last executing test programs: 1.83805163s ago: executing program 0 (id=7085): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="870000000000000021944117ec621e50da3b9f6cc3d5102b5fb5b514d3d09915e924540ab7917c7732a8a45b686b8b7ff7dbae6ec6d039b54c9c8e729aa15167ecc56a38ac16aa3e113563cdf7d6ccc8fb4ee5f5ccf99b97d5d7bac9e07848b0b0f50dcc7755cf16da1f7146c8"], 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x420100, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x80, 0x0, 0x82, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1000, 0x0, 0x9, 0x6, 0x0, 0x0, 0x4, 0x0, 0x80, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x1084) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000005c526bb3a10838fae4470fde0252f8f8a305b16fee1a440bb38d272b67a060761843d582a0602b760a56e6ad64d765e2933d2475d2148620d0c60d441d776d7dd7a11b4db0ef0e5c76975abcef63839ca11920ff88e6bccb5367bcc04be21f669aef20d5", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf25060000000800060004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x587a806a039f7488}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="f1000100f5ff000014000300766c616e30000000020002000000000008ea0900ef2ed0bb73e165e87c189e92cc4205928d66396de1d59ea389cd2a8e2afcf4ed2fb75609e259f7b4e0a939354c17178c41ff319ee4786206421534be27", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x34, r2, 0x25, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x240001d0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000100)='bcache_alloc_fail\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x10c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xd}}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xc0, 0x2, [@TCA_ROUTE4_ACT={0xbc, 0x6, [@m_vlan={0xb8, 0x8, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1a8}]}, {0x6a, 0x6, "fe393046780fc0b9a04afd1cf1bacd6244fa765bb3658f46bbeae297438134ba976082924a6439961a38ab6dc487c7ce03cbe6d7aa8bb01e9ef7e8035280944e090ec29df32fd054804158ae1121f3a3e07e8201cdb4c8915f4cfd63eee1d436d5e5274cf231"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) accept(0xffffffffffffffff, 0x0, 0x0) 1.138441504s ago: executing program 2 (id=7103): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r1, 0x2285, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484e242a03000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9d85e447511703d", 0x31}], 0x2) 1.047409295s ago: executing program 2 (id=7107): r0 = socket(0x10, 0x400000000080803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x2, 0x0, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) 988.052265ms ago: executing program 2 (id=7109): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 979.362875ms ago: executing program 0 (id=7110): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000) 949.279095ms ago: executing program 0 (id=7112): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000ff0700000003801400010073797a5f74756e000000000000000000140000001100010000"], 0x80}}, 0x0) 879.618115ms ago: executing program 2 (id=7114): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa10000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) 855.670806ms ago: executing program 0 (id=7116): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000a00), 0x80402, 0x0) write$cgroup_int(r2, 0x0, 0x2) 831.811986ms ago: executing program 3 (id=7118): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) openat$pfkey(0xffffffffffffff9c, 0x0, 0x100c0, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb, 0xe0000000}, @sadb_x_sa2={0x2, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @private=0xa010102}}]}, 0x60}}, 0x0) 831.350716ms ago: executing program 0 (id=7119): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) pwritev(r0, &(0x7f00000001c0)=[{&(0x7f0000000280)="be", 0x7ffff000}, {0x0, 0x141}], 0x2, 0x0, 0x0) 792.519446ms ago: executing program 3 (id=7120): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) shmget(0x2, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) 727.436626ms ago: executing program 0 (id=7121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="870000000000000021944117ec621e50da3b9f6cc3d5102b5fb5b514d3d09915e924540ab7917c7732a8a45b686b8b7ff7dbae6ec6d039b54c9c8e729aa15167ecc56a38ac16aa3e113563cdf7d6ccc8fb4ee5f5ccf99b97d5d7bac9e07848b0b0f50dcc7755cf16da1f7146c8"], 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x420100, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x80, 0x0, 0x82, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1000, 0x0, 0x9, 0x6, 0x0, 0x0, 0x4, 0x0, 0x80, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x1084) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000005c526bb3a10838fae4470fde0252f8f8a305b16fee1a440bb38d272b67a060761843d582a0602b760a56e6ad64d765e2933d2475d2148620d0c60d441d776d7dd7a11b4db0ef0e5c76975abcef63839ca11920ff88e6bccb5367bcc04be21f669aef20d5", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf25060000000800060004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x587a806a039f7488}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="f1000100f5ff000014000300766c616e30000000020002000000000008ea0900ef2ed0bb73e165e87c189e92cc4205928d66396de1d59ea389cd2a8e2afcf4ed2fb75609e259f7b4e0a939354c17178c41ff319ee4786206421534be27", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x34, r2, 0x25, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x240001d0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000100)='bcache_alloc_fail\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x10c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xd}}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xc0, 0x2, [@TCA_ROUTE4_ACT={0xbc, 0x6, [@m_vlan={0xb8, 0x8, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1a8}]}, {0x6a, 0x6, "fe393046780fc0b9a04afd1cf1bacd6244fa765bb3658f46bbeae297438134ba976082924a6439961a38ab6dc487c7ce03cbe6d7aa8bb01e9ef7e8035280944e090ec29df32fd054804158ae1121f3a3e07e8201cdb4c8915f4cfd63eee1d436d5e5274cf231"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) accept(0xffffffffffffffff, 0x0, 0x0) 726.119546ms ago: executing program 3 (id=7122): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000bc0)={'wpan1\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x4000) 697.811517ms ago: executing program 2 (id=7124): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 636.308567ms ago: executing program 3 (id=7126): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_load(r2, &(0x7f00000002c0)={0xf97cff8c, 0x8}, 0x10) 584.523037ms ago: executing program 3 (id=7127): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x13) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x13, 0xf8, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfd}, 0x10}}, 0x2000) 582.979847ms ago: executing program 2 (id=7128): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) write$selinux_access(r0, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x63) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x7) 511.474777ms ago: executing program 3 (id=7129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000880)=ANY=[@ANYBLOB="870000000000000021944117ec621e50da3b9f6cc3d5102b5fb5b514d3d09915e924540ab7917c7732a8a45b686b8b7ff7dbae6ec6d039b54c9c8e729aa15167ecc56a38ac16aa3e113563cdf7d6ccc8fb4ee5f5ccf99b97d5d7bac9e07848b0b0f50dcc7755cf16da1f7146c8"], 0x8) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x420100, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x0, 0x80, 0x0, 0x82, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x1000, 0x0, 0x9, 0x6, 0x0, 0x0, 0x4, 0x0, 0x80, 0x0, 0xfffffffffffffffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x1084) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000005c526bb3a10838fae4470fde0252f8f8a305b16fee1a440bb38d272b67a060761843d582a0602b760a56e6ad64d765e2933d2475d2148620d0c60d441d776d7dd7a11b4db0ef0e5c76975abcef63839ca11920ff88e6bccb5367bcc04be21f669aef20d5", @ANYRES16=0x0, @ANYBLOB="000125bd7000fddbdf25060000000800060004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x587a806a039f7488}, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="f1000100f5ff000014000300766c616e30000000020002000000000008ea0900ef2ed0bb73e165e87c189e92cc4205928d66396de1d59ea389cd2a8e2afcf4ed2fb75609e259f7b4e0a939354c17178c41ff319ee4786206421534be27", @ANYRES32=r6, @ANYBLOB], 0x3c}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x34, r2, 0x25, 0x0, 0x0, {{}, {}, {0x18, 0x17, {0x0, 0x0, @udp='udp:syz2\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x240001d0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000100)='bcache_alloc_fail\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x10c, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4}, {0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_CLASSID={0x8, 0x3, {0x5, 0xd}}]}}, @TCA_RATE={0x6}, @filter_kind_options=@f_route={{0xa}, {0xc0, 0x2, [@TCA_ROUTE4_ACT={0xbc, 0x6, [@m_vlan={0xb8, 0x8, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1a8}]}, {0x6a, 0x6, "fe393046780fc0b9a04afd1cf1bacd6244fa765bb3658f46bbeae297438134ba976082924a6439961a38ab6dc487c7ce03cbe6d7aa8bb01e9ef7e8035280944e090ec29df32fd054804158ae1121f3a3e07e8201cdb4c8915f4cfd63eee1d436d5e5274cf231"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x20000810) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) accept(0xffffffffffffffff, 0x0, 0x0) 334.846628ms ago: executing program 1 (id=7133): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000001c0)='sched_switch\x00', r0}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r1, &(0x7f0000000780)=[{&(0x7f0000000000)=""/65, 0x41}], 0x1, 0x1f3, 0x0) 271.655568ms ago: executing program 1 (id=7135): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) 271.341109ms ago: executing program 1 (id=7136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fcffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 209.684529ms ago: executing program 4 (id=7137): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_access(r0, &(0x7f0000000040)={'system_u:object_r:ping_exec_t:s0', 0x20, 'unconfined'}, 0x41) 202.249839ms ago: executing program 1 (id=7138): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000a50000002a00000095"], &(0x7f0000000b40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local}, 0x1c) 154.828159ms ago: executing program 4 (id=7139): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000380)={0xf97cff8c, 0x8, 'SE Linux', "9fb7ccccaf850f566a3ca3da9ad3f9b4"}, 0x20) 154.230099ms ago: executing program 1 (id=7140): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$selinux_context(r1, &(0x7f00000003c0)='system_u:object_r:crontab_exec_t:s0\x00', 0x24) 149.555319ms ago: executing program 1 (id=7141): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x14e24}, 0x1c) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 146.149849ms ago: executing program 4 (id=7142): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket(0xa, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @private=0xa010101}}}, 0x90) 79.68186ms ago: executing program 4 (id=7143): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000deab44f4850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mount$nfs(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='mm_page_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000840)='./file0\x00', 0x801, &(0x7f0000000080), 0x64, 0x518, &(0x7f0000000200)="$eJzs3c9vG1kdAPDvOHa3adNNFjjASiwLuyitoHayYXcjDssiITitBCz3EhIniuLEUezsNlFFU/EHICEESJzgwgWJPwAJVeLCESFVgjMIEAhBCwcO0EG2J2l+jBO3uHEafz7SZN57M+Pve45mPG/maSaAofVyRLwdEQ/TNL0WEeNZeSGbYqcztdZ7cP/WfGtKIk3f/XsSSVa2+1lJNr+cbXYxIr76pYhvJEfjNra2V+ZqtepGlq80V9crja3t68urc0vVperazMz0G7Nvzr4+O9WXdl6JiLe+8OfvffsnX3zrF59+/w83/nr1m61qjWXL97fjMRWPW9hpeqn9XezfYOMJg51FxXYLM6N5a4wcKbnzlOsEAEC+1jn+ByLiExFxLcZj5PjTWQAAAOAZlH5uLP6TRKT5LnQpBwAAAJ4hhfYY2KRQzsYCjEWhUC53xvB+KC4VavVG81OL9c21hc5Y2YkoFRaXa9WpbKzwRJSSVn66nX6Uf+1QfiYiXoiI746PtvPl+XptYdAXPwAAAGBIXD7U///XeKf/DwAAAJwzE4OuAAAAAPDU6f8DAADA+af/DwAAAOfal995pzWlu++/Xnhva3Ol/t71hWpjpby6OV+er2+sl5fq9aX2M/tWT/q8Wr2+/plY27xZaVYbzUpja/vGan1zrXlj+cArsAEAAIBT9MLH7v4uiYidz462p5YLvW3a42rAWVXcSyXZPGe3/v3znfmfTqlSwKkYGXQFgIEpDroCwMCUBl0BYOCSg9kj3YKug3d+nc0/3v86AQAA/TX5ke73/wvHbrlz/GLgzLMTw/By/x+GV/v+f68jeZ0swLlScgYAQ2/f/f/0ds7yE+//nyhNH79WAABAP421p6RQzi7vjUWhUC5HXGm/FqCULC7XqlMR8XxE/Ha89FwrP93eMjk8ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6CJNk0gBAACAcy2i8Jfkl51n+U+Ovzp2+PrAheTf45G9IvT9H777/ZtzzebGdKv8H3vlzR9k5a8N4goGAAAADIXHeoH/bj99tx8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP304P6t+d3pNOP+7fMRMZEXvxgX2/OLUYqIS/9MorhvuyQiRvoQf7T158N58ZNWtfZC5sUf7UP8nTvHxo+J7FvIi3+5D/FhmN1tHX/eztv/CvFye56//xUjDuSfVPfjX+wd/0a67P9Xeozx4r2fVbrGvxPxYjH/+LMbP+kS/5Ue43/9a9vb3ZalP4qYzP39SQ7EqjRX1yuNre3ry6tzS9Wl6trMzPQbs2/Ovj47VVlcrlWzv/FcTozvfPTnD49r/6Uu8SdOaP+rPbb/v/du3v9gJ1nKi3/1lZz4v/pxtsbR+IXst++TWbq1fHI3vdNJ7/fST3/z0nHtX+jS/pP+/1d7bP+1r3zrjz2uCgCcgsbW9spcrVbdOLeJVi/9DFRD4gwmbvf1A9M0TVv71P/xOUmcha+lnRj0kQkAAOi3Ryf9g64JAAAAAAAAAAAAAAAAAAAADK/TeJzY4Zg7e6mkH4/QBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoi/8FAAD//z742t0=") 48.61243ms ago: executing program 4 (id=7144): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_context(r2, &(0x7f00000003c0)='system_u:object_r:agp_device_t:s0\x00', 0x22) 0s ago: executing program 4 (id=7145): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x8}], 0x2, 0x0, 0x0) kernel console output (not intermixed with test programs): 844674 [ 200.982978][T20139] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20139 comm=syz.0.5029 [ 201.011848][T20144] loop4: detected capacity change from 0 to 256 [ 201.020075][T20146] ebt_among: dst integrity fail: 101 [ 201.025706][T20125] Falling back ldisc for ttyS3. [ 201.064035][T20151] xt_hashlimit: max too large, truncated to 1048576 [ 201.084645][T20137] Falling back ldisc for ttyS3. [ 201.098730][T20151] loop1: detected capacity change from 0 to 512 [ 201.105379][T20151] EXT4-fs: Ignoring removed nobh option [ 201.115048][T20151] EXT4-fs: journaled quota format not specified [ 201.117823][T20157] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 201.175311][T20157] Falling back ldisc for ttyS3. [ 201.209304][T20167] syz.2.5037[20167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.209384][T20167] syz.2.5037[20167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.230884][T20173] program syz.3.5039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 201.263291][T20167] syz.2.5037[20167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 201.265795][T20167] Invalid ELF header magic: != ELF [ 201.395512][T20194] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 201.403434][T20195] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20195 comm=syz.3.5045 [ 201.431168][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.438685][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.446162][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.453653][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.461129][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.468587][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.476205][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.483698][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.491169][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.498674][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.506117][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.513522][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.520975][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.528450][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.535871][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.543378][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.550947][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.558526][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.565957][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.573449][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.580895][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.588333][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.595828][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.603241][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.610709][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.618125][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.625543][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.632996][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.640429][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.647919][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.655361][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.662766][ T1067] hid-generic 0000:0000:0003.0006: unknown main item tag 0x0 [ 201.684894][ T1067] hid-generic 0000:0000:0003.0006: hidraw0: HID v0.00 Device [syz1] on syz1 [ 201.694601][T20203] geneve4: entered promiscuous mode [ 201.700271][T20203] geneve4: entered allmulticast mode [ 201.724630][T20194] Falling back ldisc for ttyS3. [ 201.840650][T20225] xt_hashlimit: max too large, truncated to 1048576 [ 201.847721][T20226] netlink: 'syz.0.5051': attribute type 4 has an invalid length. [ 201.855695][T20226] __nla_validate_parse: 7 callbacks suppressed [ 201.855707][T20226] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.5051'. [ 201.881750][T20225] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5052'. [ 201.882775][T20229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20229 comm=syz.3.5055 [ 201.952814][T20229] geneve4: entered promiscuous mode [ 201.958460][T20229] geneve4: entered allmulticast mode [ 202.014972][T20241] loop4: detected capacity change from 0 to 512 [ 202.050239][T20241] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 202.074554][T20241] EXT4-fs (loop4): 1 truncate cleaned up [ 202.080599][T20241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.120705][T20241] EXT4-fs error (device loop4): ext4_add_entry:2444: inode #2: comm syz.4.5059: Directory hole found for htree leaf block 0 [ 202.195344][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.281169][T20265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20265 comm=syz.4.5066 [ 202.307361][T20267] xt_hashlimit: max too large, truncated to 1048576 [ 202.327669][T20267] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5067'. [ 202.353028][T20269] IPv6: NLM_F_CREATE should be specified when creating new route [ 202.406247][T20273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20273 comm=syz.4.5070 [ 202.502341][T20280] syz.0.5073[20280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 202.554007][T20291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20291 comm=syz.2.5078 [ 202.588606][T20292] vhci_hcd: invalid port number 157 [ 202.593837][T20292] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 202.750314][T20310] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 202.775729][T20315] xt_hashlimit: max too large, truncated to 1048576 [ 202.806303][T20315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5089'. [ 202.833506][T20318] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20318 comm=syz.1.5090 [ 202.856894][T20310] Falling back ldisc for ttyS3. [ 202.932326][T20318] geneve4: entered promiscuous mode [ 202.937650][T20318] geneve4: entered allmulticast mode [ 203.043085][T20360] xt_hashlimit: max too large, truncated to 1048576 [ 203.055435][T20363] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 203.063534][T20364] vhci_hcd: invalid port number 157 [ 203.066236][T20360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5103'. [ 203.068862][T20364] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 203.091328][T20366] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 203.107987][T20360] loop1: detected capacity change from 0 to 512 [ 203.115062][T20360] EXT4-fs: Ignoring removed nobh option [ 203.121534][T20360] EXT4-fs: journaled quota format not specified [ 203.146146][T20363] Falling back ldisc for ttyS3. [ 203.204779][T20366] Falling back ldisc for ttyS3. [ 203.215021][T20377] geneve4: entered promiscuous mode [ 203.220314][T20377] geneve4: entered allmulticast mode [ 203.263622][T20385] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 203.334679][T20385] Falling back ldisc for ttyS3. [ 203.353791][T20390] infiniband syz1: set active [ 203.371217][T20397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5109'. [ 203.422499][T20390] tipc: Enabling of bearer rejected, already enabled [ 203.435624][T20408] xt_hashlimit: max too large, truncated to 1048576 [ 203.442766][T20394] geneve4: entered promiscuous mode [ 203.448070][T20394] geneve4: entered allmulticast mode [ 203.457104][T20412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5113'. [ 203.464128][T20408] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5115'. [ 203.485791][T20412] tipc: Enabling of bearer rejected, already enabled [ 203.528912][T20420] random: crng reseeded on system resumption [ 203.757714][T20456] vhci_hcd: invalid port number 157 [ 203.762972][T20456] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 203.957350][T20473] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 204.034890][T20473] Falling back ldisc for ttyS3. [ 204.397294][T20523] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 204.479574][T20523] Falling back ldisc for ttyS3. [ 204.574700][T20542] program syz.3.5152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.595198][T20543] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5149'. [ 204.622224][T20543] tipc: Enabling of bearer rejected, already enabled [ 204.635832][T20547] geneve4: entered promiscuous mode [ 204.641165][T20547] geneve4: entered allmulticast mode [ 204.672891][T20553] geneve4: entered promiscuous mode [ 204.678211][T20553] geneve4: entered allmulticast mode [ 204.718467][T20555] geneve4: entered promiscuous mode [ 204.723692][T20555] geneve4: entered allmulticast mode [ 204.835790][ T29] kauditd_printk_skb: 1051 callbacks suppressed [ 204.835804][ T29] audit: type=1400 audit(1732565048.579:25602): avc: denied { setopt } for pid=20567 comm="syz.3.5165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 204.908730][ T29] audit: type=1326 audit(1732565048.649:25603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20579 comm="syz.3.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fd10e819 code=0x7ffc0000 [ 204.932726][ T29] audit: type=1326 audit(1732565048.649:25604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20579 comm="syz.3.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fd10e819 code=0x7ffc0000 [ 204.956769][ T29] audit: type=1326 audit(1732565048.679:25605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20579 comm="syz.3.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71fd10e819 code=0x7ffc0000 [ 204.960904][T20581] vhci_hcd: invalid port number 157 [ 204.980401][ T29] audit: type=1326 audit(1732565048.679:25606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20579 comm="syz.3.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fd10e819 code=0x7ffc0000 [ 204.980427][ T29] audit: type=1326 audit(1732565048.679:25607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20579 comm="syz.3.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fd10e819 code=0x7ffc0000 [ 204.980449][ T29] audit: type=1326 audit(1732565048.679:25608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20579 comm="syz.3.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71fd10e819 code=0x7ffc0000 [ 204.980553][ T29] audit: type=1326 audit(1732565048.679:25609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20579 comm="syz.3.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fd10e819 code=0x7ffc0000 [ 204.980573][ T29] audit: type=1326 audit(1732565048.679:25610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20579 comm="syz.3.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71fd10e819 code=0x7ffc0000 [ 204.985843][T20581] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 205.009332][ T29] audit: type=1326 audit(1732565048.679:25611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20579 comm="syz.3.5170" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fd10e819 code=0x7ffc0000 [ 205.135491][T20580] geneve4: entered promiscuous mode [ 205.140792][T20580] geneve4: entered allmulticast mode [ 205.266355][T20589] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 205.295712][T20586] geneve4: entered promiscuous mode [ 205.300958][T20586] geneve4: entered allmulticast mode [ 205.355371][T20589] Falling back ldisc for ttyS3. [ 205.368192][T20596] program syz.3.5178 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.402832][T20601] netlink: 16222 bytes leftover after parsing attributes in process `syz.4.5179'. [ 205.480352][T20605] geneve4: entered promiscuous mode [ 205.485636][T20605] geneve4: entered allmulticast mode [ 205.497803][T20617] loop4: detected capacity change from 0 to 256 [ 205.525358][T20621] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 205.533328][T20623] mmap: syz.2.5191 (20623): VmData 29077504 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 205.548047][T20623] program syz.2.5191 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 205.599329][T20629] netlink: 'syz.1.5194': attribute type 18 has an invalid length. [ 205.624623][T20621] Falling back ldisc for ttyS3. [ 205.688863][T20651] selinux_netlink_send: 16 callbacks suppressed [ 205.688877][T20651] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20651 comm=syz.0.5195 [ 205.699168][T20652] random: crng reseeded on system resumption [ 205.745044][T20636] tipc: Enabling of bearer rejected, failed to enable media [ 205.830858][T20672] xt_hashlimit: max too large, truncated to 1048576 [ 205.884026][T20683] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 205.926743][T20686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20686 comm=syz.2.5205 [ 205.973547][T20691] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 206.044887][T20694] infiniband syz1: set active [ 206.078613][T20694] tipc: Enabling of bearer rejected, already enabled [ 206.087263][T20703] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20703 comm=syz.0.5211 [ 206.156631][T20709] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 206.238219][T20724] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 206.272004][T20730] loop1: detected capacity change from 0 to 164 [ 206.284873][T20709] Falling back ldisc for ttyS3. [ 206.299626][T20730] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 206.312372][T20730] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 206.326918][T20737] program syz.0.5217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.346792][T20739] xt_hashlimit: max too large, truncated to 1048576 [ 206.425407][T20751] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 206.465655][T20753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20753 comm=syz.0.5223 [ 206.485481][T20751] Falling back ldisc for ttyS3. [ 206.528638][T20771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20771 comm=syz.4.5229 [ 206.530532][T20767] 9pnet_fd: Insufficient options for proto=fd [ 206.610180][T20782] xt_hashlimit: max too large, truncated to 1048576 [ 206.650483][T20782] loop4: detected capacity change from 0 to 512 [ 206.666220][T20782] EXT4-fs: Ignoring removed nobh option [ 206.679243][T20782] EXT4-fs: journaled quota format not specified [ 206.702399][T20796] tipc: Enabling of bearer rejected, already enabled [ 206.759056][T20809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20809 comm=syz.1.5240 [ 206.796859][T20809] geneve4: entered promiscuous mode [ 206.802095][T20809] geneve4: entered allmulticast mode [ 206.829396][T20815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20815 comm=syz.3.5242 [ 206.881869][T20815] geneve4: entered promiscuous mode [ 206.887153][T20815] geneve4: entered allmulticast mode [ 206.908872][T20817] loop4: detected capacity change from 0 to 8192 [ 206.982760][T20836] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 207.040018][T20842] netlink: 'syz.1.5252': attribute type 5 has an invalid length. [ 207.083397][T20851] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 207.096301][T20848] loop1: detected capacity change from 0 to 128 [ 207.126136][T20836] Falling back ldisc for ttyS3. [ 207.138860][T20848] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 207.186782][T20848] ext4 filesystem being mounted at /996/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.250248][ T3327] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 207.259761][T20851] Falling back ldisc for ttyS3. [ 207.293694][T20875] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20875 comm=syz.1.5259 [ 207.295632][T20878] xt_hashlimit: max too large, truncated to 1048576 [ 207.334977][T20878] __nla_validate_parse: 6 callbacks suppressed [ 207.334991][T20878] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5261'. [ 207.362214][T20878] loop4: detected capacity change from 0 to 512 [ 207.374538][T20875] geneve4: entered promiscuous mode [ 207.377323][T20878] EXT4-fs: Ignoring removed nobh option [ 207.379807][T20875] geneve4: entered allmulticast mode [ 207.392932][T20878] EXT4-fs: journaled quota format not specified [ 207.561203][T20910] vhci_hcd: invalid port number 157 [ 207.566966][T20910] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 207.652009][T20921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20921 comm=syz.4.5272 [ 207.763351][T20930] xt_hashlimit: max too large, truncated to 1048576 [ 207.817419][T20930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5275'. [ 207.829598][T20932] vhci_hcd: invalid port number 157 [ 207.834853][T20932] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 207.922962][T20934] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=20934 comm=syz.1.5276 [ 207.983977][T20934] geneve4: entered promiscuous mode [ 207.989291][T20934] geneve4: entered allmulticast mode [ 208.158761][T20959] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 208.206639][T20963] vhci_hcd: invalid port number 157 [ 208.211944][T20963] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 208.226752][T20959] Falling back ldisc for ttyS3. [ 208.330520][T20986] vhci_hcd: invalid port number 157 [ 208.336400][T20986] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 208.529888][T21011] program syz.0.5300 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.603319][T21018] xt_hashlimit: max too large, truncated to 1048576 [ 208.624260][T21022] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 208.634156][T21018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5302'. [ 208.695587][T21022] Falling back ldisc for ttyS3. [ 208.725244][T21031] xt_hashlimit: max too large, truncated to 1048576 [ 208.733222][T21031] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5307'. [ 208.768089][T21035] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5308'. [ 208.839580][T21041] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 208.869770][T21038] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.910779][T21046] vhci_hcd: invalid port number 157 [ 208.916092][T21046] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 209.034799][T21041] Falling back ldisc for ttyS3. [ 209.040659][T21057] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 209.093391][T21068] xt_hashlimit: max too large, truncated to 1048576 [ 209.102160][T21068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5321'. [ 209.125167][T21057] Falling back ldisc for ttyS3. [ 209.217990][T21092] vhci_hcd: invalid port number 157 [ 209.223222][T21092] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 209.516680][T21121] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 209.575956][T21121] Falling back ldisc for ttyS3. [ 209.609042][T21126] sctp: [Deprecated]: syz.4.5332 (pid 21126) Use of int in maxseg socket option. [ 209.609042][T21126] Use struct sctp_assoc_value instead [ 209.738256][T21134] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 209.814949][T21134] Falling back ldisc for ttyS3. [ 209.904679][ T29] kauditd_printk_skb: 995 callbacks suppressed [ 209.904693][ T29] audit: type=1326 audit(1732565053.649:26607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21156 comm="syz.1.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1550fae819 code=0x7ffc0000 [ 209.946033][T21160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5342'. [ 209.978407][ T29] audit: type=1326 audit(1732565053.679:26608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21156 comm="syz.1.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7f1550fae819 code=0x7ffc0000 [ 210.002623][ T29] audit: type=1326 audit(1732565053.679:26609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21156 comm="syz.1.5341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1550fae819 code=0x7ffc0000 [ 210.026788][ T29] audit: type=1400 audit(1732565053.699:26610): avc: denied { write } for pid=21136 comm="syz.2.5337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 210.076470][T21172] netlink: 'syz.3.5346': attribute type 4 has an invalid length. [ 210.146456][ T29] audit: type=1400 audit(1732565053.889:26611): avc: denied { ioctl } for pid=21180 comm="syz.3.5347" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 210.151331][T21185] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 210.195753][T21187] bpf_get_probe_write_proto: 5 callbacks suppressed [ 210.195766][T21187] syz.1.5350[21187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.204003][T21187] syz.1.5350[21187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.219297][T21187] syz.1.5350[21187] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 210.267633][ T29] audit: type=1400 audit(1732565054.009:26612): avc: denied { search } for pid=21195 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.320305][ T29] audit: type=1400 audit(1732565054.009:26613): avc: denied { getattr } for pid=21195 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.sl0.link" dev="tmpfs" ino=12981 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 210.346366][ T29] audit: type=1400 audit(1732565054.009:26614): avc: denied { write } for pid=21195 comm="rm" name="hook-state" dev="tmpfs" ino=414 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.368995][ T29] audit: type=1400 audit(1732565054.009:26615): avc: denied { remove_name } for pid=21195 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=12981 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.393277][ T29] audit: type=1400 audit(1732565054.009:26616): avc: denied { unlink } for pid=21195 comm="rm" name="resolv.conf.sl0.link" dev="tmpfs" ino=12981 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 210.419604][T21185] Falling back ldisc for ttyS3. [ 210.532097][T21227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.540833][T21227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.558176][T21224] No such timeout policy "syz0" [ 210.626797][T21234] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 210.666164][T21236] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 210.695132][T21234] Falling back ldisc for ttyS3. [ 210.745217][T21236] Falling back ldisc for ttyS3. [ 210.797145][T21253] selinux_netlink_send: 8 callbacks suppressed [ 210.797162][T21253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21253 comm=syz.0.5373 [ 210.877573][T21264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5376'. [ 211.004773][T21280] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21280 comm=syz.1.5380 [ 211.048923][T21280] geneve4: entered promiscuous mode [ 211.054177][T21280] geneve4: entered allmulticast mode [ 211.098046][T21296] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 211.175349][T21296] Falling back ldisc for ttyS3. [ 211.194636][T21308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21308 comm=syz.3.5386 [ 211.277422][T21308] geneve4: entered promiscuous mode [ 211.282685][T21308] geneve4: entered allmulticast mode [ 211.300667][T21324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21324 comm=syz.1.5389 [ 211.343374][T21324] geneve4: entered promiscuous mode [ 211.349330][T21324] geneve4: entered allmulticast mode [ 211.415166][T21342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21342 comm=syz.3.5395 [ 211.475750][T21353] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 211.498233][T21342] geneve4: entered promiscuous mode [ 211.503470][T21342] geneve4: entered allmulticast mode [ 211.532830][T21358] vxcan1: tx address claim with dest, not broadcast [ 211.565957][T21361] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 211.644913][T21361] Falling back ldisc for ttyS3. [ 211.661942][T21374] xt_hashlimit: max too large, truncated to 1048576 [ 211.685677][T21377] loop1: detected capacity change from 0 to 512 [ 211.688840][T21374] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5403'. [ 211.724242][T21377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 211.733232][T21387] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5406'. [ 211.746368][T21377] ext4 filesystem being mounted at /1031/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.797124][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.805757][T21397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21397 comm=syz.0.5408 [ 211.828549][T21401] syz.3.5410[21401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.828890][T21401] syz.3.5410[21401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.850559][T21401] syz.3.5410[21401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 211.864165][T21407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21407 comm=syz.1.5409 [ 211.950875][T21407] geneve4: entered promiscuous mode [ 211.956393][T21407] geneve4: entered allmulticast mode [ 211.976734][T21420] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21420 comm=syz.0.5413 [ 212.029847][T21428] loop1: detected capacity change from 0 to 512 [ 212.039164][T21428] EXT4-fs: Ignoring removed orlov option [ 212.062584][T21428] EXT4-fs error (device loop1): __ext4_iget:4984: inode #15: block 1803188595: comm syz.1.5417: invalid block [ 212.075549][T21428] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.5417: couldn't read orphan inode 15 (err -117) [ 212.088945][T21428] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.121946][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.163162][T21443] loop1: detected capacity change from 0 to 512 [ 212.172092][T21443] EXT4-fs (loop1): failed to initialize system zone (-117) [ 212.179597][T21443] EXT4-fs (loop1): mount failed [ 212.200634][T21449] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21449 comm=syz.3.5426 [ 212.226006][T21449] geneve4: entered promiscuous mode [ 212.231229][T21449] geneve4: entered allmulticast mode [ 212.251057][T21454] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 212.324499][T21454] Falling back ldisc for ttyS3. [ 212.332708][T21457] loop4: detected capacity change from 0 to 512 [ 212.365827][T21457] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 212.387519][T21457] System zones: 0-2, 18-18, 34-35 [ 212.399215][T21465] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 212.409241][T21457] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.435554][T21457] ext4 filesystem being mounted at /1057/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.468172][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.598270][T21481] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 212.616019][T21484] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 212.685283][T21481] Falling back ldisc for ttyS3. [ 212.736414][T21503] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21503 comm=syz.1.5440 [ 212.785317][T21503] geneve4: entered promiscuous mode [ 212.790550][T21503] geneve4: entered allmulticast mode [ 212.839423][T21520] __nla_validate_parse: 4 callbacks suppressed [ 212.839438][T21520] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5442'. [ 212.929639][T21532] vhci_hcd: invalid port number 157 [ 212.934986][T21532] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 212.950701][T21534] loop1: detected capacity change from 0 to 512 [ 212.972450][T21534] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.007809][T21534] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.026104][T21540] xt_hashlimit: max too large, truncated to 1048576 [ 213.043976][T21540] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5447'. [ 213.056329][T21534] ext4 filesystem being mounted at /1041/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.100034][T21534] EXT4-fs error (device loop1): ext4_get_first_dir_block:3547: inode #12: block 32: comm syz.1.5445: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 213.147878][T21534] EXT4-fs error (device loop1): ext4_get_first_dir_block:3550: inode #12: comm syz.1.5445: directory missing '.' [ 213.191382][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.202099][T21552] vhci_hcd: invalid port number 157 [ 213.207376][T21552] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 213.348013][T21571] xt_hashlimit: max too large, truncated to 1048576 [ 213.356246][T21571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5461'. [ 213.388490][T21574] vhci_hcd: invalid port number 157 [ 213.393729][T21574] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 213.412803][T21571] loop1: detected capacity change from 0 to 512 [ 213.444119][T21571] EXT4-fs: Ignoring removed nobh option [ 213.461825][T21571] EXT4-fs: journaled quota format not specified [ 213.526533][T21584] geneve4: entered promiscuous mode [ 213.531773][T21584] geneve4: entered allmulticast mode [ 213.896671][T21616] xt_hashlimit: max too large, truncated to 1048576 [ 213.915838][T21616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5477'. [ 214.003192][T21614] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5474'. [ 214.023648][T21614] tipc: Enabling of bearer rejected, failed to enable media [ 214.061659][T21631] geneve4: entered promiscuous mode [ 214.066933][T21631] geneve4: entered allmulticast mode [ 214.078316][T21633] netlink: 124 bytes leftover after parsing attributes in process `syz.3.5484'. [ 214.101601][T21635] vhci_hcd: invalid port number 157 [ 214.107500][T21635] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 214.170833][ T3368] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 214.178875][ T3368] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 214.208908][ T3368] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 214.270383][T21649] geneve4: entered promiscuous mode [ 214.276418][T21649] geneve4: entered allmulticast mode [ 214.414888][T21663] geneve4: entered promiscuous mode [ 214.420152][T21663] geneve4: entered allmulticast mode [ 214.514995][T21671] loop1: detected capacity change from 0 to 1024 [ 214.546093][T21671] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.592263][T21680] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5501'. [ 214.709204][T21687] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 214.758598][T21671] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 214.774443][T21671] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28 [ 214.786857][T21671] EXT4-fs (loop1): This should not happen!! Data will be lost [ 214.786857][T21671] [ 214.797288][T21671] EXT4-fs (loop1): Total free blocks count 0 [ 214.797675][T21692] vhci_hcd: invalid port number 157 [ 214.803264][T21671] EXT4-fs (loop1): Free/Dirty block details [ 214.803279][T21671] EXT4-fs (loop1): free_blocks=68451041280 [ 214.803292][T21671] EXT4-fs (loop1): dirty_blocks=16 [ 214.808502][T21692] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 214.814402][T21671] EXT4-fs (loop1): Block reservation details [ 214.839484][T21671] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 214.845584][T21687] Falling back ldisc for ttyS3. [ 214.921264][ T29] kauditd_printk_skb: 916 callbacks suppressed [ 214.921279][ T29] audit: type=1326 audit(1732565058.659:27533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.4.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c090e819 code=0x7ffc0000 [ 214.937691][T21698] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 214.951787][ T29] audit: type=1326 audit(1732565058.659:27534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.4.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c090e819 code=0x7ffc0000 [ 214.983134][ T29] audit: type=1326 audit(1732565058.659:27535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.4.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f36c090e819 code=0x7ffc0000 [ 214.989856][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.007333][ T29] audit: type=1326 audit(1732565058.659:27536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.4.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c090e819 code=0x7ffc0000 [ 215.007366][ T29] audit: type=1326 audit(1732565058.659:27537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.4.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c090e819 code=0x7ffc0000 [ 215.007452][ T29] audit: type=1326 audit(1732565058.699:27538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.4.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f36c090e819 code=0x7ffc0000 [ 215.007475][ T29] audit: type=1326 audit(1732565058.699:27539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.4.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c090e819 code=0x7ffc0000 [ 215.112208][ T29] audit: type=1326 audit(1732565058.699:27540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.4.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f36c090e819 code=0x7ffc0000 [ 215.136261][ T29] audit: type=1326 audit(1732565058.699:27541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.4.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36c090e819 code=0x7ffc0000 [ 215.159955][ T29] audit: type=1326 audit(1732565058.699:27542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21695 comm="syz.4.5508" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f36c090e819 code=0x7ffc0000 [ 215.279267][T21719] wireguard0: entered promiscuous mode [ 215.285612][T21719] wireguard0: entered allmulticast mode [ 215.306455][T21717] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5515'. [ 215.328750][T21717] tipc: Enabling of bearer rejected, already enabled [ 215.421079][T21745] xt_TPROXY: Can be used only with -p tcp or -p udp [ 215.562524][T21759] xt_hashlimit: max too large, truncated to 1048576 [ 215.577264][T21759] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5537'. [ 215.601979][T21759] loop4: detected capacity change from 0 to 512 [ 215.614751][T21759] EXT4-fs: Ignoring removed nobh option [ 215.627028][T21759] EXT4-fs: journaled quota format not specified [ 215.662245][T21764] geneve4: entered promiscuous mode [ 215.667538][T21764] geneve4: entered allmulticast mode [ 215.678019][T21772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5544'. [ 215.768408][T21783] syz.2.5552[21783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.768522][T21783] syz.2.5552[21783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.781180][T21783] syz.2.5552[21783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.927339][T21804] selinux_netlink_send: 11 callbacks suppressed [ 215.927356][T21804] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21804 comm=syz.4.5559 [ 216.088938][T21826] program syz.2.5570 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.141976][T21836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21836 comm=syz.2.5574 [ 216.147033][T21835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21835 comm=syz.3.5575 [ 216.212234][T21835] geneve4: entered promiscuous mode [ 216.217561][T21835] geneve4: entered allmulticast mode [ 216.246110][T21839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21839 comm=syz.0.5577 [ 216.278340][T21845] xt_hashlimit: max too large, truncated to 1048576 [ 216.297609][T21848] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21848 comm=syz.3.5580 [ 216.448220][T21862] syz.2.5585[21862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.448285][T21862] syz.2.5585[21862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.480347][T21862] syz.2.5585[21862] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.502644][T21867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21867 comm=syz.3.5586 [ 216.556934][T21867] geneve4: entered promiscuous mode [ 216.562263][T21867] geneve4: entered allmulticast mode [ 216.620631][T21883] xt_hashlimit: max too large, truncated to 1048576 [ 216.678812][T21883] loop1: detected capacity change from 0 to 512 [ 216.699635][T21883] EXT4-fs: Ignoring removed nobh option [ 216.716656][T21883] EXT4-fs: journaled quota format not specified [ 216.870405][T21914] loop1: detected capacity change from 0 to 512 [ 216.886543][T21914] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 216.900721][T21912] binfmt_misc: register: failed to install interpreter file ./file0 [ 217.011151][ T3327] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 217.188548][T21932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21932 comm=syz.3.5616 [ 217.230609][T21932] geneve4: entered promiscuous mode [ 217.236498][T21932] geneve4: entered allmulticast mode [ 217.407463][T21945] binfmt_misc: register: failed to install interpreter file ./file0 [ 217.549689][T21953] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21953 comm=syz.3.5624 [ 217.576856][T21953] geneve4: entered promiscuous mode [ 217.582227][T21953] geneve4: entered allmulticast mode [ 217.827632][T21971] loop4: detected capacity change from 0 to 128 [ 217.905042][T21971] syz.4.5629: attempt to access beyond end of device [ 217.905042][T21971] loop4: rw=2049, sector=177, nr_sectors = 1 limit=128 [ 217.920328][T21976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=21976 comm=syz.0.5633 [ 217.965416][T21978] xt_hashlimit: max too large, truncated to 1048576 [ 218.026873][T21978] __nla_validate_parse: 15 callbacks suppressed [ 218.026889][T21978] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5634'. [ 218.073143][ T6113] kworker/u8:15: attempt to access beyond end of device [ 218.073143][ T6113] loop4: rw=1, sector=153, nr_sectors = 24 limit=128 [ 218.086484][T21978] loop1: detected capacity change from 0 to 512 [ 218.101846][T21978] EXT4-fs: Ignoring removed nobh option [ 218.111847][T21978] EXT4-fs: journaled quota format not specified [ 218.118321][T21991] loop4: detected capacity change from 0 to 512 [ 218.154347][T21991] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.5640: corrupted in-inode xattr: invalid ea_ino [ 218.178828][T21991] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.5640: couldn't read orphan inode 12 (err -117) [ 218.210208][T21991] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.238447][T22011] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5647'. [ 218.261251][T21991] EXT4-fs error (device loop4): ext4_add_entry:2444: inode #2: comm syz.4.5640: Directory hole found for htree leaf block 0 [ 218.277836][T22015] vhci_hcd: invalid port number 157 [ 218.283146][T22015] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 218.323974][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.366466][T22026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5652'. [ 218.391541][T22026] tipc: Enabling of bearer rejected, already enabled [ 218.431139][T22032] xt_hashlimit: max too large, truncated to 1048576 [ 218.442408][T22032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5659'. [ 218.458049][T22034] netlink: 'syz.1.5658': attribute type 10 has an invalid length. [ 218.470785][T22032] loop4: detected capacity change from 0 to 512 [ 218.478378][T22032] EXT4-fs: Ignoring removed nobh option [ 218.485226][T22032] EXT4-fs: journaled quota format not specified [ 218.506308][T22038] syz.4.5661[22038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.506436][T22038] syz.4.5661[22038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.520705][T22038] syz.4.5661[22038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.586311][T22045] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22045 comm=syz.1.5664 [ 218.650711][T22049] geneve4: entered promiscuous mode [ 218.655982][T22049] geneve4: entered allmulticast mode [ 218.774809][T22067] syz.3.5674[22067] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 218.819590][T22074] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5678'. [ 218.992697][T22094] xt_hashlimit: max too large, truncated to 1048576 [ 219.010113][T22094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5686'. [ 219.028885][T22094] loop1: detected capacity change from 0 to 512 [ 219.037095][T22094] EXT4-fs: Ignoring removed nobh option [ 219.043209][T22094] EXT4-fs: journaled quota format not specified [ 219.442751][T22137] netlink: 79 bytes leftover after parsing attributes in process `syz.1.5706'. [ 219.493322][T22138] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5704'. [ 219.517767][T22138] tipc: Enabling of bearer rejected, failed to enable media [ 219.773384][T22183] geneve4: entered promiscuous mode [ 219.778796][T22183] geneve4: entered allmulticast mode [ 219.841988][T22190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5727'. [ 219.873559][T22194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5729'. [ 219.949146][ T29] kauditd_printk_skb: 1063 callbacks suppressed [ 219.949160][ T29] audit: type=1400 audit(1732565063.679:28606): avc: denied { create } for pid=22200 comm="syz.3.5731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.975756][ T29] audit: type=1400 audit(1732565063.689:28607): avc: denied { shutdown } for pid=22200 comm="syz.3.5731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 219.996165][ T29] audit: type=1400 audit(1732565063.689:28608): avc: denied { getopt } for pid=22200 comm="syz.3.5731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.016525][ T29] audit: type=1400 audit(1732565063.689:28609): avc: denied { connect } for pid=22200 comm="syz.3.5731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 220.036985][ T29] audit: type=1400 audit(1732565063.689:28610): avc: denied { name_connect } for pid=22200 comm="syz.3.5731" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 220.057927][ T29] audit: type=1400 audit(1732565063.759:28611): avc: denied { watch_reads } for pid=22202 comm="syz.2.5733" path="/1102" dev="tmpfs" ino=5899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 220.081282][ T29] audit: type=1400 audit(1732565063.759:28612): avc: denied { read write } for pid=22202 comm="syz.2.5733" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 220.086911][T22208] vhci_hcd: invalid port number 157 [ 220.105636][ T29] audit: type=1400 audit(1732565063.759:28613): avc: denied { open } for pid=22202 comm="syz.2.5733" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 220.105738][ T29] audit: type=1400 audit(1732565063.759:28614): avc: denied { write } for pid=22202 comm="syz.2.5733" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 220.162438][T22208] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 220.178190][ T29] audit: type=1400 audit(1732565063.919:28615): avc: denied { create } for pid=22211 comm="syz.3.5735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 220.360752][T22227] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.469516][T22226] tipc: Enabling of bearer rejected, failed to enable media [ 220.509512][T22242] vhci_hcd: invalid port number 157 [ 220.516337][T22242] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 220.632370][T22248] xt_hashlimit: max too large, truncated to 1048576 [ 220.843286][T22274] vhci_hcd: invalid port number 157 [ 220.848631][T22274] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 220.951182][T22290] selinux_netlink_send: 9 callbacks suppressed [ 220.951198][T22290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22290 comm=syz.0.5769 [ 220.991003][T22292] vhci_hcd: invalid port number 157 [ 220.996924][T22292] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 221.125402][T22300] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22300 comm=syz.4.5773 [ 221.252384][T22310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22310 comm=syz.4.5778 [ 221.285593][T22315] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22315 comm=syz.0.5781 [ 221.317191][T22312] pim6reg: entered allmulticast mode [ 221.346808][T22311] pim6reg: left allmulticast mode [ 221.400238][T22326] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22326 comm=syz.3.5786 [ 221.431398][T22334] xt_hashlimit: max too large, truncated to 1048576 [ 221.440815][T22326] geneve4: entered promiscuous mode [ 221.447009][T22326] geneve4: entered allmulticast mode [ 221.564055][T22348] vhci_hcd: invalid port number 157 [ 221.569954][T22348] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 221.794224][T22359] bond4: entered promiscuous mode [ 221.799340][T22359] bond4: entered allmulticast mode [ 221.806480][T22359] 8021q: adding VLAN 0 to HW filter on device bond4 [ 221.814959][T22361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22361 comm=syz.3.5798 [ 221.837136][T22359] bond4 (unregistering): Released all slaves [ 221.881521][T22370] vhci_hcd: invalid port number 157 [ 221.888879][T22370] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 222.009519][T22382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22382 comm=syz.3.5808 [ 222.034072][T22375] tipc: Enabling of bearer rejected, failed to enable media [ 222.064102][T22382] geneve4: entered promiscuous mode [ 222.070903][T22382] geneve4: entered allmulticast mode [ 222.155334][T22389] SET target dimension over the limit! [ 222.166495][T22393] bpf_get_probe_write_proto: 5 callbacks suppressed [ 222.166511][T22393] syz.2.5812[22393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.173596][T22393] syz.2.5812[22393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.186558][T22393] syz.2.5812[22393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.204051][T22396] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22396 comm=syz.3.5814 [ 222.315639][T22411] netlink: 'syz.1.5821': attribute type 21 has an invalid length. [ 222.324108][T22411] netlink: 'syz.1.5821': attribute type 1 has an invalid length. [ 222.342451][T22413] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22413 comm=syz.3.5822 [ 222.368942][T22419] pim6reg: entered allmulticast mode [ 222.387556][T22414] pim6reg: left allmulticast mode [ 222.423704][T22421] tipc: Enabling of bearer rejected, already enabled [ 222.486199][T22428] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22428 comm=syz.3.5829 [ 222.513829][T22428] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.523714][T22428] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.533081][T22428] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.543021][T22428] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 222.553102][T22428] geneve4: entered promiscuous mode [ 222.559876][T22428] geneve4: entered allmulticast mode [ 222.665897][T22444] atomic_op ffff8881177f5d28 conn xmit_atomic 0000000000000000 [ 222.686988][T22448] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 222.699132][T22449] tipc: Enabling of bearer rejected, failed to enable media [ 222.755651][T22455] 9pnet: Could not find request transport: f [ 223.006384][T22480] geneve4: entered promiscuous mode [ 223.011636][T22480] geneve4: entered allmulticast mode [ 223.060277][T22483] infiniband syz1: set active [ 223.093315][T22483] __nla_validate_parse: 14 callbacks suppressed [ 223.093332][T22483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5853'. [ 223.144366][T22488] tipc: Enabling of bearer rejected, already enabled [ 223.173870][T22499] loop1: detected capacity change from 0 to 128 [ 223.223400][T22503] Invalid ELF header magic: != ELF [ 223.271335][T22505] bond2: entered promiscuous mode [ 223.277313][T22505] bond2: entered allmulticast mode [ 223.295442][T22505] 8021q: adding VLAN 0 to HW filter on device bond2 [ 223.331860][T22519] loop1: detected capacity change from 0 to 128 [ 223.351942][T22505] bond2 (unregistering): Released all slaves [ 223.360639][T22519] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 223.383632][T22519] ext4 filesystem being mounted at /1147/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 223.420800][ T3327] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 223.591834][T22536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5872'. [ 223.601535][T22536] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5872'. [ 223.626670][T22550] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5884'. [ 223.738550][T22566] atomic_op ffff888116954d28 conn xmit_atomic 0000000000000000 [ 223.759729][T22567] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5887'. [ 223.770117][T22567] tipc: Enabling of bearer rejected, already enabled [ 223.863259][T22575] loop1: detected capacity change from 0 to 2048 [ 223.890587][T22582] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5895'. [ 223.907574][T22575] loop1: p1 < > p4 [ 223.907756][T22582] tipc: Enabling of bearer rejected, failed to enable media [ 223.922407][T22575] loop1: p4 size 8388608 extends beyond EOD, truncated [ 224.014226][ T4003] udevd[4003]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 224.016223][ T3306] udevd[3306]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 224.069714][T22592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5897'. [ 224.079813][T22592] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5897'. [ 224.297237][T22604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5905'. [ 224.335872][T22603] tipc: Enabling of bearer rejected, failed to enable media [ 224.503585][T22614] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5906'. [ 225.099263][T22667] infiniband syz1: set active [ 225.136225][ T29] kauditd_printk_skb: 1119 callbacks suppressed [ 225.136238][ T29] audit: type=1400 audit(1732565068.879:29735): avc: denied { connect } for pid=22676 comm="syz.1.5932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.170448][ T29] audit: type=1400 audit(1732565068.909:29736): avc: denied { read } for pid=22676 comm="syz.1.5932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 225.173192][T22667] tipc: Enabling of bearer rejected, already enabled [ 225.313049][ T29] audit: type=1400 audit(1732565069.049:29737): avc: denied { execute } for pid=22689 comm="syz.0.5940" path="/1339/memory.stat" dev="tmpfs" ino=7172 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 225.421750][T22701] tipc: Enabling of bearer rejected, already enabled [ 225.449482][ T29] audit: type=1400 audit(1732565069.189:29738): avc: denied { write } for pid=22703 comm="syz.0.5944" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 225.476543][ T29] audit: type=1400 audit(1732565069.209:29739): avc: denied { write } for pid=22705 comm="syz.0.5945" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 225.502199][ T29] audit: type=1400 audit(1732565069.229:29740): avc: denied { append } for pid=22707 comm="syz.0.5946" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 225.660942][ T29] audit: type=1326 audit(1732565069.399:29741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22720 comm="syz.2.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd704be819 code=0x7ffc0000 [ 225.686232][ T29] audit: type=1326 audit(1732565069.399:29742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22720 comm="syz.2.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd704be819 code=0x7ffc0000 [ 225.711050][ T29] audit: type=1326 audit(1732565069.399:29743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22720 comm="syz.2.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdd704be819 code=0x7ffc0000 [ 225.735611][ T29] audit: type=1326 audit(1732565069.399:29744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22720 comm="syz.2.5952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd704be819 code=0x7ffc0000 [ 226.138166][T22783] syz.3.5980[22783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.138290][T22783] syz.3.5980[22783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.159823][T22783] syz.3.5980[22783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.239230][ T9] kernel write not supported for file /cpu/0/msr (pid: 9 comm: kworker/0:1) [ 226.350194][T22807] vhci_hcd: invalid port number 157 [ 226.356104][T22807] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 226.578954][T22818] infiniband syz1: set active [ 226.611849][T22818] tipc: Enabling of bearer rejected, already enabled [ 226.716394][T22829] selinux_netlink_send: 11 callbacks suppressed [ 226.716411][T22829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22829 comm=syz.4.5999 [ 226.742358][T22833] netlink: 'syz.0.6000': attribute type 5 has an invalid length. [ 226.754401][T22835] syz.2.6001[22835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.754521][T22835] syz.2.6001[22835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.782948][T22835] syz.2.6001[22835] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 226.845103][T22842] loop4: detected capacity change from 0 to 512 [ 226.881093][T22842] EXT4-fs: Ignoring removed bh option [ 226.893587][T22842] EXT4-fs error (device loop4): __ext4_iget:4984: inode #15: block 1803188595: comm syz.4.6004: invalid block [ 226.907517][T22842] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.6004: couldn't read orphan inode 15 (err -117) [ 226.927767][T22842] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.981496][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.028132][T22868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22868 comm=syz.1.6014 [ 227.071060][T22872] program syz.4.6015 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.093570][T22864] lo speed is unknown, defaulting to 1000 [ 227.170900][T22881] vhci_hcd: invalid port number 157 [ 227.176616][T22881] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 227.273104][T22886] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22886 comm=syz.2.6021 [ 227.295322][T22888] syz.0.6022[22888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.295389][T22888] syz.0.6022[22888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.316055][T22888] syz.0.6022[22888] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.447731][T22907] syz.3.6029[22907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.465359][T22902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22902 comm=syz.0.6027 [ 227.506039][T22907] syz.3.6029[22907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.506102][T22907] syz.3.6029[22907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 227.563558][T22918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12392 sclass=netlink_route_socket pid=22918 comm=syz.0.6034 [ 227.924409][T22959] infiniband syz1: set active [ 227.980397][T22959] tipc: Enabling of bearer rejected, already enabled [ 228.005976][T22973] loop1: detected capacity change from 0 to 128 [ 228.020037][T22973] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 228.035135][T22973] ext4 filesystem being mounted at /1186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.097639][T22973] EXT4-fs (loop1): resizing filesystem from 64 to 1 blocks [ 228.106451][T22973] EXT4-fs warning (device loop1): ext4_resize_fs:2042: can't shrink FS - resize aborted [ 228.159760][ T3327] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.186394][T22981] __nla_validate_parse: 24 callbacks suppressed [ 228.186408][T22981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6062'. [ 228.283129][T22977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.302076][T22977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.437293][T22999] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6067'. [ 228.439421][T22995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6064'. [ 228.455878][T22995] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6064'. [ 228.831646][T23024] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6075'. [ 228.850326][T23024] tipc: Enabling of bearer rejected, failed to enable media [ 228.951201][T23032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6074'. [ 228.961837][T23032] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6074'. [ 229.110367][T23053] netlink: 'syz.0.6087': attribute type 1 has an invalid length. [ 229.118213][T23053] netlink: 'syz.0.6087': attribute type 2 has an invalid length. [ 229.220327][T23052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6084'. [ 229.275814][T23052] tipc: Enabling of bearer rejected, already enabled [ 229.411667][T23078] syz.3.6098[23078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.411771][T23078] syz.3.6098[23078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.427199][T23078] syz.3.6098[23078] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 229.549719][T23089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6096'. [ 229.571967][T23089] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6096'. [ 229.802588][T23116] netlink: 'syz.0.6113': attribute type 5 has an invalid length. [ 229.930057][T23129] tipc: Enabling of bearer rejected, already enabled [ 230.037111][T23143] syz.4.6125[23143] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 230.367993][ T29] kauditd_printk_skb: 291 callbacks suppressed [ 230.368030][ T29] audit: type=1326 audit(1732565074.109:30036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23176 comm="syz.3.6136" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f71fd10e819 code=0x0 [ 230.550688][ T29] audit: type=1400 audit(1732565074.289:30037): avc: denied { cpu } for pid=23184 comm="syz.2.6141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 230.683507][ T29] audit: type=1326 audit(1732565074.419:30038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1550fae819 code=0x7ffc0000 [ 230.690303][T23195] loop1: detected capacity change from 0 to 2048 [ 230.708862][ T29] audit: type=1326 audit(1732565074.419:30039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1550fae819 code=0x7ffc0000 [ 230.739524][ T29] audit: type=1326 audit(1732565074.419:30040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1550fae819 code=0x7ffc0000 [ 230.763407][ T29] audit: type=1326 audit(1732565074.419:30041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1550fae853 code=0x7ffc0000 [ 230.795400][ T29] audit: type=1326 audit(1732565074.429:30042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1550fad2ff code=0x7ffc0000 [ 230.819474][ T29] audit: type=1326 audit(1732565074.429:30043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f1550fae8a7 code=0x7ffc0000 [ 230.845403][ T29] audit: type=1326 audit(1732565074.429:30044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1550fad1b0 code=0x7ffc0000 [ 230.870561][ T29] audit: type=1326 audit(1732565074.429:30045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.1.6146" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1550fae41b code=0x7ffc0000 [ 230.927441][T23211] SELinux: failed to load policy [ 231.041278][T23226] netlink: 'syz.0.6158': attribute type 1 has an invalid length. [ 231.379593][T23271] netlink: 'syz.4.6178': attribute type 2 has an invalid length. [ 231.409928][T23275] pimreg4: entered allmulticast mode [ 231.416685][T23274] pimreg4: left allmulticast mode [ 231.450875][T23278] infiniband syz1: set active [ 231.469224][T23278] tipc: Enabling of bearer rejected, already enabled [ 231.523749][T23286] loop4: detected capacity change from 0 to 128 [ 231.634093][T23295] vhci_hcd: invalid port number 157 [ 231.640975][T23295] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 231.806893][T23302] loop4: detected capacity change from 0 to 512 [ 231.813782][T23302] EXT4-fs: Ignoring removed bh option [ 231.820881][T23302] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 231.832731][T23302] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 231.840869][T23302] EXT4-fs (loop4): orphan cleanup on readonly fs [ 231.841533][T23304] wireguard0: entered promiscuous mode [ 231.848700][T23302] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.6192: Failed to acquire dquot type 1 [ 231.849281][T23302] EXT4-fs (loop4): Remounting filesystem read-only [ 231.854248][T23304] wireguard0: entered allmulticast mode [ 231.879129][T23302] EXT4-fs (loop4): 1 orphan inode deleted [ 231.888148][T23302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 231.901226][T23302] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 231.909915][T23302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.082050][T23324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.091160][T23324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.215536][T23319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.227212][T23319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.264226][T23351] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 232.300732][T23349] tipc: Enabling of bearer rejected, failed to enable media [ 232.342691][T23360] vhci_hcd: invalid port number 157 [ 232.348479][T23360] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 232.823711][T23393] Invalid ELF header magic: != ELF [ 232.895728][T23404] vhci_hcd: invalid port number 157 [ 232.900959][T23404] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 233.116723][T23423] vhci_hcd: invalid port number 157 [ 233.121970][T23423] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 233.158896][T23425] program syz.4.6238 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.286475][T23435] __nla_validate_parse: 31 callbacks suppressed [ 233.286490][T23435] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6243'. [ 233.500461][T23453] netlink: 'syz.3.6251': attribute type 1 has an invalid length. [ 233.531203][T23454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6240'. [ 233.541687][T23454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6240'. [ 233.577398][T23465] vhci_hcd: invalid port number 157 [ 233.582636][T23465] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 233.689152][T23474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6245'. [ 233.698225][T23474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6245'. [ 233.734039][T23479] vhci_hcd: invalid port number 157 [ 233.739978][T23479] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 234.022786][T23489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6262'. [ 234.061804][T23492] netlink: 87 bytes leftover after parsing attributes in process `syz.0.6263'. [ 234.096109][T23491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6261'. [ 234.106428][T23491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6261'. [ 234.191886][T23510] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6271'. [ 234.229077][T23514] tmpfs: Unknown parameter 'm' [ 234.316643][T23525] vhci_hcd: invalid port number 157 [ 234.321877][T23525] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 234.372085][T23529] tipc: Enabling of bearer rejected, failed to enable media [ 234.599049][T23553] tipc: Enabling of bearer rejected, already enabled [ 234.638854][T23560] usb usb8: check_ctrlrecip: process 23560 (syz.3.6293) requesting ep 01 but needs 81 [ 234.649593][T23560] usb usb8: usbfs: process 23560 (syz.3.6293) did not claim interface 0 before use [ 234.659026][T23560] vhci_hcd: default hub control req: 0200 v0000 i0001 l0 [ 234.678650][T23561] vhci_hcd: invalid port number 157 [ 234.683897][T23561] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 234.742677][T23564] vhci_hcd: invalid port number 157 [ 234.748617][T23564] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 234.912515][T23572] loop4: detected capacity change from 0 to 512 [ 234.925216][T23572] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 234.950364][T23572] EXT4-fs (loop4): orphan cleanup on readonly fs [ 234.958867][T23572] EXT4-fs error (device loop4): ext4_orphan_get:1415: comm syz.4.6298: bad orphan inode 15 [ 234.970398][T23572] ext4_test_bit(bit=14, block=18) = 1 [ 234.977431][T23572] is_bad_inode(inode)=0 [ 234.981818][T23572] NEXT_ORPHAN(inode)=1023 [ 234.987241][T23572] max_ino=32 [ 234.990449][T23572] i_nlink=0 [ 234.993880][T23572] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2977: inode #15: comm syz.4.6298: corrupted xattr block 19: e_value size too large [ 235.010340][T23572] EXT4-fs warning (device loop4): ext4_evict_inode:276: xattr delete (err -117) [ 235.020330][T23572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 235.046935][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.274803][T23609] vhci_hcd: invalid port number 157 [ 235.280062][T23609] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 235.761036][T23619] lo speed is unknown, defaulting to 1000 [ 235.852789][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 235.852804][ T29] audit: type=1400 audit(1732565079.589:30078): avc: denied { setopt } for pid=23636 comm="syz.2.6319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 235.968130][T23647] bpf_get_probe_write_proto: 5 callbacks suppressed [ 235.968144][T23647] syz.0.6324[23647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.998941][T23647] syz.0.6324[23647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.020377][T23647] syz.0.6324[23647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 236.055461][T23655] vhci_hcd: invalid port number 157 [ 236.072742][T23655] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 236.163939][ T29] audit: type=1400 audit(1732565079.899:30079): avc: denied { map } for pid=23656 comm="syz.4.6328" path="socket:[66884]" dev="sockfs" ino=66884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 236.188800][ T29] audit: type=1400 audit(1732565079.899:30080): avc: denied { read } for pid=23656 comm="syz.4.6328" path="socket:[66884]" dev="sockfs" ino=66884 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 236.611411][ T29] audit: type=1400 audit(1732565080.349:30081): avc: denied { read } for pid=23689 comm="syz.0.6340" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 236.637127][ T29] audit: type=1400 audit(1732565080.349:30082): avc: denied { open } for pid=23689 comm="syz.0.6340" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 236.662513][ T29] audit: type=1400 audit(1732565080.349:30083): avc: denied { ioctl } for pid=23689 comm="syz.0.6340" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 236.732698][T23697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 236.837935][T23706] netlink: 'syz.1.6348': attribute type 2 has an invalid length. [ 236.936372][T23718] vhci_hcd: invalid port number 157 [ 236.941603][T23718] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 237.057498][T23727] loop1: detected capacity change from 0 to 512 [ 237.073962][T23727] EXT4-fs: Ignoring removed oldalloc option [ 237.106791][T23727] EXT4-fs error (device loop1): ext4_xattr_inode_iget:436: comm syz.1.6357: Parent and EA inode have the same ino 15 [ 237.119739][T23727] EXT4-fs (loop1): Remounting filesystem read-only [ 237.126922][T23727] EXT4-fs warning (device loop1): ext4_evict_inode:259: couldn't mark inode dirty (err -5) [ 237.145420][T23727] EXT4-fs (loop1): 1 orphan inode deleted [ 237.151479][T23727] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 237.163643][T23727] SELinux: (dev loop1, type ext4) getxattr errno 5 [ 237.171718][T23727] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.193306][ T29] audit: type=1400 audit(1732565080.909:30084): avc: denied { write } for pid=23733 comm="syz.2.6359" name="file0" dev="tmpfs" ino=6550 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 237.370835][T23745] Invalid ELF header magic: != ELF [ 237.752459][T23768] infiniband syz1: set active [ 237.827427][T23778] tipc: Enabling of bearer rejected, already enabled [ 238.476957][T23825] __nla_validate_parse: 22 callbacks suppressed [ 238.476972][T23825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6390'. [ 238.492467][T23825] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6390'. [ 238.502165][T23836] vhci_hcd: invalid port number 157 [ 238.507421][T23836] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 238.575148][T23838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6400'. [ 238.618541][T23838] tipc: Enabling of bearer rejected, already enabled [ 238.653493][T23840] xt_TPROXY: Can be used only with -p tcp or -p udp [ 238.703089][ T29] audit: type=1400 audit(1732565082.439:30085): avc: denied { setopt } for pid=23843 comm="syz.2.6405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 238.864954][T23859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6409'. [ 238.896834][T23859] tipc: Enabling of bearer rejected, already enabled [ 238.974461][T23868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6416'. [ 239.016585][ T29] audit: type=1400 audit(1732565082.759:30086): avc: denied { create } for pid=23869 comm="syz.3.6417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 239.090516][T23877] netlink: 'syz.3.6420': attribute type 10 has an invalid length. [ 239.099710][T23877] veth0_macvtap: left promiscuous mode [ 239.103596][T23880] vhci_hcd: invalid port number 157 [ 239.110578][T23880] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 239.138799][T23877] veth0_macvtap: entered promiscuous mode [ 239.146521][T23877] team0: Device macvtap0 failed to register rx_handler [ 239.157231][T23877] veth0_macvtap: left promiscuous mode [ 239.270234][ T29] audit: type=1400 audit(1732565083.009:30087): avc: denied { map } for pid=23889 comm="syz.3.6426" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 239.397369][T23902] loop1: detected capacity change from 0 to 512 [ 239.437905][T23902] EXT4-fs (loop1): too many log groups per flexible block group [ 239.448607][T23902] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 239.471463][T23907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6425'. [ 239.479851][T23902] EXT4-fs (loop1): mount failed [ 239.481694][T23907] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6425'. [ 239.528516][T23916] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6435'. [ 239.561553][T23918] netlink: 'syz.3.6436': attribute type 15 has an invalid length. [ 239.690525][T23925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6437'. [ 239.701942][T23925] tipc: Enabling of bearer rejected, already enabled [ 239.849086][T23953] IPv6: Can't replace route, no match found [ 239.891551][T23956] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6450'. [ 239.902176][T23956] tipc: Enabling of bearer rejected, failed to enable media [ 240.154386][T23978] xt_hashlimit: max too large, truncated to 1048576 [ 240.255286][T23991] vhci_hcd: invalid port number 157 [ 240.260699][T23991] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 240.393040][T24005] rtc_cmos 00:00: Alarms can be up to one day in the future [ 240.498919][T23996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.516270][T23996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.593048][T24025] 9pnet_rdma: rdma_create_trans (24025): problem binding to privport: 13 [ 240.801170][T24038] vhci_hcd: invalid port number 157 [ 240.808121][T24038] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 241.111545][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 241.111609][ T29] audit: type=1326 audit(1732565084.849:30118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24054 comm="syz.0.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16325e819 code=0x7ffc0000 [ 241.165438][ T29] audit: type=1326 audit(1732565084.879:30119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24054 comm="syz.0.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7fa16325e819 code=0x7ffc0000 [ 241.190217][ T29] audit: type=1326 audit(1732565084.879:30120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24054 comm="syz.0.6493" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16325e819 code=0x7ffc0000 [ 241.223769][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 241.231385][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 241.236749][T24065] program syz.4.6494 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.239601][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 241.256114][ T9] rtc_cmos 00:00: Alarms can be up to one day in the future [ 241.263424][ T9] rtc rtc0: __rtc_set_alarm: err=-22 [ 241.276753][T24064] tipc: Enabling of bearer rejected, failed to enable media [ 241.295645][T24068] tipc: Enabling of bearer rejected, already enabled [ 241.326624][T24061] lo speed is unknown, defaulting to 1000 [ 241.393780][T24081] program syz.3.6504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.533013][T24101] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 241.568901][ T29] audit: type=1326 audit(1732565085.309:30121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.3.6515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fd10e819 code=0x7ffc0000 [ 241.593878][ T29] audit: type=1326 audit(1732565085.309:30122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.3.6515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fd10e819 code=0x7ffc0000 [ 241.619377][ T29] audit: type=1326 audit(1732565085.359:30123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.3.6515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f71fd10e819 code=0x7ffc0000 [ 241.644332][ T29] audit: type=1326 audit(1732565085.359:30124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.3.6515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f71fd10e853 code=0x7ffc0000 [ 241.667780][ T29] audit: type=1326 audit(1732565085.359:30125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.3.6515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f71fd10d2ff code=0x7ffc0000 [ 241.692507][ T29] audit: type=1326 audit(1732565085.359:30126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.3.6515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f71fd10e8a7 code=0x7ffc0000 [ 241.717346][ T29] audit: type=1326 audit(1732565085.359:30127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24104 comm="syz.3.6515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71fd10d1b0 code=0x7ffc0000 [ 242.099525][T24135] tipc: Enabling of bearer rejected, already enabled [ 242.420246][T24177] loop4: detected capacity change from 0 to 512 [ 242.446896][T24177] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 242.458774][T24177] EXT4-fs (loop4): Errors on filesystem, clearing orphan list. [ 242.467535][T24177] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.476352][T24182] vhci_hcd: invalid port number 236 [ 242.483937][T24177] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.6543: Directory hole found for htree index block 0 [ 242.501239][T24177] EXT4-fs (loop4): Remounting filesystem read-only [ 242.521382][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.171621][T24264] xt_hashlimit: max too large, truncated to 1048576 [ 243.263726][T24257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.274113][T24257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.517644][ C1] sd 0:0:1:0: [sda] tag#147 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 243.527990][ C1] sd 0:0:1:0: [sda] tag#147 CDB: Write(6) 0a 00 00 00 05 00 00 00 02 00 00 00 [ 243.573355][T24301] __nla_validate_parse: 26 callbacks suppressed [ 243.573371][T24301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6593'. [ 243.600469][T24301] tipc: Enabling of bearer rejected, failed to enable media [ 243.638448][T24311] usb usb9: usbfs: process 24311 (syz.3.6601) did not claim interface 0 before use [ 243.817499][T24323] program syz.4.6606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 243.828874][T24307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.846498][T24307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.889834][T24326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6605'. [ 243.900432][T24326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6605'. [ 243.963703][T24331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6608'. [ 243.975016][T24331] tipc: Enabling of bearer rejected, failed to enable media [ 244.090644][T24338] vhci_hcd: invalid port number 157 [ 244.096305][T24338] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 244.407937][T24346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6611'. [ 244.418850][T24346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6611'. [ 244.455676][T24354] netlink: 'syz.2.6615': attribute type 21 has an invalid length. [ 244.470147][T24354] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6615'. [ 244.557441][T24367] syz.3.6621[24367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.557543][T24367] syz.3.6621[24367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.570492][T24367] syz.3.6621[24367] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 244.570737][T24369] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 244.599853][T24369] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 244.608860][T24369] vhci_hcd vhci_hcd.0: Device attached [ 244.644215][T24370] vhci_hcd: connection closed [ 244.645503][ T6113] vhci_hcd: stop threads [ 244.654555][ T6113] vhci_hcd: release socket [ 244.658971][ T6113] vhci_hcd: disconnect device [ 244.714256][T24378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6620'. [ 244.723270][T24378] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6620'. [ 244.886763][T24398] netlink: 'syz.3.6632': attribute type 29 has an invalid length. [ 244.895325][T24400] loop4: detected capacity change from 0 to 512 [ 244.911019][T24400] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 244.937442][T24400] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.957718][T24400] ext4 filesystem being mounted at /1260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.988945][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.041351][T24420] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 245.098770][T24422] infiniband syz1: set active [ 245.120388][T24422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6640'. [ 245.130706][T24422] tipc: Enabling of bearer rejected, already enabled [ 245.273671][T24439] tipc: Enabling of bearer rejected, failed to enable media [ 245.553693][T24478] vhci_hcd: invalid port number 157 [ 245.558979][T24478] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 245.750803][T24483] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=24483 comm=syz.1.6666 [ 246.146442][T24530] tipc: Enabling of bearer rejected, failed to enable media [ 246.156940][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 246.156953][ T29] audit: type=1400 audit(1732565089.899:30318): avc: denied { remount } for pid=24545 comm="syz.1.6696" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 246.183158][T24546] loop1: detected capacity change from 0 to 1024 [ 246.191540][T24546] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 246.202940][T24546] JBD2: no valid journal superblock found [ 246.209381][T24546] EXT4-fs (loop1): Could not load journal inode [ 246.346092][T24552] infiniband syz1: set active [ 246.359834][T24551] tipc: Enabling of bearer rejected, already enabled [ 246.368403][T24552] tipc: Enabling of bearer rejected, already enabled [ 246.369394][ T29] audit: type=1400 audit(1732565090.109:30319): avc: denied { getopt } for pid=24554 comm="syz.2.6699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 246.420714][ T29] audit: type=1400 audit(1732565090.159:30320): avc: denied { mounton } for pid=24559 comm="syz.2.6701" path="/1276/file0" dev="tmpfs" ino=6797 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 246.446097][ T29] audit: type=1400 audit(1732565090.159:30321): avc: denied { mount } for pid=24559 comm="syz.2.6701" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 246.492869][ T29] audit: type=1326 audit(1732565090.229:30322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24565 comm="syz.2.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd704be819 code=0x7ffc0000 [ 246.518691][ T29] audit: type=1326 audit(1732565090.229:30323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24565 comm="syz.2.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd704be819 code=0x7ffc0000 [ 246.542353][ T29] audit: type=1326 audit(1732565090.229:30324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24565 comm="syz.2.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fdd704be819 code=0x7ffc0000 [ 246.567198][ T29] audit: type=1326 audit(1732565090.229:30325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24565 comm="syz.2.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd704be819 code=0x7ffc0000 [ 246.569786][T24572] syz.2.6707[24572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.590763][ T29] audit: type=1326 audit(1732565090.259:30326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24565 comm="syz.2.6704" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd704be819 code=0x7ffc0000 [ 246.630072][T24572] syz.2.6707[24572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.630180][T24572] syz.2.6707[24572] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 246.630762][ T29] audit: type=1400 audit(1732565090.369:30327): avc: denied { compute_member } for pid=24571 comm="syz.2.6707" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 246.811722][T24579] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 246.820778][T24579] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 246.863952][ T3368] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 246.871628][ T3368] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 246.881206][ T3368] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 246.987150][T24593] loop4: detected capacity change from 0 to 512 [ 247.017811][T24593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.031205][T24593] ext4 filesystem being mounted at /1270/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.063889][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.270961][T24624] tipc: Enabling of bearer rejected, already enabled [ 247.339816][T24628] infiniband syz1: set active [ 247.378465][T24628] tipc: Enabling of bearer rejected, already enabled [ 247.388137][T24629] tipc: Enabling of bearer rejected, already enabled [ 247.574030][T24637] dvmrp0: entered allmulticast mode [ 247.581716][T24637] dvmrp0: left allmulticast mode [ 247.943940][T24657] netlink: 'syz.2.6740': attribute type 6 has an invalid length. [ 247.951794][T24657] netlink: 'syz.2.6740': attribute type 5 has an invalid length. [ 248.049116][T24670] smc: net device bond0 applied user defined pnetid SYZ0 [ 248.057563][T24670] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 248.066720][T24670] smc: net device bond0 erased user defined pnetid SYZ0 [ 248.073755][T24670] smc: ib device syz1 ibport 1 erased user defined pnetid SYZ0 [ 248.400919][T24713] smc: net device bond0 applied user defined pnetid SYZ0 [ 248.425560][T24713] smc: net device bond0 erased user defined pnetid SYZ0 [ 248.520998][T24714] tipc: Enabling of bearer rejected, already enabled [ 248.793728][T24732] __nla_validate_parse: 26 callbacks suppressed [ 248.793762][T24732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6765'. [ 248.818796][T24732] tipc: Enabling of bearer rejected, failed to enable media [ 248.905923][T24750] vhci_hcd: default hub control req: 2314 v0012 i0002 l0 [ 249.164018][T24769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6779'. [ 249.174037][T24769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6779'. [ 249.256325][T24775] syz.2.6784[24775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.256471][T24775] syz.2.6784[24775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.268188][T24775] syz.2.6784[24775] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 249.309962][T24782] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6786'. [ 249.355971][T24786] loop1: detected capacity change from 0 to 1024 [ 249.362716][T24786] EXT4-fs: Ignoring removed orlov option [ 249.369766][T24786] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.398020][T24786] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.537005][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.613701][T24803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6789'. [ 249.617874][T24807] xt_connbytes: Forcing CT accounting to be enabled [ 249.624378][T24803] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6789'. [ 249.637990][T24807] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 249.671221][T24815] loop1: detected capacity change from 0 to 1024 [ 249.693889][T24812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6794'. [ 249.703541][T24812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6794'. [ 249.728358][T24815] EXT4-fs: Ignoring removed orlov option [ 249.767159][T24815] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 249.791790][T24822] loop4: detected capacity change from 0 to 1024 [ 249.803049][T24822] EXT4-fs: Ignoring removed orlov option [ 249.809909][T24822] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.828827][T24815] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.871611][T24815] EXT4-fs error (device loop1): ext4_check_all_de:656: inode #12: block 7: comm syz.1.6797: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=108 fake=0 [ 249.901903][T24815] EXT4-fs (loop1): Remounting filesystem read-only [ 249.916544][T24822] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 249.940993][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.962037][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.991330][T24833] infiniband syz1: set active [ 250.035596][T24833] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6800'. [ 250.053987][T24833] tipc: Enabling of bearer rejected, already enabled [ 250.066543][T24846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6806'. [ 250.078754][T24841] loop1: detected capacity change from 0 to 2048 [ 250.082460][T24843] loop4: detected capacity change from 0 to 1024 [ 250.086640][T24846] tipc: Enabling of bearer rejected, already enabled [ 250.102086][T24843] EXT4-fs: Ignoring removed orlov option [ 250.107898][T24843] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.116844][T24847] vhci_hcd: invalid port number 157 [ 250.122122][T24847] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 250.132089][T24843] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.161193][T24851] loop1: detected capacity change from 0 to 1024 [ 250.170402][T24851] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.178268][T24851] EXT4-fs: Ignoring removed orlov option [ 250.184027][T24851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 250.211231][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.241457][T24851] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.258159][T24851] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none. [ 250.280695][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.393260][T24868] loop4: detected capacity change from 0 to 2048 [ 250.416236][T24870] loop1: detected capacity change from 0 to 512 [ 250.425771][T24870] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 250.434937][T24868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.435050][T24868] ext4 filesystem being mounted at /1288/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.463032][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.489228][T24878] loop4: detected capacity change from 0 to 128 [ 250.503285][T24870] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.518331][T24870] ext4 filesystem being mounted at /1302/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.530598][T24878] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 250.550579][T24878] ext4 filesystem being mounted at /1289/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 250.573690][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.660758][ T3331] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 250.672656][T24885] loop1: detected capacity change from 0 to 256 [ 250.698493][T24885] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 250.708663][T24885] FAT-fs (loop1): Filesystem has been set read-only [ 250.721463][T24885] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 250.745061][T24885] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 250.745911][T24887] loop4: detected capacity change from 0 to 2048 [ 250.766382][T24892] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 250.778528][T24892] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 250.817716][T24893] vhci_hcd: invalid port number 157 [ 250.822958][T24893] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 250.911216][T24903] syz.4.6827[24903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.911361][T24903] syz.4.6827[24903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.926923][T24903] syz.4.6827[24903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 250.932544][T24905] loop1: detected capacity change from 0 to 2048 [ 251.004087][T24911] loop4: detected capacity change from 0 to 512 [ 251.018438][T24905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.048386][T24911] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.069389][T24911] ext4 filesystem being mounted at /1293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.086818][T24905] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 251.141544][T24905] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 13 with max blocks 3 with error 28 [ 251.154735][T24905] EXT4-fs (loop1): This should not happen!! Data will be lost [ 251.154735][T24905] [ 251.165075][T24905] EXT4-fs (loop1): Total free blocks count 0 [ 251.171135][T24905] EXT4-fs (loop1): Free/Dirty block details [ 251.177146][T24905] EXT4-fs (loop1): free_blocks=66060288 [ 251.182710][T24905] EXT4-fs (loop1): dirty_blocks=16 [ 251.188547][T24905] EXT4-fs (loop1): Block reservation details [ 251.195300][T24905] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 251.204513][T24930] tipc: Enabling of bearer rejected, already enabled [ 251.238441][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.257926][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.283802][T24936] loop4: detected capacity change from 0 to 256 [ 251.308843][T24938] loop1: detected capacity change from 0 to 512 [ 251.320728][T24936] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 251.333833][T24938] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 251.353318][T24938] EXT4-fs (loop1): 1 truncate cleaned up [ 251.361448][T24938] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.389061][T24943] xt_TPROXY: Can be used only with -p tcp or -p udp [ 251.398345][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.460547][T24949] loop1: detected capacity change from 0 to 512 [ 251.481684][T24949] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 251.496851][T24949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.512284][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 251.512298][ T29] audit: type=1400 audit(1732565095.249:30395): avc: denied { setattr } for pid=24948 comm="syz.1.6846" path="/1308/file0" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 251.552820][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.570023][ T29] audit: type=1400 audit(1732565095.309:30396): avc: denied { getopt } for pid=24956 comm="syz.2.6851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 251.609250][T24962] loop1: detected capacity change from 0 to 164 [ 251.637193][ T29] audit: type=1400 audit(1732565095.379:30397): avc: denied { mount } for pid=24960 comm="syz.1.6850" name="/" dev="loop1" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 251.642323][T24964] usb usb4: usbfs: process 24964 (syz.2.6853) did not claim interface 0 before use [ 251.692580][ T29] audit: type=1400 audit(1732565095.419:30398): avc: denied { unmount } for pid=3327 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 251.715229][ T29] audit: type=1400 audit(1732565095.429:30399): avc: granted { setsecparam } for pid=24968 comm="syz.1.6855" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 251.783790][T24973] loop1: detected capacity change from 0 to 1024 [ 251.812862][T24978] loop4: detected capacity change from 0 to 512 [ 251.823209][T24978] EXT4-fs: Ignoring removed orlov option [ 251.838078][T24973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 251.853853][T24978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.877319][T24978] EXT4-fs (loop4): orphan cleanup on readonly fs [ 251.884186][T24978] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.6858: bg 0: block 248: padding at end of block bitmap is not set [ 251.903373][T24978] Quota error (device loop4): write_blk: dquota write failed [ 251.910815][T24978] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 251.921334][T24978] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.6858: Failed to acquire dquot type 1 [ 251.934925][T24978] EXT4-fs (loop4): 1 truncate cleaned up [ 251.942761][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.953819][T24978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 251.970987][T24978] EXT4-fs: Ignoring removed orlov option [ 251.977433][T24978] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 251.986422][T24978] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 252.017095][T24978] EXT4-fs error (device loop4): __ext4_remount:6749: comm syz.4.6858: Abort forced by user [ 252.018709][T24986] loop1: detected capacity change from 0 to 256 [ 252.044057][T24978] EXT4-fs (loop4): Remounting filesystem read-only [ 252.050654][T24978] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 252.076680][T24978] ext4 filesystem being remounted at /1299/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 252.104228][T24997] syz.1.6864[24997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.104595][T24997] syz.1.6864[24997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.127808][T25000] xt_connbytes: Forcing CT accounting to be enabled [ 252.132138][T24997] syz.1.6864[24997] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.146204][T25000] x_tables: ip_tables: osf match: only valid for protocol 6 [ 252.174918][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.186749][ T29] audit: type=1400 audit(1732565095.909:30400): avc: denied { create } for pid=25002 comm="syz.0.6868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 252.207112][ T29] audit: type=1400 audit(1732565095.909:30401): avc: denied { write } for pid=25002 comm="syz.0.6868" path="socket:[71176]" dev="sockfs" ino=71176 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 252.271989][ T29] audit: type=1400 audit(1732565096.009:30402): avc: denied { ioctl } for pid=25007 comm="syz.4.6867" path="socket:[71195]" dev="sockfs" ino=71195 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 252.331360][T25014] tipc: Enabling of bearer rejected, already enabled [ 252.397390][T25020] loop1: detected capacity change from 0 to 512 [ 252.404629][T25020] EXT4-fs: Ignoring removed oldalloc option [ 252.425981][T25020] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 252.449430][T25020] EXT4-fs (loop1): 1 truncate cleaned up [ 252.463874][T25020] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.584166][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.617059][T25038] loop4: detected capacity change from 0 to 1764 [ 252.709395][T25055] loop4: detected capacity change from 0 to 2048 [ 252.751204][T25055] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.780465][T25055] EXT4-fs: Ignoring removed orlov option [ 252.780747][T25055] EXT4-fs (loop4): can't enable nombcache during remount [ 252.809900][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.884905][T25073] loop1: detected capacity change from 0 to 512 [ 252.908541][T25073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 252.909457][T25077] loop4: detected capacity change from 0 to 1024 [ 252.926857][T25073] ext4 filesystem being mounted at /1322/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.968843][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.989098][T25077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.043700][T25079] lo speed is unknown, defaulting to 1000 [ 253.072989][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.290018][T25114] vhci_hcd: invalid port number 157 [ 253.296948][T25114] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 253.950182][T25154] Process accounting resumed [ 254.036259][T25163] __nla_validate_parse: 17 callbacks suppressed [ 254.036275][T25163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6928'. [ 254.079043][T25163] tipc: Enabling of bearer rejected, already enabled [ 254.080432][T25167] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6933'. [ 254.112545][T25167] 0ªX¹¦À: renamed from caif0 [ 254.168881][T25167] 0ªX¹¦À: entered allmulticast mode [ 254.175482][T25167] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 254.232731][T25173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6931'. [ 254.241841][T25173] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6931'. [ 254.259542][T25182] syz.4.6938[25182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.259640][T25182] syz.4.6938[25182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.271401][T25182] syz.4.6938[25182] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 254.354035][T25185] loop4: detected capacity change from 0 to 2048 [ 254.426240][T25185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.433238][T25187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6936'. [ 254.447337][T25187] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6936'. [ 254.781498][T25203] infiniband syz1: set active [ 254.799593][T25205] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6944'. [ 254.820250][ T3421] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 254.832735][T25203] tipc: Enabling of bearer rejected, already enabled [ 254.836631][ T3421] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 254.855393][ T3421] EXT4-fs (loop4): This should not happen!! Data will be lost [ 254.855393][ T3421] [ 254.865896][ T3421] EXT4-fs (loop4): Total free blocks count 0 [ 254.872133][ T3421] EXT4-fs (loop4): Free/Dirty block details [ 254.879105][ T3421] EXT4-fs (loop4): free_blocks=2415919104 [ 254.886433][ T3421] EXT4-fs (loop4): dirty_blocks=8208 [ 254.891752][ T3421] EXT4-fs (loop4): Block reservation details [ 254.898743][ T3421] EXT4-fs (loop4): i_reserved_data_blocks=513 [ 254.926182][ T6113] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 254.950598][T25212] loop1: detected capacity change from 0 to 128 [ 254.958339][T25212] /dev/loop1: Can't open blockdev [ 255.129660][T25224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6949'. [ 255.138698][T25224] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6949'. [ 255.201014][T25235] syz.4.6956[25235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 255.258288][T25240] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6959'. [ 255.280047][T25241] loop4: detected capacity change from 0 to 2048 [ 255.308920][T25241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.361346][ T3331] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 255.390398][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.458624][T25252] tipc: Enabling of bearer rejected, failed to enable media [ 255.772607][T25300] tipc: Enabling of bearer rejected, failed to enable media [ 256.539003][T25337] infiniband syz1: set active [ 256.562882][T25344] tipc: Enabling of bearer rejected, already enabled [ 256.579478][T25346] netlink: 'syz.4.7003': attribute type 3 has an invalid length. [ 256.610582][T25352] sock: sock_set_timeout: `syz.4.7006' (pid 25352) tries to set negative timeout [ 256.652690][T25357] vhci_hcd: invalid port number 157 [ 256.658961][T25357] vhci_hcd: default hub control req: c1ef v21ba i009d l29779 [ 256.665089][T25359] loop4: detected capacity change from 0 to 512 [ 256.693642][T25359] EXT4-fs: Ignoring removed mblk_io_submit option [ 256.701767][T25359] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 256.723915][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 256.723928][ T29] audit: type=1400 audit(1732565100.459:30459): avc: denied { read write } for pid=3327 comm="syz-executor" name="loop1" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 256.764359][T25359] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 256.772364][T25359] System zones: 1-12 [ 256.783432][T25368] SELinux: policydb version 0 does not match my version range 15-33 [ 256.783693][T25359] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.7009: corrupted in-inode xattr: e_value size too large [ 256.806307][ T29] audit: type=1400 audit(1732565100.469:30460): avc: denied { append } for pid=3002 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=10 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 256.807135][T25368] SELinux: failed to load policy [ 256.831454][ T29] audit: type=1400 audit(1732565100.469:30461): avc: denied { recv } for pid=25364 comm="syz.0.7012" saddr=10.128.0.163 src=30030 daddr=10.128.0.80 dest=50110 netif=eth0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 256.862350][ T29] audit: type=1400 audit(1732565100.499:30462): avc: denied { open } for pid=3327 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 256.872269][T25359] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.7009: couldn't read orphan inode 15 (err -117) [ 256.888292][ T29] audit: type=1400 audit(1732565100.499:30463): avc: denied { ioctl } for pid=3327 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=672 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 256.907703][T25359] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.927814][ T29] audit: type=1400 audit(1732565100.509:30464): avc: denied { map_create } for pid=25367 comm="syz.1.7013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 256.961221][ T29] audit: type=1400 audit(1732565100.509:30465): avc: denied { perfmon } for pid=25367 comm="syz.1.7013" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 256.983868][ T29] audit: type=1400 audit(1732565100.509:30466): avc: denied { map_read map_write } for pid=25367 comm="syz.1.7013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 257.005433][ T29] audit: type=1400 audit(1732565100.519:30467): avc: denied { prog_load } for pid=25367 comm="syz.1.7013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 257.026299][ T29] audit: type=1400 audit(1732565100.519:30468): avc: denied { bpf } for pid=25367 comm="syz.1.7013" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 257.034172][T25359] EXT4-fs (loop4): shut down requested (0) [ 257.101579][T25376] loop1: detected capacity change from 0 to 1024 [ 257.120934][T25376] EXT4-fs: Ignoring removed orlov option [ 257.128259][T25376] EXT4-fs: Ignoring removed nomblk_io_submit option [ 257.140485][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.180250][T25376] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.208795][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.237847][T25394] loop1: detected capacity change from 0 to 2048 [ 257.259742][T25394] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.304116][T25395] tipc: Enabling of bearer rejected, failed to enable media [ 257.322650][ T3327] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 257.344071][ T3327] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 257.396647][T25418] SELinux: policydb table sizes (0,0) do not match mine (6,6) [ 257.408228][T25418] SELinux: failed to load policy [ 257.462533][T25430] SELinux: failed to load policy [ 257.512809][T25437] tipc: Enabling of bearer rejected, already enabled [ 257.558240][T25435] lo speed is unknown, defaulting to 1000 [ 257.964721][T25471] IPVS: Error joining to the multicast group [ 258.055270][T25483] SELinux: syz.3.7060 (25483) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 258.323451][T25507] netlink: 'syz.0.7068': attribute type 322 has an invalid length. [ 258.472395][T25519] binfmt_misc: register: failed to install interpreter file ./file0 [ 258.627455][T25537] tipc: Enabling of bearer rejected, failed to enable media [ 258.722756][T25543] bpf_get_probe_write_proto: 2 callbacks suppressed [ 258.722772][T25543] syz.0.7083[25543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.742188][T25543] syz.0.7083[25543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.755971][T25543] syz.0.7083[25543] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 258.782599][T25549] IPVS: Error joining to the multicast group [ 258.874171][T25559] tipc: Enabling of bearer rejected, already enabled [ 258.897792][T25562] loop4: detected capacity change from 0 to 512 [ 258.928797][T25562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.953452][T25562] ext4 filesystem being mounted at /1341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.007886][ T3331] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.024126][T25564] lo speed is unknown, defaulting to 1000 [ 259.124018][T25567] lo speed is unknown, defaulting to 1000 [ 259.385942][T25595] __nla_validate_parse: 24 callbacks suppressed [ 259.385958][T25595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7092'. [ 259.402811][T25595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7092'. [ 259.509924][T25594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7098'. [ 259.519895][T25594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7098'. [ 259.550007][T25606] sg_write: data in/out 207360/1 bytes for SCSI command 0xf2-- guessing data in; [ 259.550007][T25606] program syz.2.7103 not setting count and/or reply_len properly [ 259.582757][T25610] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7105'. [ 259.707532][T25622] SELinux: policydb version 0 does not match my version range 15-33 [ 259.732081][T25627] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7112'. [ 259.755344][T25622] SELinux: failed to load policy [ 259.853472][T25645] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7114'. [ 259.878323][T25633] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.7114'. [ 259.962928][T25658] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7121'. [ 259.987173][T25660] loop1: detected capacity change from 0 to 128 [ 259.996700][T25658] tipc: Enabling of bearer rejected, already enabled [ 260.009089][T25660] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 260.023560][T25663] SELinux: failed to load policy [ 260.035480][T25660] syz.1.7125: attempt to access beyond end of device [ 260.035480][T25660] loop1: rw=2049, sector=209, nr_sectors = 9 limit=128 [ 260.067853][T25661] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7117'. [ 260.143688][ T56] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x61ff7272 (sector = 1) [ 260.200162][T25673] infiniband syz1: set active [ 260.238384][T25673] tipc: Enabling of bearer rejected, already enabled [ 260.471970][T25694] SELinux: policydb version -858998881 does not match my version range 15-33 [ 260.483421][T25694] SELinux: failed to load policy [ 260.556601][T25702] loop4: detected capacity change from 0 to 8192 [ 260.649702][ T3306] ================================================================== [ 260.657820][ T3306] BUG: KCSAN: data-race in __dentry_kill / fast_dput [ 260.664512][ T3306] [ 260.666843][ T3306] write to 0xffff88812684f610 of 8 bytes by task 3020 on cpu 0: [ 260.674482][ T3306] __dentry_kill+0x13e/0x4c0 [ 260.679081][ T3306] dput+0x5c/0xd0 [ 260.682711][ T3306] step_into+0x21a/0x840 [ 260.686947][ T3306] walk_component+0x169/0x230 [ 260.691617][ T3306] path_lookupat+0x10a/0x2b0 [ 260.696201][ T3306] filename_lookup+0x2e0/0x340 [ 260.700961][ T3306] do_readlinkat+0x89/0x210 [ 260.705461][ T3306] __x64_sys_readlink+0x47/0x60 [ 260.710304][ T3306] x64_sys_call+0x28ba/0x2dc0 [ 260.714972][ T3306] do_syscall_64+0xc9/0x1c0 [ 260.719473][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.725364][ T3306] [ 260.727675][ T3306] read to 0xffff88812684f610 of 8 bytes by task 3306 on cpu 1: [ 260.735215][ T3306] fast_dput+0x65/0x2c0 [ 260.739371][ T3306] dput+0x24/0xd0 [ 260.743000][ T3306] do_unlinkat+0x258/0x4d0 [ 260.747413][ T3306] __x64_sys_unlink+0x2e/0x40 [ 260.752085][ T3306] x64_sys_call+0x2329/0x2dc0 [ 260.756772][ T3306] do_syscall_64+0xc9/0x1c0 [ 260.761278][ T3306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.767168][ T3306] [ 260.769487][ T3306] value changed: 0xffff8882378beae0 -> 0x0000000000000000 [ 260.776579][ T3306] [ 260.778888][ T3306] Reported by Kernel Concurrency Sanitizer on: [ 260.785119][ T3306] CPU: 1 UID: 0 PID: 3306 Comm: udevd Not tainted 6.12.0-syzkaller-09073-g9f16d5e6f220 #0 [ 260.795178][ T3306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 260.805222][ T3306] ==================================================================