from 0 to 512 [ 136.069175][T12629] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 136.143037][T12629] EXT4-fs (loop4): 1 orphan inode deleted [ 136.149934][T12629] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.166119][T12629] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.613135][T12660] loop0: detected capacity change from 0 to 128 [ 137.676992][T10823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.123803][T12667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.160024][T12667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.465493][T12687] loop4: detected capacity change from 0 to 128 [ 139.145470][T12715] 9pnet_fd: Insufficient options for proto=fd [ 139.381734][T12729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.454593][T12729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.512990][T12734] wg2: entered promiscuous mode [ 139.517973][T12734] wg2: entered allmulticast mode [ 139.935700][T12754] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.963469][T12754] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.180132][T12771] loop1: detected capacity change from 0 to 128 [ 140.189081][T12771] EXT4-fs: Ignoring removed nobh option [ 140.202865][T12771] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 140.637870][T12771] ext4 filesystem being mounted at /273/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 140.710998][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 140.711015][ T29] audit: type=1400 audit(1760176796.677:281): avc: denied { create } for pid=12770 comm="syz.1.4118" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 140.783745][T10136] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.098477][ T31] Bluetooth: hci0: Frame reassembly failed (-90) [ 141.577026][ T29] audit: type=1400 audit(1760176797.537:282): avc: denied { bind } for pid=12796 comm="syz.1.4126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 141.597677][ T29] audit: type=1400 audit(1760176797.537:283): avc: denied { write } for pid=12796 comm="syz.1.4126" name="tcp6" dev="proc" ino=4026533610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 142.293191][T12811] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.303324][T12811] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.709564][ T29] audit: type=1400 audit(1760176798.677:284): avc: denied { connect } for pid=12825 comm="syz.4.4135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 142.745752][T12826] loop4: detected capacity change from 0 to 1024 [ 142.893970][T12826] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.918200][T10823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.007370][ T3608] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 144.228582][T12865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12865 comm=syz.0.4148 [ 144.404743][T12880] loop0: detected capacity change from 0 to 1024 [ 144.430273][T12880] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 144.440159][T12880] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 144.451722][T12880] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 144.470195][T12880] EXT4-fs error (device loop0): ext4_get_journal_inode:5808: inode #5: comm syz.0.4154: unexpected bad inode w/o EXT4_IGET_BAD [ 144.500015][T12880] EXT4-fs (loop0): no journal found [ 144.505381][T12880] EXT4-fs (loop0): can't get journal size [ 144.541254][T12880] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8840e11c, mo2=0102] [ 144.550317][T12880] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.811075][T12909] netlink: 'syz.0.4154': attribute type 3 has an invalid length. [ 144.819049][T12909] netlink: 'syz.0.4154': attribute type 3 has an invalid length. [ 145.281394][T10362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.329747][ T29] audit: type=1400 audit(1760176801.297:285): avc: denied { create } for pid=12928 comm="syz.3.4178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 145.491904][ T29] audit: type=1326 audit(1760176801.427:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.3.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 145.515480][ T29] audit: type=1326 audit(1760176801.427:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.3.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 145.538964][ T29] audit: type=1326 audit(1760176801.427:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.3.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f186bc40d5c code=0x7ffc0000 [ 145.562338][ T29] audit: type=1326 audit(1760176801.427:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.3.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f186bc40c94 code=0x7ffc0000 [ 145.585775][ T29] audit: type=1326 audit(1760176801.427:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12928 comm="syz.3.4178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f186bc40c94 code=0x7ffc0000 [ 146.032868][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 146.032917][ T29] audit: type=1400 audit(1760176801.997:296): avc: denied { write } for pid=12945 comm="syz.1.4184" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 146.811670][T12974] loop3: detected capacity change from 0 to 128 [ 147.930453][ T29] audit: type=1326 audit(1760176803.867:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12985 comm="syz.0.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 147.954098][ T29] audit: type=1326 audit(1760176803.867:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12985 comm="syz.0.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 147.977690][ T29] audit: type=1326 audit(1760176803.867:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12985 comm="syz.0.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fe5ea300d5c code=0x7ffc0000 [ 148.001265][ T29] audit: type=1326 audit(1760176803.867:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12985 comm="syz.0.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe5ea300c94 code=0x7ffc0000 [ 148.024761][ T29] audit: type=1326 audit(1760176803.867:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12985 comm="syz.0.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fe5ea300c94 code=0x7ffc0000 [ 148.048189][ T29] audit: type=1326 audit(1760176803.867:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12985 comm="syz.0.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 148.071846][ T29] audit: type=1326 audit(1760176803.867:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12985 comm="syz.0.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 148.095471][ T29] audit: type=1326 audit(1760176803.867:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12985 comm="syz.0.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 148.119022][ T29] audit: type=1326 audit(1760176803.877:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12985 comm="syz.0.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 148.275242][T13000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4204'. [ 148.302273][T13004] 9pnet_fd: Insufficient options for proto=fd [ 149.131048][T13041] loop3: detected capacity change from 0 to 128 [ 149.144348][T13026] loop1: detected capacity change from 0 to 128 [ 149.447834][T13044] syzkaller0: entered promiscuous mode [ 149.453356][T13044] syzkaller0: entered allmulticast mode [ 149.473959][T13049] 9pnet_fd: Insufficient options for proto=fd [ 150.297435][T13067] loop4: detected capacity change from 0 to 128 [ 153.166994][T13099] capability: warning: `syz.1.4241' uses deprecated v2 capabilities in a way that may be insecure [ 153.990855][T13106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4244'. [ 154.604975][T13117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4249'. [ 154.778709][T13142] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4260'. [ 154.902707][T13147] loop0: detected capacity change from 0 to 128 [ 155.636086][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4269'. [ 156.555209][T13140] ip6_vti0 speed is unknown, defaulting to 1000 [ 156.562714][T13174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4271'. [ 156.798389][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b5d5400: rx timeout, send abort [ 156.806909][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b5d5400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 158.701680][T13209] ip6_vti0 speed is unknown, defaulting to 1000 [ 159.164793][ T311] syzkaller0: tun_net_xmit 76 [ 159.169881][ T311] syzkaller0: tun_net_xmit 48 [ 159.187548][ T3395] syzkaller0: tun_net_xmit 76 [ 159.240252][ T3395] syzkaller0: tun_net_xmit 76 [ 160.299298][T13240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.324857][T13240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.507880][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811723a000: rx timeout, send abort [ 160.516173][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811723a000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 162.427434][T13246] loop0: detected capacity change from 0 to 512 [ 162.451773][T13246] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 162.460811][T13246] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 162.474363][T13246] EXT4-fs (loop0): 1 truncate cleaned up [ 162.481989][T13246] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.578954][T13274] loop4: detected capacity change from 0 to 512 [ 163.612313][T13274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.677179][T13274] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.373677][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 164.373696][ T29] audit: type=1400 audit(1760176819.957:307): avc: denied { append } for pid=13273 comm="syz.4.4305" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 164.476720][T10362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.491753][T10823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.595779][T13300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.621659][T13300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.481894][T13335] loop4: detected capacity change from 0 to 128 [ 168.775356][T13337] loop5: detected capacity change from 0 to 8192 [ 169.681684][ T31] Bluetooth: hci0: Frame reassembly failed (-90) [ 170.380287][T13370] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.440951][T13370] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.521910][T13370] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.543526][T13378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.555063][T13378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.600628][T13370] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.685511][ T57] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.702199][ T57] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.714851][ T57] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.724596][ T57] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.839605][T13384] vlan2: entered allmulticast mode [ 170.920300][T13386] loop5: detected capacity change from 0 to 128 [ 171.553565][ T29] audit: type=1400 audit(1760176827.517:308): avc: denied { write } for pid=13390 comm="syz.3.4347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 171.573777][ T29] audit: type=1400 audit(1760176827.517:309): avc: denied { nlmsg_write } for pid=13390 comm="syz.3.4347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 172.264859][ T3608] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 172.341340][T13402] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4350'. [ 172.950476][T13416] loop3: detected capacity change from 0 to 128 [ 176.845290][T13443] loop5: detected capacity change from 0 to 128 [ 176.911712][T13447] loop0: detected capacity change from 0 to 128 [ 177.213060][T13444] loop1: detected capacity change from 0 to 512 [ 177.518098][T13444] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.4365: iget: bad i_size value: 38620345925642 [ 178.227356][T13444] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.4365: couldn't read orphan inode 15 (err -117) [ 178.261558][T13444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 178.764840][T13456] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4365: bg 0: block 5: invalid block bitmap [ 178.832477][T13456] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 760 with error 28 [ 178.844922][T13456] EXT4-fs (loop1): This should not happen!! Data will be lost [ 178.844922][T13456] [ 178.854727][T13456] EXT4-fs (loop1): Total free blocks count 0 [ 178.860921][T13456] EXT4-fs (loop1): Free/Dirty block details [ 178.866836][T13456] EXT4-fs (loop1): free_blocks=0 [ 178.871892][T13456] EXT4-fs (loop1): dirty_blocks=764 [ 178.877097][T13456] EXT4-fs (loop1): Block reservation details [ 178.883158][T13456] EXT4-fs (loop1): i_reserved_data_blocks=764 [ 178.936703][T13464] loop0: detected capacity change from 0 to 4096 [ 178.967335][ T29] audit: type=1326 audit(1760176834.917:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13466 comm="syz.5.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58aa8eec9 code=0x7ffc0000 [ 178.990931][ T29] audit: type=1326 audit(1760176834.917:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13466 comm="syz.5.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58aa8eec9 code=0x7ffc0000 [ 178.997917][T13464] EXT4-fs: Ignoring removed mblk_io_submit option [ 179.014659][ T29] audit: type=1326 audit(1760176834.917:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13466 comm="syz.5.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7fd58aa8eec9 code=0x7ffc0000 [ 179.044635][ T29] audit: type=1326 audit(1760176834.917:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13466 comm="syz.5.4372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58aa8eec9 code=0x7ffc0000 [ 179.088980][T13464] EXT4-fs: test_dummy_encryption option not supported [ 179.119756][ T57] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 760 with max blocks 4 with error 28 [ 179.198754][T13464] loop0: detected capacity change from 0 to 512 [ 179.205670][T13464] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 179.217230][T13464] EXT4-fs (loop0): 1 truncate cleaned up [ 179.223481][T13464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 179.273214][T13464] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.0.4371: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 179.288013][ T29] audit: type=1400 audit(1760176835.237:314): avc: denied { remove_name } for pid=13463 comm="syz.0.4371" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.293828][T13464] EXT4-fs (loop0): Remounting filesystem read-only [ 179.316207][ T29] audit: type=1400 audit(1760176835.237:315): avc: denied { rename } for pid=13463 comm="syz.0.4371" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 179.322713][T13464] EXT4-fs warning (device loop0): ext4_rename_delete:3731: inode #2: comm syz.0.4371: Deleting old file: nlink 5, error=-117 [ 179.358007][ T29] audit: type=1400 audit(1760176835.237:316): avc: denied { rmdir } for pid=13463 comm="syz.0.4371" name="bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 179.418323][T13464] xt_TCPMSS: Only works on TCP SYN packets [ 179.596643][ T29] audit: type=1400 audit(1760176835.357:317): avc: denied { add_name } for pid=13463 comm="syz.0.4371" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 180.154244][T13492] loop3: detected capacity change from 0 to 128 [ 180.274405][T10362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 182.545522][ T29] audit: type=1400 audit(1760176838.057:318): avc: denied { read } for pid=13516 comm="syz.1.4389" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 182.799121][T13529] loop0: detected capacity change from 0 to 4096 [ 182.805992][T13529] EXT4-fs: Ignoring removed mblk_io_submit option [ 182.812788][T13529] EXT4-fs: test_dummy_encryption option not supported [ 182.894725][ T311] bridge_slave_1: left allmulticast mode [ 182.900497][ T311] bridge_slave_1: left promiscuous mode [ 182.906187][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.932782][ T311] bridge_slave_0: left allmulticast mode [ 182.938726][ T311] bridge_slave_0: left promiscuous mode [ 182.944455][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.970079][ T311] veth0_to_team: left allmulticast mode [ 182.975740][ T311] veth0_to_team: left promiscuous mode [ 182.981455][T13538] loop1: detected capacity change from 0 to 512 [ 182.981536][ T311] Ÿë: port 1(veth0_to_team) entered disabled state [ 183.005062][T13538] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 183.016832][T13538] EXT4-fs (loop1): invalid journal inode [ 183.022973][T13538] EXT4-fs (loop1): can't get journal size [ 183.082050][T13541] loop0: detected capacity change from 0 to 8192 [ 183.104686][T13538] EXT4-fs (loop1): 1 truncate cleaned up [ 183.128645][T13538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 183.787621][ T29] audit: type=1400 audit(1760176839.747:319): avc: denied { sqpoll } for pid=13537 comm="syz.1.4396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 184.066400][ T29] audit: type=1400 audit(1760176839.827:320): avc: denied { write } for pid=13537 comm="syz.1.4396" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 184.089301][ T29] audit: type=1400 audit(1760176839.857:321): avc: denied { map } for pid=13537 comm="syz.1.4396" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 184.113561][ T29] audit: type=1400 audit(1760176839.857:322): avc: denied { execute } for pid=13537 comm="syz.1.4396" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 184.138072][ T29] audit: type=1400 audit(1760176839.867:323): avc: denied { create } for pid=13537 comm="syz.1.4396" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 184.283212][T13567] loop4: detected capacity change from 0 to 4096 [ 184.291782][T13567] EXT4-fs: Ignoring removed mblk_io_submit option [ 184.302684][T13567] EXT4-fs: test_dummy_encryption option not supported [ 184.322037][T13567] loop4: detected capacity change from 0 to 512 [ 184.328900][T13567] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 184.339932][T13567] EXT4-fs (loop4): 1 truncate cleaned up [ 184.346110][T13567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.360356][T13567] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.4.4405: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 184.381009][T13567] EXT4-fs (loop4): Remounting filesystem read-only [ 184.387637][T13567] EXT4-fs warning (device loop4): ext4_rename_delete:3731: inode #2: comm syz.4.4405: Deleting old file: nlink 5, error=-117 [ 184.420755][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.435527][T10823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.454087][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 184.491954][ T311] bond0 (unregistering): Released all slaves [ 184.645438][T13549] netlink: 'syz.1.4396': attribute type 3 has an invalid length. [ 184.653544][T13549] netlink: 'syz.1.4396': attribute type 3 has an invalid length. [ 184.760385][T10136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.378159][ T311] hsr_slave_0: left promiscuous mode [ 185.410588][ T311] hsr_slave_1: left promiscuous mode [ 185.438788][ T311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.214198][T13603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13603 comm=syz.4.4416 [ 186.385800][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.393270][ T311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.406087][ T311] veth1_macvtap: left promiscuous mode [ 186.478334][ T311] veth0_macvtap: left promiscuous mode [ 186.536045][ T311] veth1_vlan: left promiscuous mode [ 186.575376][ T311] veth0_vlan: left promiscuous mode [ 186.849505][ T311] team0 (unregistering): Port device team_slave_1 removed [ 186.872233][ T311] team0 (unregistering): Port device team_slave_0 removed [ 186.950988][ T311] team0 (unregistering): Port device batadv0 removed [ 187.119372][T13627] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 188.139749][ T311] bridge_slave_1: left allmulticast mode [ 188.145460][ T311] bridge_slave_1: left promiscuous mode [ 188.151206][ T311] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.278078][ T311] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.789608][T13659] loop3: detected capacity change from 0 to 512 [ 188.839156][T13659] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 188.914003][T13662] loop1: detected capacity change from 0 to 512 [ 188.921142][T13662] ext3: Unknown parameter 'subj_type' [ 189.087791][T13659] EXT4-fs (loop3): 1 truncate cleaned up [ 189.145176][T13659] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 189.301129][T13659] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.4433: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 189.361998][T13659] EXT4-fs (loop3): Remounting filesystem read-only [ 189.368637][T13659] EXT4-fs warning (device loop3): ext4_rename_delete:3731: inode #2: comm syz.3.4433: Deleting old file: nlink 5, error=-117 [ 189.483008][ T311] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.054421][ T311] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.073136][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.089676][ T311] bond0 (unregistering): Released all slaves [ 190.249955][ T311] hsr_slave_0: left promiscuous mode [ 190.261123][ T311] hsr_slave_1: left promiscuous mode [ 190.280175][ T311] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.304906][ T311] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.312489][ T311] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.357508][ T311] veth1_macvtap: left promiscuous mode [ 190.381436][ T311] veth0_macvtap: left promiscuous mode [ 190.417376][ T311] veth1_vlan: left promiscuous mode [ 190.439749][ T311] veth0_vlan: left promiscuous mode [ 190.504963][T13690] loop5: detected capacity change from 0 to 8192 [ 191.450824][T13703] loop1: detected capacity change from 0 to 512 [ 191.506743][T13703] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 191.577711][T13703] EXT4-fs (loop1): 1 truncate cleaned up [ 191.586546][T13703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.600595][ T311] team0 (unregistering): Port device team_slave_1 removed [ 191.611400][ T311] team0 (unregistering): Port device team_slave_0 removed [ 191.620121][T13703] EXT4-fs error (device loop1): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.1.4449: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 191.659904][ T311] team0 (unregistering): Port device batadv0 removed [ 191.667010][T13703] EXT4-fs (loop1): Remounting filesystem read-only [ 191.673895][T13703] EXT4-fs warning (device loop1): ext4_rename_delete:3731: inode #2: comm syz.1.4449: Deleting old file: nlink 5, error=-117 [ 191.818309][T10136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.829373][ T29] audit: type=1400 audit(1760176847.777:324): avc: denied { read write } for pid=13706 comm="syz.0.4450" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 191.853469][ T29] audit: type=1400 audit(1760176847.777:325): avc: denied { open } for pid=13706 comm="syz.0.4450" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 191.997341][ T29] audit: type=1400 audit(1760176847.867:326): avc: denied { write } for pid=13712 comm="syz.5.4451" path="socket:[44806]" dev="sockfs" ino=44806 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 192.084200][T13709] loop0: detected capacity change from 0 to 8192 [ 192.093934][T13709] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 192.223442][T13707] loop0: detected capacity change from 0 to 8192 [ 192.269670][T13707] loop0: p1 p2 p4 < > [ 192.273878][T13707] loop0: partition table partially beyond EOD, truncated [ 192.342409][T13707] loop0: p1 start 16777216 is beyond EOD, truncated [ 192.349206][T13707] loop0: p2 size 515840 extends beyond EOD, truncated [ 192.362811][T13707] loop0: p4 start 16777216 is beyond EOD, truncated [ 192.391257][T13726] loop3: detected capacity change from 0 to 4096 [ 192.398236][T13726] EXT4-fs: Ignoring removed mblk_io_submit option [ 192.405248][T13726] EXT4-fs: test_dummy_encryption option not supported [ 192.426768][T13726] loop3: detected capacity change from 0 to 512 [ 192.440374][T13726] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 192.455524][T13726] EXT4-fs (loop3): 1 truncate cleaned up [ 192.461775][T13726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.480136][T13726] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.4457: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 192.504750][T13726] EXT4-fs (loop3): Remounting filesystem read-only [ 192.511426][T13726] EXT4-fs warning (device loop3): ext4_rename_delete:3731: inode #2: comm syz.3.4457: Deleting old file: nlink 4, error=-117 [ 192.562521][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.794716][T13051] udevd[13051]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 193.093925][T13195] bridge_slave_1: left allmulticast mode [ 193.099668][T13195] bridge_slave_1: left promiscuous mode [ 193.105418][T13195] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.148444][T13195] bridge_slave_0: left promiscuous mode [ 193.154200][T13195] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.343303][ T29] audit: type=1400 audit(1760176849.267:327): avc: denied { mount } for pid=13742 comm="syz.3.4463" name="/" dev="ramfs" ino=43534 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 193.366048][ T29] audit: type=1400 audit(1760176849.267:328): avc: denied { setopt } for pid=13742 comm="syz.3.4463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 193.438291][T13732] loop0: detected capacity change from 0 to 256 [ 193.887651][T13195] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 193.962005][T13195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.169795][T13195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.200249][T13195] bond0 (unregistering): Released all slaves [ 195.190239][T13782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.538223][T13782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.574176][T13195] hsr_slave_0: left promiscuous mode [ 195.587998][T13195] hsr_slave_1: left promiscuous mode [ 195.806516][T13195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.814287][T13195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.856290][T13790] loop4: detected capacity change from 0 to 512 [ 195.865602][T13195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.873205][T13195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.921773][T13195] veth1_macvtap: left promiscuous mode [ 195.931555][T13195] veth0_macvtap: left promiscuous mode [ 195.943448][T13195] veth1_vlan: left promiscuous mode [ 195.955285][T13195] veth0_vlan: left promiscuous mode [ 195.988710][T13790] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.017161][T13790] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.667590][T13195] team0 (unregistering): Port device team_slave_1 removed [ 196.734163][T13195] team0 (unregistering): Port device team_slave_0 removed [ 196.776522][T10823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.863721][T13809] loop5: detected capacity change from 0 to 1024 [ 196.870609][T13809] EXT4-fs: Ignoring removed orlov option [ 196.884854][T13809] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.897295][T13809] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.912073][T13195] team0 (unregistering): Port device batadv0 removed [ 196.946089][T13809] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.4485: lblock 3 mapped to illegal pblock 3 (length 1) [ 196.965774][T13809] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 196.978801][T13809] EXT4-fs (loop5): This should not happen!! Data will be lost [ 196.978801][T13809] [ 196.991073][T13809] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.4485: lblock 3 mapped to illegal pblock 3 (length 1) [ 197.007311][T13809] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.4485: lblock 3 mapped to illegal pblock 3 (length 1) [ 197.022310][T13809] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.4485: lblock 3 mapped to illegal pblock 3 (length 1) [ 197.036749][T13809] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.4485: lblock 3 mapped to illegal pblock 3 (length 1) [ 197.053293][T13809] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.4485: lblock 3 mapped to illegal pblock 3 (length 1) [ 197.062912][ T29] audit: type=1400 audit(1760176852.957:329): avc: denied { map } for pid=13808 comm="syz.5.4485" path="/117/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 197.067823][T13809] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.4485: lblock 3 mapped to illegal pblock 3 (length 1) [ 197.090408][ T29] audit: type=1400 audit(1760176852.957:330): avc: denied { execute } for pid=13808 comm="syz.5.4485" path="/117/file0/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 197.130109][T13809] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.4485: lblock 3 mapped to illegal pblock 3 (length 1) [ 197.144595][T13809] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.4485: lblock 3 mapped to illegal pblock 3 (length 1) [ 197.159374][T13809] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #15: block 3: comm syz.5.4485: lblock 3 mapped to illegal pblock 3 (length 1) [ 197.641398][T13195] bridge_slave_1: left allmulticast mode [ 197.647387][T13195] bridge_slave_1: left promiscuous mode [ 197.653179][T13195] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.671565][T13834] loop0: detected capacity change from 0 to 512 [ 197.702334][T13195] bridge_slave_0: left allmulticast mode [ 197.708173][T13195] bridge_slave_0: left promiscuous mode [ 197.710357][T13834] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 197.714116][T13195] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.767103][T12161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 197.847479][T13834] EXT4-fs (loop0): 1 truncate cleaned up [ 197.853485][T13834] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 197.885658][T13841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.909950][T13841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.933885][T10362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.959888][T13195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.973811][T13195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.038944][T13847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.047666][T13847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.063843][ T29] audit: type=1400 audit(1760176853.997:331): avc: denied { read write } for pid=13837 comm="syz.1.4492" name="uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 198.087522][ T29] audit: type=1400 audit(1760176853.997:332): avc: denied { open } for pid=13837 comm="syz.1.4492" path="/dev/uhid" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 198.135709][T13195] bond0 (unregistering): Released all slaves [ 198.197313][T13835] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4489'. [ 198.206328][T13835] tipc: Started in network mode [ 198.211653][T13835] tipc: Node identity 7, cluster identity 4711 [ 198.217949][T13835] tipc: Node number set to 7 [ 198.480879][T13195] hsr_slave_0: left promiscuous mode [ 198.524870][T13195] hsr_slave_1: left promiscuous mode [ 198.546764][T13195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.554269][T13195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.691824][T13195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.699495][T13195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.830475][T13195] veth1_macvtap: left promiscuous mode [ 198.836262][T13195] veth0_macvtap: left promiscuous mode [ 198.854020][T13195] veth1_vlan: left promiscuous mode [ 198.859830][T13195] veth0_vlan: left promiscuous mode [ 198.957830][T13870] loop3: detected capacity change from 0 to 128 [ 198.986234][T13195] team0 (unregistering): Port device team_slave_1 removed [ 199.195854][T13195] team0 (unregistering): Port device C removed [ 199.234493][T13195] team0 (unregistering): Port device batadv0 removed [ 199.871841][T13880] loop5: detected capacity change from 0 to 512 [ 200.994166][T13891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4509'. [ 201.003198][T13891] tipc: Started in network mode [ 201.008210][T13891] tipc: Node identity 7, cluster identity 4711 [ 201.014393][T13891] tipc: Node number set to 7 [ 201.747752][T13896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.758854][T13880] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.780786][T13896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.823128][T13880] ext4 filesystem being mounted at /122/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.989193][T13195] bridge_slave_1: left allmulticast mode [ 201.994925][T13195] bridge_slave_1: left promiscuous mode [ 202.000850][T13195] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.369816][T13195] bridge_slave_0: left allmulticast mode [ 202.375508][T13195] bridge_slave_0: left promiscuous mode [ 202.381425][T13195] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.518615][T12161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.471107][T13929] loop0: detected capacity change from 0 to 8192 [ 205.277830][T13934] loop5: detected capacity change from 0 to 4096 [ 205.284593][T13934] EXT4-fs: Ignoring removed mblk_io_submit option [ 205.291284][T13934] EXT4-fs: test_dummy_encryption option not supported [ 205.308127][T13934] loop5: detected capacity change from 0 to 512 [ 205.351861][T13934] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 205.366229][T13195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.399308][T13934] EXT4-fs (loop5): 1 truncate cleaned up [ 205.405950][T13934] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.420370][T13195] bond0 (unregistering): Released all slaves [ 205.566391][T13929] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 205.574172][T13929] FAT-fs (loop0): Filesystem has been set read-only [ 205.656319][T13934] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.5.4521: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 205.689391][T13940] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4522'. [ 205.698536][T13940] tipc: Started in network mode [ 205.704003][T13940] tipc: Node identity 7, cluster identity 4711 [ 205.710298][T13940] tipc: Node number set to 7 [ 205.787925][T13934] EXT4-fs (loop5): Remounting filesystem read-only [ 205.794680][T13934] EXT4-fs warning (device loop5): ext4_rename_delete:3731: inode #2: comm syz.5.4521: Deleting old file: nlink 5, error=-117 [ 205.829410][T12161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.848111][ T29] audit: type=1326 audit(1760176861.817:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13950 comm="syz.1.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 205.871986][T13195] hsr_slave_0: left promiscuous mode [ 205.877812][T13949] loop3: detected capacity change from 0 to 512 [ 205.880543][ T29] audit: type=1326 audit(1760176861.817:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13950 comm="syz.1.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 205.907721][ T29] audit: type=1326 audit(1760176861.817:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13950 comm="syz.1.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 205.931235][ T29] audit: type=1326 audit(1760176861.817:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13950 comm="syz.1.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 205.954673][ T29] audit: type=1326 audit(1760176861.817:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13950 comm="syz.1.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 205.978154][ T29] audit: type=1326 audit(1760176861.817:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13950 comm="syz.1.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 206.001786][ T29] audit: type=1326 audit(1760176861.817:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13950 comm="syz.1.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 206.025413][ T29] audit: type=1326 audit(1760176861.817:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13950 comm="syz.1.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 206.049074][ T29] audit: type=1326 audit(1760176861.817:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13950 comm="syz.1.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 206.072672][ T29] audit: type=1326 audit(1760176861.817:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13950 comm="syz.1.4529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 206.097382][T13195] hsr_slave_1: left promiscuous mode [ 206.103535][T13195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.111727][T13195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.119393][T13195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.126868][T13195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.156905][T13195] veth1_macvtap: left promiscuous mode [ 206.163967][T13949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 206.176978][T13949] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.189003][T13195] veth0_macvtap: left promiscuous mode [ 206.196627][T13195] veth1_vlan: left promiscuous mode [ 206.202173][T13195] veth0_vlan: left promiscuous mode [ 206.256445][T13195] team0 (unregistering): Port device vlan1 removed [ 206.265373][T13195] team0 (unregistering): Port device vlan0 removed [ 206.289441][T13195] team0 (unregistering): Port device team_slave_1 removed [ 206.315652][T13195] team0 (unregistering): Port device team_slave_0 removed [ 206.339129][T13195] team0 (unregistering): Port device batadv0 removed [ 206.835184][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.322583][T13988] loop3: detected capacity change from 0 to 128 [ 209.410081][T13993] loop5: detected capacity change from 0 to 128 [ 209.419319][T13993] EXT4-fs: Ignoring removed nobh option [ 209.448118][T13993] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 209.928108][T13993] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 209.977783][T14000] loop1: detected capacity change from 0 to 4096 [ 210.009488][T14000] EXT4-fs: Ignoring removed mblk_io_submit option [ 210.053644][T14000] EXT4-fs: test_dummy_encryption option not supported [ 210.120141][T12161] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 210.241914][T14006] loop1: detected capacity change from 0 to 512 [ 210.281427][T14006] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.457839][T14006] ext4 filesystem being mounted at /359/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.143358][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 211.143373][ T29] audit: type=1326 audit(1760176867.097:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14007 comm="syz.4.4544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd783d7eec9 code=0x7ffc0000 [ 211.228140][T14002] loop0: detected capacity change from 0 to 256 [ 211.708381][T10136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.174282][T14042] loop3: detected capacity change from 0 to 4096 [ 212.192637][T14042] EXT4-fs: Ignoring removed mblk_io_submit option [ 212.211489][T14042] EXT4-fs: test_dummy_encryption option not supported [ 212.247758][T14045] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4554'. [ 212.273287][T14042] loop3: detected capacity change from 0 to 512 [ 212.423286][T14042] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 212.477737][T14050] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14050 comm=syz.4.4555 [ 212.569135][T14042] EXT4-fs (loop3): 1 truncate cleaned up [ 212.575908][T14042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.722407][T14042] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.4553: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 212.743597][T14042] EXT4-fs (loop3): Remounting filesystem read-only [ 212.750177][T14042] EXT4-fs warning (device loop3): ext4_rename_delete:3731: inode #2: comm syz.3.4553: Deleting old file: nlink 5, error=-117 [ 212.787864][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.349180][T14059] loop4: detected capacity change from 0 to 128 [ 215.545642][T14090] loop4: detected capacity change from 0 to 512 [ 215.584069][T14090] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 216.128112][T14105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.136801][T14105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.314474][T14115] tipc: Enabled bearer , priority 10 [ 217.339894][ T29] audit: type=1400 audit(1760176873.297:386): avc: denied { bind } for pid=14116 comm="syz.4.4579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 217.542208][T14122] loop4: detected capacity change from 0 to 128 [ 217.594028][T14124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4582'. [ 217.627042][T14124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4582'. [ 217.690563][T14124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4582'. [ 217.724622][T14135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.733886][T14135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.859448][T14138] loop5: detected capacity change from 0 to 512 [ 217.924512][T14138] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.938989][T14138] ext4 filesystem being mounted at /135/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.752005][T12161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.944919][T14150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14150 comm=syz.5.4588 [ 219.646798][T14152] loop3: detected capacity change from 0 to 128 [ 220.653111][T14156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4591'. [ 220.662171][T14156] tipc: Started in network mode [ 220.667033][T14156] tipc: Node identity 7, cluster identity 4711 [ 220.673244][T14156] tipc: Node number set to 7 [ 220.913095][T14171] loop4: detected capacity change from 0 to 8192 [ 221.227563][T14179] loop5: detected capacity change from 0 to 128 [ 221.303055][T14183] loop3: detected capacity change from 0 to 512 [ 221.432392][T14183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.501198][T14183] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.679724][T14199] loop0: detected capacity change from 0 to 128 [ 221.701272][T14197] loop5: detected capacity change from 0 to 256 [ 222.076094][T14202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4606'. [ 222.085249][T14202] tipc: Started in network mode [ 222.090335][T14202] tipc: Node identity 7, cluster identity 4711 [ 222.096503][T14202] tipc: Node number set to 7 [ 222.182713][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.370496][T14204] loop4: detected capacity change from 0 to 512 [ 222.539627][T14204] EXT4-fs: inline encryption not supported [ 222.692448][T14212] loop5: detected capacity change from 0 to 512 [ 222.711040][T14212] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 222.724708][T14204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.758834][T14212] EXT4-fs (loop5): 1 truncate cleaned up [ 222.772522][T14204] ext4 filesystem being mounted at /226/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 222.807618][T14212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.838519][T14212] EXT4-fs error (device loop5): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.5.4609: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 222.997706][T14212] EXT4-fs (loop5): Remounting filesystem read-only [ 223.004279][T14212] EXT4-fs warning (device loop5): ext4_rename_delete:3731: inode #2: comm syz.5.4609: Deleting old file: nlink 4, error=-117 [ 223.032346][T12161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.041104][T10823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.059324][T14226] loop5: detected capacity change from 0 to 512 [ 224.081790][T14226] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 224.102578][T14226] EXT4-fs (loop5): invalid journal inode [ 224.129804][T14233] loop0: detected capacity change from 0 to 256 [ 224.136249][T14226] EXT4-fs (loop5): can't get journal size [ 224.169051][T14226] EXT4-fs (loop5): 1 truncate cleaned up [ 224.202629][T14226] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.212778][T14237] loop4: detected capacity change from 0 to 8192 [ 224.243630][T14242] loop1: detected capacity change from 0 to 512 [ 224.282847][ T29] audit: type=1400 audit(1760176880.237:387): avc: denied { mounton } for pid=14241 comm="syz.1.4620" path="/373/file0" dev="tmpfs" ino=1910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 224.329417][T14242] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.349122][T14242] ext4 filesystem being mounted at /373/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.463664][T14242] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.179202][T14254] loop1: detected capacity change from 0 to 512 [ 226.005946][T14243] netlink: 'syz.5.4611': attribute type 3 has an invalid length. [ 226.014581][T14254] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.4620: bg 0: block 393: padding at end of block bitmap is not set [ 226.029202][T14254] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 226.039432][T14254] EXT4-fs (loop1): 2 truncates cleaned up [ 226.045611][T14254] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.060602][T14254] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.185078][T14243] netlink: 'syz.5.4611': attribute type 3 has an invalid length. [ 226.447560][T14271] loop0: detected capacity change from 0 to 128 [ 227.079713][T12161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.465506][T14288] loop1: detected capacity change from 0 to 512 [ 228.888836][T14296] loop4: detected capacity change from 0 to 512 [ 228.895496][T14296] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 229.365929][ T29] audit: type=1326 audit(1760176885.327:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 230.523019][T14288] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1. [ 230.886469][ T29] audit: type=1326 audit(1760176885.327:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 230.910061][ T29] audit: type=1326 audit(1760176885.847:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 230.933791][ T29] audit: type=1326 audit(1760176885.847:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 230.957363][ T29] audit: type=1326 audit(1760176885.847:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 230.980801][ T29] audit: type=1326 audit(1760176885.847:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 231.004261][ T29] audit: type=1326 audit(1760176885.847:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 231.027791][ T29] audit: type=1326 audit(1760176885.847:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 231.051289][ T29] audit: type=1326 audit(1760176885.847:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 231.074748][ T29] audit: type=1326 audit(1760176885.847:397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14299 comm="syz.0.4638" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 231.726653][T14325] loop3: detected capacity change from 0 to 512 [ 231.800522][T14325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.913656][T14325] ext4 filesystem being mounted at /304/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.949606][T14330] loop4: detected capacity change from 0 to 128 [ 232.150391][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.351863][T14362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.361410][T14362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.390943][T14363] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.468824][T14363] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.529015][T14363] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.599172][T14363] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.644159][ T3464] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.655887][ T3464] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.667301][ T3464] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.679935][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.712205][T14367] loop5: detected capacity change from 0 to 512 [ 233.744188][T14367] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.767444][T14367] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.840571][T14378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.850317][T14378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.066152][T12161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.111923][T14387] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4666'. [ 235.272597][T14399] loop0: detected capacity change from 0 to 512 [ 235.588706][T14399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 236.016594][T14399] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.055762][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 236.055807][ T29] audit: type=1400 audit(1760176892.007:418): avc: denied { watch watch_reads } for pid=14408 comm="syz.3.4672" path="/311" dev="tmpfs" ino=1609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 236.246644][T14411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.255199][T14411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.774768][ T29] audit: type=1326 audit(1760176892.627:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14412 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 236.798229][ T29] audit: type=1326 audit(1760176892.627:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14412 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 236.821808][ T29] audit: type=1326 audit(1760176892.627:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14412 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 236.845372][ T29] audit: type=1326 audit(1760176892.627:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14412 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 236.869019][ T29] audit: type=1326 audit(1760176892.627:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14412 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 236.892598][ T29] audit: type=1326 audit(1760176892.627:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14412 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 236.916041][ T29] audit: type=1326 audit(1760176892.627:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14412 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 236.939442][ T29] audit: type=1326 audit(1760176892.627:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14412 comm="syz.3.4673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 237.430500][T10362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.456511][T14425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14425 comm=syz.3.4678 [ 237.478428][T14427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4677'. [ 237.485063][T14423] loop1: detected capacity change from 0 to 512 [ 237.514733][T14429] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4679'. [ 237.560770][T14423] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 237.664360][T14423] EXT4-fs (loop1): 1 truncate cleaned up [ 237.671967][T14423] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.699344][T10136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.123326][ T29] audit: type=1326 audit(1760176894.087:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14456 comm="syz.3.4688" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 238.864624][T14465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4692'. [ 239.312209][T14487] loop3: detected capacity change from 0 to 256 [ 239.864843][T14503] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4707'. [ 240.866374][T14536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4719'. [ 241.248135][T14541] loop0: detected capacity change from 0 to 512 [ 241.526904][T14541] EXT4-fs (loop0): orphan cleanup on readonly fs [ 241.533329][T14541] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 241.574396][T14541] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 241.589130][T14541] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.4721: attempt to clear invalid blocks 2 len 1 [ 241.603608][T14541] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4721: invalid indirect mapped block 1819239214 (level 0) [ 241.619924][T14541] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4721: invalid indirect mapped block 1819239214 (level 1) [ 241.634428][T14541] EXT4-fs (loop0): 1 truncate cleaned up [ 241.640645][T14541] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 241.657055][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 241.657072][ T29] audit: type=1400 audit(1760176897.617:524): avc: denied { remount } for pid=14540 comm="syz.0.4721" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 241.693784][T14541] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 241.706488][T14541] EXT4-fs error (device loop0): __ext4_remount:6748: comm syz.0.4721: Abort forced by user [ 241.717941][T14541] EXT4-fs (loop0): Remounting filesystem read-only [ 241.724488][T14541] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 241.922402][T14558] loop5: detected capacity change from 0 to 256 [ 242.108564][T10362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.247546][ T29] audit: type=1326 audit(1760176898.217:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 242.271185][ T29] audit: type=1326 audit(1760176898.217:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 242.305471][ T29] audit: type=1326 audit(1760176898.247:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 242.329030][ T29] audit: type=1326 audit(1760176898.247:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 242.352582][ T29] audit: type=1326 audit(1760176898.247:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 242.376230][ T29] audit: type=1326 audit(1760176898.247:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 242.399653][ T29] audit: type=1326 audit(1760176898.247:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 242.423142][ T29] audit: type=1326 audit(1760176898.247:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 242.446694][ T29] audit: type=1326 audit(1760176898.247:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14565 comm="syz.0.4731" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 242.505443][T14573] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4733'. [ 243.313223][T14581] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14581 comm=syz.1.4735 [ 243.533528][T14590] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.559112][T14590] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.015000][T14594] loop1: detected capacity change from 0 to 512 [ 244.043726][T14594] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.056587][T14594] ext4 filesystem being mounted at /396/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 244.216297][T14590] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.338214][T14598] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 244.349029][T14598] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #2: comm syz.1.4740: corrupted inode contents [ 244.540368][T14598] EXT4-fs (loop1): Remounting filesystem read-only [ 245.238201][T10136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.249379][T14590] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.084249][T14614] loop4: detected capacity change from 0 to 4096 [ 246.095730][T14614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.170690][T14617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.179340][T14617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.552655][T14614] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.287322][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 247.287346][ T29] audit: type=1326 audit(1760176903.237:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14618 comm="syz.3.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 247.317261][ T29] audit: type=1326 audit(1760176903.237:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14618 comm="syz.3.4745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 248.434511][T13195] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.435800][T14635] loop0: detected capacity change from 0 to 4096 [ 248.450649][T14635] EXT4-fs: test_dummy_encryption option not supported [ 248.466806][T13195] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.555985][T13195] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.586318][T13195] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.758309][T14640] loop0: detected capacity change from 0 to 128 [ 248.844364][T14643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14643 comm=syz.5.4754 [ 249.657915][T13195] Bluetooth: hci0: Frame reassembly failed (-90) [ 249.918509][T14660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.927154][T14660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.085930][T14662] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4760'. [ 250.199386][T14664] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4761'. [ 250.283911][T14667] loop1: detected capacity change from 0 to 512 [ 250.291675][T14667] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 250.300241][T14667] EXT4-fs (loop1): invalid journal inode [ 250.305983][T14667] EXT4-fs (loop1): can't get journal size [ 250.318581][T14667] EXT4-fs (loop1): 1 truncate cleaned up [ 250.325266][T14667] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.977143][T14675] netlink: 'syz.1.4762': attribute type 3 has an invalid length. [ 250.985123][T14675] netlink: 'syz.1.4762': attribute type 3 has an invalid length. [ 251.207545][T14680] loop4: detected capacity change from 0 to 128 [ 251.267898][T14682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14682 comm=syz.4.4766 [ 251.339348][T14684] loop4: detected capacity change from 0 to 256 [ 251.401982][T10136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.491673][T14693] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4771'. [ 251.556952][ T29] audit: type=1326 audit(1760176907.517:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.0.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 251.580556][ T29] audit: type=1326 audit(1760176907.517:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.0.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 251.604000][ T29] audit: type=1326 audit(1760176907.517:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.0.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 251.627472][ T29] audit: type=1326 audit(1760176907.517:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.0.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 251.650952][ T29] audit: type=1326 audit(1760176907.517:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.0.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 251.674478][ T29] audit: type=1326 audit(1760176907.517:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.0.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 251.703772][T12790] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 251.766103][ T29] audit: type=1326 audit(1760176907.517:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.0.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 251.789719][ T29] audit: type=1326 audit(1760176907.667:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.0.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 251.801596][T14700] loop5: detected capacity change from 0 to 512 [ 252.459033][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 252.459051][ T29] audit: type=1326 audit(1760176908.427:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.0.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 252.468724][T14700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.489028][ T29] audit: type=1326 audit(1760176908.427:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.0.4772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 252.528831][T14700] ext4 filesystem being mounted at /169/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.581321][T12161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.623398][T14712] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14712 comm=syz.5.4777 [ 252.963298][T14721] loop3: detected capacity change from 0 to 8192 [ 254.508155][T14744] loop5: detected capacity change from 0 to 128 [ 255.122989][T14746] loop1: detected capacity change from 0 to 1024 [ 255.135489][T14746] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 255.145414][T14746] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 255.155162][T14746] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 255.177194][T14746] EXT4-fs error (device loop1): ext4_get_journal_inode:5808: inode #5: comm syz.1.4786: unexpected bad inode w/o EXT4_IGET_BAD [ 255.202932][T14746] EXT4-fs (loop1): no journal found [ 255.208213][T14746] EXT4-fs (loop1): can't get journal size [ 255.378495][T14746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.540339][ T29] audit: type=1326 audit(1760176911.497:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14749 comm="syz.3.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 255.563960][ T29] audit: type=1326 audit(1760176911.507:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14749 comm="syz.3.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 255.587430][ T29] audit: type=1326 audit(1760176911.507:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14749 comm="syz.3.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 255.610965][ T29] audit: type=1326 audit(1760176911.507:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14749 comm="syz.3.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 255.634543][ T29] audit: type=1326 audit(1760176911.507:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14749 comm="syz.3.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 255.658129][ T29] audit: type=1326 audit(1760176911.507:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14749 comm="syz.3.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 255.681572][ T29] audit: type=1326 audit(1760176911.507:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14749 comm="syz.3.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 255.705473][ T29] audit: type=1326 audit(1760176911.507:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14749 comm="syz.3.4790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f186bc3eec9 code=0x7ffc0000 [ 256.067394][T14757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.075893][T14757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.846127][T10136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 260.305781][T14832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.314434][T14832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.676746][T14833] loop0: detected capacity change from 0 to 128 [ 261.012894][T14835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.021690][T14835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.503993][T14847] loop1: detected capacity change from 0 to 1024 [ 262.574069][T14847] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 262.584032][T14847] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 262.594547][T14847] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 262.620259][T14847] EXT4-fs error (device loop1): ext4_get_journal_inode:5808: inode #5: comm syz.1.4819: unexpected bad inode w/o EXT4_IGET_BAD [ 262.633980][T14847] EXT4-fs (loop1): no journal found [ 262.639280][T14847] EXT4-fs (loop1): can't get journal size [ 262.646992][T14847] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 262.767927][T14851] loop0: detected capacity change from 0 to 256 [ 262.854930][T14851] FAT-fs (loop0): IO charset cp936 not found [ 264.104925][T14868] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.112852][T14868] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 265.761844][T10136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.774584][T14884] loop0: detected capacity change from 0 to 128 [ 266.882349][T14909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.891070][T14909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.414368][T14932] loop4: detected capacity change from 0 to 128 [ 267.755385][T14934] loop4: detected capacity change from 0 to 128 [ 267.934803][T14938] loop1: detected capacity change from 0 to 512 [ 268.034339][T14938] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.4848: bad orphan inode 11862016 [ 268.046078][T14938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 268.059386][T14938] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.243856][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 268.243877][ T29] audit: type=1400 audit(1760176924.207:643): avc: denied { map } for pid=14937 comm="syz.1.4848" path="/412/file1/cpuacct.usage_percpu" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 268.523236][T10136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 271.295517][T14980] loop0: detected capacity change from 0 to 128 [ 271.753039][T14988] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4864'. [ 271.830634][T14994] loop4: detected capacity change from 0 to 512 [ 271.902048][ T29] audit: type=1326 audit(1760176927.827:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 271.925815][ T29] audit: type=1326 audit(1760176927.827:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 271.949757][ T29] audit: type=1326 audit(1760176927.827:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 271.973310][ T29] audit: type=1326 audit(1760176927.827:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 271.996814][ T29] audit: type=1326 audit(1760176927.827:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 272.020379][ T29] audit: type=1326 audit(1760176927.827:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 272.043898][ T29] audit: type=1326 audit(1760176927.827:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 272.067772][ T29] audit: type=1326 audit(1760176927.827:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 272.091435][ T29] audit: type=1326 audit(1760176927.827:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14992 comm="syz.0.4865" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 272.125853][T14995] loop5: detected capacity change from 0 to 512 [ 272.155628][T14994] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.168751][T14994] ext4 filesystem being mounted at /281/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 272.736825][T15009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.745452][T15009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.887380][T14995] EXT4-fs error (device loop5): ext4_iget_extra_inode:5075: inode #15: comm syz.5.4862: corrupted in-inode xattr: invalid ea_ino [ 273.185421][T15015] loop3: detected capacity change from 0 to 512 [ 273.212448][T15015] EXT4-fs (loop3): orphan cleanup on readonly fs [ 273.219282][T15015] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.4870: Failed to acquire dquot type 1 [ 273.231290][T15015] EXT4-fs (loop3): 1 truncate cleaned up [ 273.466756][T15018] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #2: comm syz.4.4867: corrupted inode contents [ 273.479354][T15018] EXT4-fs (loop4): Remounting filesystem read-only [ 273.826325][T15015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 273.826906][T10823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.986886][T14995] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.4862: couldn't read orphan inode 15 (err -117) [ 275.999438][T14995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.076425][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.086075][T12161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.144573][T15042] loop5: detected capacity change from 0 to 256 [ 276.183502][T15042] FAT-fs (loop5): IO charset cp936 not found [ 276.798170][T15048] loop4: detected capacity change from 0 to 512 [ 276.807171][T15048] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 276.818248][T15048] EXT4-fs (loop4): invalid journal inode [ 276.837353][T15048] EXT4-fs (loop4): can't get journal size [ 276.853639][T15048] EXT4-fs (loop4): 1 truncate cleaned up [ 276.860734][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 276.860748][ T29] audit: type=1326 audit(1760176932.827:675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15051 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 276.868223][T15048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.905050][ T29] audit: type=1326 audit(1760176932.867:676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15051 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 276.928642][ T29] audit: type=1326 audit(1760176932.867:677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15051 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 276.952318][ T29] audit: type=1326 audit(1760176932.867:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15051 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 276.975852][ T29] audit: type=1326 audit(1760176932.867:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15051 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 276.999541][ T29] audit: type=1326 audit(1760176932.867:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15051 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 277.023131][ T29] audit: type=1326 audit(1760176932.867:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15051 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 277.046753][ T29] audit: type=1326 audit(1760176932.867:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15051 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 277.070204][ T29] audit: type=1326 audit(1760176932.867:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15051 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 277.093711][ T29] audit: type=1326 audit(1760176932.867:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15051 comm="syz.0.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5ea2feec9 code=0x7ffc0000 [ 277.748041][T15060] netlink: 'syz.4.4880': attribute type 3 has an invalid length. [ 277.755927][T15060] netlink: 'syz.4.4880': attribute type 3 has an invalid length. [ 278.153947][T10823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 279.444905][T15081] loop3: detected capacity change from 0 to 512 [ 279.569843][T15081] EXT4-fs: Ignoring removed mblk_io_submit option [ 279.576395][T15081] EXT4-fs: inline encryption not supported [ 279.774216][T15081] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 279.798579][T15081] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.4890: casefold flag without casefold feature [ 279.837503][T15081] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.4890: couldn't read orphan inode 15 (err -117) [ 279.864434][T15081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.885259][T15081] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 4: comm syz.3.4890: lblock 0 mapped to illegal pblock 4 (length 1) [ 279.919679][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.046784][T15096] loop5: detected capacity change from 0 to 256 [ 280.124385][T15096] FAT-fs (loop5): IO charset cp936 not found [ 280.756812][T15101] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4894'. [ 283.556511][T15138] loop3: detected capacity change from 0 to 128 [ 283.567081][T15139] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4906'. [ 283.680449][T15148] loop3: detected capacity change from 0 to 512 [ 283.697038][T15148] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 283.717856][T15148] EXT4-fs (loop3): invalid journal inode [ 283.735928][T15148] EXT4-fs (loop3): can't get journal size [ 283.750344][T15148] EXT4-fs (loop3): 1 truncate cleaned up [ 283.761458][T15148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.282822][T15155] netlink: 'syz.3.4910': attribute type 3 has an invalid length. [ 284.290873][T15155] netlink: 'syz.3.4910': attribute type 3 has an invalid length. [ 284.553705][T15161] loop0: detected capacity change from 0 to 512 [ 284.905208][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.045706][T15161] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.151461][T15161] ext4 filesystem being mounted at /315/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.788272][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 286.788288][ T29] audit: type=1400 audit(1760176942.757:730): avc: denied { connect } for pid=15196 comm="syz.5.4922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 287.058651][T15204] loop5: detected capacity change from 0 to 512 [ 287.478402][T15204] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.712209][T15204] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.780840][ T29] audit: type=1400 audit(1760176943.747:731): avc: denied { append } for pid=15203 comm="syz.5.4925" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 287.984738][T12161] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.123778][ T29] audit: type=1400 audit(1760176943.937:732): avc: denied { ioctl } for pid=15203 comm="syz.5.4925" path="/206/file1/file2" dev="loop5" ino=16 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 289.232950][T10362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.264237][T15236] loop0: detected capacity change from 0 to 256 [ 289.284320][T15236] FAT-fs (loop0): IO charset cp936 not found [ 289.412137][T15246] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15246 comm=syz.3.4938 [ 290.139789][ T29] audit: type=1400 audit(1760176946.077:733): avc: denied { ioctl } for pid=15250 comm="syz.3.4939" path="socket:[49426]" dev="sockfs" ino=49426 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.437852][ T29] audit: type=1326 audit(1760176946.407:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15258 comm="syz.1.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 290.651137][T15255] loop5: detected capacity change from 0 to 4096 [ 290.885643][T15255] EXT4-fs: Ignoring removed mblk_io_submit option [ 290.926538][T15255] EXT4-fs: test_dummy_encryption option not supported [ 291.180218][ T29] audit: type=1326 audit(1760176946.437:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15258 comm="syz.1.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 291.203816][ T29] audit: type=1326 audit(1760176946.437:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15258 comm="syz.1.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 291.227847][ T29] audit: type=1326 audit(1760176946.437:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15258 comm="syz.1.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 291.251257][ T29] audit: type=1326 audit(1760176946.437:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15258 comm="syz.1.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 291.274824][ T29] audit: type=1326 audit(1760176946.437:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15258 comm="syz.1.4943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 291.831755][T15273] loop0: detected capacity change from 0 to 128 [ 292.048552][T15273] FAT-fs (loop0): bogus sectors per cluster 0 [ 292.054707][T15273] FAT-fs (loop0): Can't find a valid FAT filesystem [ 292.708754][T15296] loop3: detected capacity change from 0 to 512 [ 292.739765][T15296] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 292.787902][T15296] EXT4-fs (loop3): invalid journal inode [ 292.795457][T15296] EXT4-fs (loop3): can't get journal size [ 292.802689][T15296] EXT4-fs (loop3): 1 truncate cleaned up [ 292.809759][T15296] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.903323][T15307] loop0: detected capacity change from 0 to 512 [ 293.411243][T15311] netlink: 'syz.3.4952': attribute type 3 has an invalid length. [ 293.419523][T15311] netlink: 'syz.3.4952': attribute type 3 has an invalid length. [ 293.437302][T15307] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.506768][T15307] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.545538][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 293.545555][ T29] audit: type=1400 audit(1760176949.507:766): avc: denied { append } for pid=15306 comm="syz.0.4955" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 293.753915][T10362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.771583][ T29] audit: type=1326 audit(1760176949.717:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15321 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 293.795385][ T29] audit: type=1326 audit(1760176949.717:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15321 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 293.818892][ T29] audit: type=1326 audit(1760176949.727:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15321 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 293.842631][ T29] audit: type=1326 audit(1760176949.727:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15321 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 293.866125][ T29] audit: type=1326 audit(1760176949.727:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15321 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 293.889591][ T29] audit: type=1326 audit(1760176949.727:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15321 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 293.913026][ T29] audit: type=1326 audit(1760176949.727:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15321 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 293.919890][T15325] loop4: detected capacity change from 0 to 1024 [ 293.936668][ T29] audit: type=1326 audit(1760176949.727:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15321 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 293.936701][ T29] audit: type=1326 audit(1760176949.727:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15321 comm="syz.1.4959" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb3baeec9 code=0x7ffc0000 [ 293.992177][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.987669][T15368] loop4: detected capacity change from 0 to 512 [ 296.042615][T15368] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 296.103922][T15368] EXT4-fs (loop4): invalid journal inode [ 296.141231][T15368] EXT4-fs (loop4): can't get journal size [ 296.182821][T15368] EXT4-fs (loop4): 1 truncate cleaned up [ 296.197471][T15368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.215765][T15374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15374 comm=syz.0.4975 [ 297.615191][T15389] loop5: detected capacity change from 0 to 128 [ 297.628134][T15389] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 297.847702][T15392] netlink: 80 bytes leftover after parsing attributes in process `syz.1.4979'. [ 298.358865][T15389] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 298.797282][T15381] netlink: 'syz.4.4973': attribute type 3 has an invalid length. [ 298.805127][T15381] netlink: 'syz.4.4973': attribute type 3 has an invalid length. [ 299.158874][T10823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.511405][T15407] loop4: detected capacity change from 0 to 4096 [ 299.526883][T12161] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.547828][T15407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.664779][T10823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.692475][T15412] loop3: detected capacity change from 0 to 512 [ 299.712358][T15412] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 299.727888][T15412] ext4 filesystem being mounted at /376/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 299.999734][T15422] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.4987: corrupted inode contents [ 300.079901][T15422] EXT4-fs (loop3): Remounting filesystem read-only [ 300.653775][T15432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.662550][T15432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.983965][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 300.983985][ T29] audit: type=1400 audit(1760176956.617:792): avc: denied { bind } for pid=15426 comm="syz.0.4991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 301.009853][ T29] audit: type=1400 audit(1760176956.617:793): avc: denied { name_bind } for pid=15426 comm="syz.0.4991" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 301.030779][ T29] audit: type=1400 audit(1760176956.617:794): avc: denied { node_bind } for pid=15426 comm="syz.0.4991" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 301.078132][T10590] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.538360][T15446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.546895][T15446] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.534443][T15465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.545847][T15465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.563366][T15467] loop1: detected capacity change from 0 to 512 [ 303.798826][T15467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 303.846085][T15467] ext4 filesystem being mounted at /438/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 304.009923][T15474] loop3: detected capacity change from 0 to 256 [ 304.172618][T15478] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #2: comm syz.1.5004: corrupted inode contents [ 304.528672][T15478] EXT4-fs (loop1): Remounting filesystem read-only [ 304.605420][T10136] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.727139][T15490] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15490 comm=syz.4.5011 [ 304.933291][T15501] loop0: detected capacity change from 0 to 512 [ 305.001120][T15503] loop1: detected capacity change from 0 to 512 [ 305.009735][T15503] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 305.080676][T15501] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.5013: bad orphan inode 11862016 [ 305.167273][ T31] Bluetooth: hci0: Frame reassembly failed (-84) [ 305.193218][T15501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 305.331873][T15501] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.928153][T10362] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 306.266378][T15521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.275177][T15521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.703657][T15522] loop0: detected capacity change from 0 to 8192 [ 306.742249][ T3002] ================================================================== [ 306.750401][ T3002] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 306.757040][ T3002] [ 306.759384][ T3002] read-write to 0xffff8881073cd6c0 of 4 bytes by task 3308 on cpu 1: [ 306.767482][ T3002] dont_mount+0x2a/0x40 [ 306.771665][ T3002] vfs_unlink+0x28f/0x420 [ 306.776027][ T3002] do_unlinkat+0x24e/0x480 [ 306.780468][ T3002] __x64_sys_unlink+0x2e/0x40 [ 306.785179][ T3002] x64_sys_call+0x2dcf/0x3000 [ 306.789890][ T3002] do_syscall_64+0xd2/0x200 [ 306.794440][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.800367][ T3002] [ 306.802718][ T3002] read to 0xffff8881073cd6c0 of 4 bytes by task 3002 on cpu 0: [ 306.810278][ T3002] lookup_fast+0xf0/0x320 [ 306.814636][ T3002] walk_component+0x3f/0x220 [ 306.819269][ T3002] path_lookupat+0xfe/0x2a0 [ 306.823808][ T3002] filename_lookup+0x147/0x340 [ 306.828600][ T3002] do_readlinkat+0x7d/0x320 [ 306.833201][ T3002] __x64_sys_readlink+0x47/0x60 [ 306.838247][ T3002] x64_sys_call+0x28de/0x3000 [ 306.842956][ T3002] do_syscall_64+0xd2/0x200 [ 306.847476][ T3002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.853401][ T3002] [ 306.855730][ T3002] value changed: 0x00300080 -> 0x00004080 [ 306.861453][ T3002] [ 306.863781][ T3002] Reported by Kernel Concurrency Sanitizer on: [ 306.869955][ T3002] CPU: 0 UID: 0 PID: 3002 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 306.879256][ T3002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 306.889326][ T3002] ================================================================== [ 306.933845][T15524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.942487][T15524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.247238][ T3608] Bluetooth: hci0: command 0x1003 tx timeout [ 307.253356][T12790] Bluetooth: hci0: Opcode 0x1003 failed: -110