last executing test programs: 44.011826997s ago: executing program 4 (id=14010): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd6067", 0x14}, {&(0x7f00000001c0)="b700001806005abeef4ba0d5", 0xc}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f6ffa14306d06c4fd4d80a89943ad0a16a29d36c7e2c8168888", 0x32}], 0x3) 43.826024075s ago: executing program 4 (id=14018): r0 = socket$key(0xf, 0x3, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0000150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff0000000006003300000000000000000000000000fe8000000000000000000000000000aa00000000000000000000000000000000040003"], 0xa8}}, 0x40000) 43.768791771s ago: executing program 4 (id=14019): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000300)="2e9b3d0007e03dd65193dfb6c575963f86dd", 0x12}], 0x1) 43.650051463s ago: executing program 4 (id=14024): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0xb) 43.568406111s ago: executing program 4 (id=14027): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8a401, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) 42.97172278s ago: executing program 4 (id=14029): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$eJzs3M9vVEUcAPDv222L/LIV8QeIgqKRaGxpQeXgAYwmHjQx0QMe67YQpFBDqxFCtHrAoyHxbjya8Bd40otRTyZe9W5IiOECenrm7b7Xvl1217ZsXXA/n2TpzM5bZr7MTHfmDbsBDKx92R9JxLaI+C0iRhvZ5gv2NX7cvH6x9tf1i7Uk0vStP5P6dTeuX6wVlxav21pklpqfL1s4f+H09Nzc7Lk8P7F45v2JhfMXnjt1Zvrk7MnZs1NHjhw+NPniC1PP9yTOrE03dn88v2fXa+9cfqN2/PK7P11Jivib4viwJ/WV/uqyapF4qle13CG2l9LJUB8bwppkAzLrruH6/B+Naqx03mi8+llfGwdsqDRN002di5dS4H8siX63AOiP/H0+iViqZXvg8n5+EFw71tgAZXHfzB+NkqGo5NcMt+xveynbbR1f+vur7BEt91MAADbCd8caP4u138r6o9J0F/9ofjY0FhH3RcSOiLg/InZGxAMR8WBEPBQRD5de0+7cp1XrIcmt65/K1XUFtkrZ+u+l/Gyref1XrP5irJrnttfjH05OnJqbPRgR90bEgRjelOUnu9Tx/Su/ftGpbF9p/Zc9svqLtWDejqtDLTfoZqYXp28n5rJrn0bsHmoXf7J8EpD1466I2L13fXWceuabPZ3K/j3+LnpwzpR+HfF0o/+XoiX+QtL9fHLinpibPThRjIpb/fzLpTdL2dpoKXNb8fdA1v9b2o7/5fjHkvJ57cLa67j0++cd9zSrHP8j5ddk438kebueLgo+ml5cPDcZMZK8nj9/NH++ub76dVMr12fxH9jffv7viJV/iUciIhvEj0bEYxGxN2/74xHxRETs7xL/jy8/+d76499YWfwza+r/jonibPuWourpH76tlxSdNdYl/iTa9P/heupA/ky733+jzUMkurb03O2MZgAAALj7VCJiWySV8eV0pTI+3vj/8jtjS2VufmHx2RPzH5ydaXxGYCyGK8WdrtHl+6GxNJlv669UI7LyqTxf3C89lN83/rK6uZ4fr83PzfQ7eBhwWzvM/8wf1X63DthwPq8Fg2u98z9N00963BTgP+b9HwaX+Q+Dq83839yS7/IdAcDdrN37v409DAbrfxhc5j8MLvMfBpf5DwMp/yT80Go+4L9hiez3T/9qX3siTftU+0j/Y19ORKVvtUe/Y19bIsm/SyO9Q9qzukS9yU4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu94/AQAA//8QtN5n") write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x14, 0x1000000b, 0xc, 0x8, "0000000000000000000000041a02003d00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 42.939655993s ago: executing program 32 (id=14029): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49dd, 0xfeff, 0x9, 0x3, 0x0, "fa3d76170000001b"}) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$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") write$binfmt_aout(r0, &(0x7f0000000140)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x14, 0x1000000b, 0xc, 0x8, "0000000000000000000000041a02003d00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 42.588226768s ago: executing program 2 (id=14033): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x40, 0x21cfa, 0x5, 0x8000007, 0x6, 0x4, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f00000001c0)={0x800100, 0xffffefff, 0x5, 0xe1d9, 0xeb2, 0x4000fb}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x80000000000007}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x20050800) close(r0) 42.568494729s ago: executing program 2 (id=14034): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200000, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0xc}}, {@debug}]}, 0x1, 0x246, &(0x7f0000000ac0)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42002, 0x113) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000240)="12", 0x1}], 0x1, 0xcfbc, 0x3, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 42.521246984s ago: executing program 2 (id=14035): unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}], 0x1, 0x0) unshare(0x2c040000) 42.456551831s ago: executing program 2 (id=14037): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0xb) 42.410995905s ago: executing program 2 (id=14039): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000380), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x2000) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$eJzs3MFqE18Ux/Hzb/pv0pQ2EURQUA+60c3QxgfQIC2IAaU2RV0IUzvRkDEpM0MlIjYbcetzFJfuBPUFuhE37t0VQXDThTjiTKZN2rSmbdLE9PuBck9y7o+5bdNyUuis3339pFRwjYLpyVBCZUikJhsi6T9V3X/1dSioR6RRTS6P/fhy9s69+zezudz0rOpMdu5KRlUnzr9/+vzNhY/e2PzbiXdxWUs/WP+e+bp2au30+q+5x0VXi66WK56aulCpeOaCbeli0S0Zqrdty3QtLZZdy2nqF+zK0lJVzfLieHLJsVxXzXJVS1ZVvYp6TlXNR2axrIZh6HhSjrfhNvbkV2dnzeyubT/W0ROh60ZbPek42VrrZn71CM4EAAD6zN7zfzjr7z7/5+bDtcPzvwjzf5fUmh79Zf7HQHCcrJms//w2Y/4HAAAAAAAAAAAAAAAAAAAAAOBfsOH7Kd/3U9EafcRFJCEi0eNenxPdccDv/9UeHRcd1vCPewkR+9VyfjkfrmE/W5Ci2GLJpKTkZ/B6qAvrmRu56UkNpOWDvVLPryznYxKP8pF0q/y5E1NhXpvz/0uy8foZScnJ1tfPtMyPyKWLDXlDUvLpoVTElsXgdb2VfzGlev1Wblt+NNgHAAAAAMAgMHTTjvfvQT/YkJCd/TC/j78PbHt/PSxn2rlFJQAAAAAAODS3+qxk2rblHKCIi8gh4oNaxKQvjrGtuCYifXCMoyoSIhI+oweJf9uMt5Xy29gzLCI9/7Lso+j1byYAAAAAnbY19O8j9PllF08EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDx0+79wKL9O1pRY494w+ViR/4JAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH3kdwAAAP//R8IgDA==") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) lseek(r1, 0x2004, 0x0) 41.784906237s ago: executing program 2 (id=14045): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r4}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 41.766059578s ago: executing program 33 (id=14045): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0xfffffffffffffffc}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r4}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 34.686921947s ago: executing program 5 (id=14209): socket$nl_rdma(0x10, 0x3, 0x14) socket$pppl2tp(0x18, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="5c00ffff0000", 0x6, 0x0, 0x0, 0x2}]) 34.536367362s ago: executing program 5 (id=14214): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r2}, 0x10) r3 = dup(r1) ioctl$TIOCL_SETVESABLANK(r3, 0x560e, &(0x7f0000000140)) 34.448762721s ago: executing program 5 (id=14218): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x2, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x98}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x240}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) 34.411729404s ago: executing program 5 (id=14220): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180), 0x400, 0x0) 34.383443767s ago: executing program 5 (id=14221): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000440)={0x1d, r3, 0x0, {0x0, 0x80, 0x4}, 0x1}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r3, 0x2, {0x0, 0xf0}, 0xfd}, 0x18) write$binfmt_aout(r2, 0x0, 0xff74) 34.112789584s ago: executing program 5 (id=14224): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sock_set_state\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r2, 0xffffffffffffffff, 0x0) 34.091312496s ago: executing program 34 (id=14224): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x41101, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sock_set_state\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) socket$inet6_sctp(0xa, 0x1, 0x84) close_range(r2, 0xffffffffffffffff, 0x0) 27.253262181s ago: executing program 0 (id=14382): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) 26.870676739s ago: executing program 0 (id=14394): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000002540)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='kmem_cache_free\x00', r2}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) write(r0, &(0x7f0000000000)="b892d6", 0x3) 26.291113696s ago: executing program 0 (id=14407): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close(0x3) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x39000, 0x0) 26.267283268s ago: executing program 0 (id=14410): bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000380)=0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 26.020824553s ago: executing program 0 (id=14428): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 25.975428357s ago: executing program 0 (id=14419): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$kcm(0x10, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001840), 0x3b, 0x0) 10.934104021s ago: executing program 35 (id=14419): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socket$kcm(0x10, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001840), 0x3b, 0x0) 2.480540735s ago: executing program 7 (id=14841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8035}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @multicast2}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) 2.360984687s ago: executing program 7 (id=14844): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x200008c4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15625}]}}]}, 0x4c}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2.22467606s ago: executing program 7 (id=14849): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x3) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000200)=0xa) 1.919244961s ago: executing program 6 (id=14863): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close(0x3) close(0x4) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(0x4) 1.874765845s ago: executing program 6 (id=14864): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) creat(0x0, 0x182) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) ustat(0x3, 0x0) r1 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffb000/0x4000)=nil) shmat(r1, &(0x7f0000ffc000/0x4000)=nil, 0x5000) mlockall(0x3) shmat(r1, &(0x7f0000ffd000/0x2000)=nil, 0x5000) 1.814702931s ago: executing program 8 (id=14869): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) pipe2$9p(0x0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) unshare(0x62040200) r3 = socket$inet(0xa, 0x801, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002"], 0x48) 1.671693695s ago: executing program 8 (id=14872): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) creat(0x0, 0xf4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0}, 0x18) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @empty, 0x2}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f9f500", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.11205787s ago: executing program 6 (id=14887): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x11) 945.001006ms ago: executing program 6 (id=14890): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={0x0, 0x3}, 0x8) 760.929804ms ago: executing program 6 (id=14893): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'pimreg0\x00', 0xc00}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) mkdir(0x0, 0x0) close(0x3) 760.540745ms ago: executing program 8 (id=14895): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010814) close(r0) 724.867148ms ago: executing program 6 (id=14898): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x4, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f00000001c0)="f14a18f6", 0x4) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 597.928321ms ago: executing program 8 (id=14901): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) unshare(0x28000600) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000540)={r2, r0}, 0xc) 558.650205ms ago: executing program 8 (id=14903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x4}, 0x18) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0xa6ff, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 448.463166ms ago: executing program 8 (id=14906): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xc4, 0x1d, 0x3b, 0x40, 0x1b3f, 0x2002, 0xfc57, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0xfd, 0x0, 0x7f, [{{0x9, 0x4, 0x36, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r0, &(0x7f0000000340)) setitimer(0x1, &(0x7f0000000300)={{0x77359400}, {0x77359400}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448de, &(0x7f0000000240)) 406.37563ms ago: executing program 1 (id=14908): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@user_xattr}, {@delalloc}, {@quota}]}, 0x3, 0x441, &(0x7f0000000440)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000), 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000180)={0x20000012}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x6, &(0x7f0000000000)=0x9, 0x8, 0x0) 320.927948ms ago: executing program 1 (id=14909): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x134c, &(0x7f00000007c0)={0x0, 0xc8a0, 0xc000, 0xb, 0x100000c1}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000180)={{0x1, 0x1, 0x3, 0x3}, 0x8, 0xffffffffffffffff}) mprotect(&(0x7f0000200000/0x2000)=nil, 0x2000, 0x8) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) 317.577169ms ago: executing program 3 (id=14911): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) close(r3) 316.773069ms ago: executing program 1 (id=14912): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f0000000480)={[{@min_batch_time={'min_batch_time', 0x3d, 0x9}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@errors_continue}, {@noquota}, {@data_err_ignore}, {@noblock_validity}, {@delalloc}, {@noauto_da_alloc}, {@orlov}, {@user_xattr}, {@nodioread_nolock}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a35000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 275.319723ms ago: executing program 1 (id=14913): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x8, &(0x7f0000000200)=0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000, 0x2000}]) pipe2(0x0, 0x80000) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) recvfrom$unix(r3, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000440)="c41441cda532a2203792d2aa903f8ea6379420e4a9fa3b2d3216ccd015b4b4cd9e81f314882bc51688fc121d", 0x2c) 202.2131ms ago: executing program 3 (id=14914): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0xfffffff3, 0xbffc, 0xee52, 0x2, 0xc, 0x20008, 0xff}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={0x0, 0x0, 0x20}, 0xc) write(r2, &(0x7f0000000180)="ec", 0x1) write$cgroup_type(r1, &(0x7f0000000340), 0x9) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x71, 0xffff1896, 0x3, 0x26, 0x0, 0x1a}, 0x9c) 201.96977ms ago: executing program 3 (id=14915): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f0000000080)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) 194.564641ms ago: executing program 3 (id=14916): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000b80)=[{0x6}]}, 0x10) bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) 177.432063ms ago: executing program 7 (id=14917): openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98<\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = io_uring_setup(0x6c2, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2, 0x10f}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x50032, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) 87.087151ms ago: executing program 1 (id=14918): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x400}, 0x18) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000380)='\x15\x00', 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB], 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 86.912011ms ago: executing program 3 (id=14919): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x842}]}}]}, 0x3c}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 86.631201ms ago: executing program 7 (id=14920): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00'], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000002, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000006c0)={[{@dioread_nolock}, {@noauto_da_alloc}, {@inlinecrypt}, {@i_version}, {@data_err_ignore}, {@nodelalloc}, {@data_err_ignore}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@resuid}, {@quota}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000000000000000001000000910004"]) 45.113075ms ago: executing program 3 (id=14921): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x8, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001"], 0xfdef) 43.847185ms ago: executing program 1 (id=14922): socket$pppl2tp(0x18, 0x1, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') pread64(0xffffffffffffffff, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) r0 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x2, 0x1, 0x0, 0x0, 0x0, 0xb, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x100004, 0x0, 0x2000005, 0x4, 0x0, 0x4}, 0x0, 0xffffffefffffffff, 0xffffffffffffffff, 0x9) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x20, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x1}}}}]}, 0x40}}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu>=0||6') 0s ago: executing program 7 (id=14923): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818010, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x3, 0x72c, &(0x7f00000014c0)="$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") r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'macvlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0xd605, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1a21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): : entered allmulticast mode [ 591.372799][ T29] kauditd_printk_skb: 1083 callbacks suppressed [ 591.372820][ T29] audit: type=1400 audit(849.328:91409): avc: denied { prog_load } for pid=32480 comm="syz.1.11354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 591.373412][T32482] netlink: 60 bytes leftover after parsing attributes in process `syz.1.11354'. [ 591.404828][ T29] audit: type=1400 audit(849.368:91410): avc: denied { create } for pid=32483 comm="syz.2.11355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 591.451139][ T29] audit: type=1400 audit(849.388:91411): avc: denied { create } for pid=32483 comm="syz.2.11355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 591.472338][ T29] audit: type=1400 audit(849.388:91412): avc: denied { create } for pid=32483 comm="syz.2.11355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 591.494296][ T29] audit: type=1400 audit(849.458:91413): avc: denied { map_create } for pid=32487 comm="syz.2.11357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 591.514797][ T29] audit: type=1400 audit(849.458:91414): avc: denied { prog_load } for pid=32487 comm="syz.2.11357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 591.534140][ T29] audit: type=1326 audit(849.458:91415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.2.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac82eec9 code=0x7ffc0000 [ 591.558974][ T29] audit: type=1326 audit(849.458:91416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.2.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac82eec9 code=0x7ffc0000 [ 591.583178][ T29] audit: type=1326 audit(849.458:91417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.2.11357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9bac82eec9 code=0x7ffc0000 [ 591.606781][ T29] audit: type=1326 audit(849.458:91418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32487 comm="syz.2.11357" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bac82eec9 code=0x0 [ 592.162507][T32559] netlink: 84 bytes leftover after parsing attributes in process `syz.1.11391'. [ 592.760652][T32615] lo speed is unknown, defaulting to 1000 [ 592.769719][T32615] hsr0 speed is unknown, defaulting to 1000 [ 592.779192][T32615] lo speed is unknown, defaulting to 1000 [ 593.029953][T32671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11447'. [ 593.550510][T32722] netlink: 'syz.1.11469': attribute type 29 has an invalid length. [ 593.578610][T32722] netlink: 'syz.1.11469': attribute type 29 has an invalid length. [ 593.666599][T32735] netlink: 'syz.3.11477': attribute type 16 has an invalid length. [ 593.674872][T32735] netlink: 156 bytes leftover after parsing attributes in process `syz.3.11477'. [ 593.950175][ T318] ip6t_srh: unknown srh match flags 4000 [ 594.689801][ T427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11551'. [ 594.700232][ T427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11551'. [ 594.735935][ T429] netlink: 'syz.0.11552': attribute type 7 has an invalid length. [ 594.744872][ T429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11552'. [ 594.808669][ T437] netlink: 'syz.0.11556': attribute type 3 has an invalid length. [ 594.842419][ T442] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 595.169068][ T494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11583'. [ 596.382484][ T29] kauditd_printk_skb: 1328 callbacks suppressed [ 596.382504][ T29] audit: type=1400 audit(854.348:92747): avc: denied { prog_load } for pid=661 comm="syz.3.11658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 596.409354][ T29] audit: type=1400 audit(854.348:92748): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 596.432330][ T29] audit: type=1400 audit(854.358:92749): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 596.457028][ T29] audit: type=1400 audit(854.398:92750): avc: denied { map_create } for pid=664 comm="syz.0.11659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 596.476086][ T29] audit: type=1400 audit(854.398:92751): avc: denied { prog_load } for pid=664 comm="syz.0.11659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 596.495150][ T29] audit: type=1400 audit(854.398:92752): avc: denied { prog_load } for pid=664 comm="syz.0.11659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 596.514105][ T29] audit: type=1400 audit(854.398:92753): avc: denied { prog_load } for pid=664 comm="syz.0.11659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 596.533303][ T29] audit: type=1400 audit(854.398:92754): avc: denied { create } for pid=664 comm="syz.0.11659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 596.556554][ T29] audit: type=1400 audit(854.488:92755): avc: denied { prog_load } for pid=666 comm="syz.2.11660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 596.577331][ T29] audit: type=1400 audit(854.528:92756): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop3" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 596.969221][ T726] sch_tbf: burst 3 is lower than device geneve1 mtu (1514) ! [ 599.172790][ T958] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=958 comm=syz.4.11804 [ 599.647174][ T1023] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11836'. [ 599.746978][ T1031] lo speed is unknown, defaulting to 1000 [ 599.754335][ T1031] hsr0 speed is unknown, defaulting to 1000 [ 599.761007][ T1031] lo speed is unknown, defaulting to 1000 [ 600.803163][ T1129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1129 comm=syz.4.11886 [ 601.405603][ T29] kauditd_printk_skb: 1127 callbacks suppressed [ 601.405622][ T29] audit: type=1400 audit(859.368:93884): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 601.469864][ T29] audit: type=1400 audit(859.368:93885): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop3" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 601.494358][ T29] audit: type=1400 audit(859.388:93886): avc: denied { prog_load } for pid=1193 comm="syz.0.11915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 601.513257][ T29] audit: type=1400 audit(859.388:93887): avc: denied { map_create } for pid=1200 comm="syz.3.11920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 601.532911][ T29] audit: type=1400 audit(859.388:93888): avc: denied { prog_load } for pid=1200 comm="syz.3.11920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 601.551857][ T29] audit: type=1400 audit(859.388:93889): avc: denied { append } for pid=1200 comm="syz.3.11920" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 601.575901][ T29] audit: type=1400 audit(859.398:93890): avc: denied { prog_load } for pid=1193 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 601.594175][ T29] audit: type=1400 audit(859.408:93891): avc: denied { read write } for pid=3323 comm="syz-executor" name="loop3" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 601.618055][ T29] audit: type=1400 audit(859.408:93892): avc: denied { allowed } for pid=1193 comm="+}[@" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 601.637449][ T29] audit: type=1400 audit(859.418:93893): avc: denied { execmem } for pid=1203 comm="syz.3.11922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 601.779790][ T1221] syzkaller0: left promiscuous mode [ 601.785681][ T1221] syzkaller0: left allmulticast mode [ 601.858513][ T1232] netlink: 84 bytes leftover after parsing attributes in process `syz.2.11935'. [ 602.316056][ T1307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11966'. [ 602.453986][ T1329] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 602.458550][ T1328] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11973'. [ 602.956361][ T1399] netlink: 'syz.0.12004': attribute type 29 has an invalid length. [ 602.967244][ T1398] netlink: 'syz.1.12010': attribute type 16 has an invalid length. [ 602.975733][ T1398] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12010'. [ 602.986602][ T1399] netlink: 'syz.0.12004': attribute type 29 has an invalid length. [ 603.345633][ T1449] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 603.738497][ T1515] netlink: 'syz.3.12068': attribute type 3 has an invalid length. [ 603.914790][ T1551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12081'. [ 604.043607][ T1574] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 604.500170][ T1627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12126'. [ 605.725701][ T1748] sch_fq: defrate 4294967295 ignored. [ 605.733745][ T1746] lo speed is unknown, defaulting to 1000 [ 605.741432][ T1746] hsr0 speed is unknown, defaulting to 1000 [ 605.748641][ T1750] 8021q: VLANs not supported on gre0 [ 605.756040][ T1746] lo speed is unknown, defaulting to 1000 [ 605.988610][ T1779] lo speed is unknown, defaulting to 1000 [ 606.013914][ T1779] hsr0 speed is unknown, defaulting to 1000 [ 606.022445][ T1779] lo speed is unknown, defaulting to 1000 [ 606.416433][ T29] kauditd_printk_skb: 1162 callbacks suppressed [ 606.416451][ T29] audit: type=1400 audit(864.378:95056): avc: denied { prog_load } for pid=1811 comm="syz.2.12207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 606.444809][ T29] audit: type=1400 audit(864.408:95057): avc: denied { module_request } for pid=1811 comm="syz.2.12207" kmod="netdev-lo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 606.466425][ T29] audit: type=1400 audit(864.408:95058): avc: denied { sys_module } for pid=1811 comm="syz.2.12207" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 606.508613][ T29] audit: type=1400 audit(864.468:95059): avc: denied { map_create } for pid=1813 comm="syz.2.12208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 606.536486][ T29] audit: type=1400 audit(864.498:95060): avc: denied { prog_load } for pid=1813 comm="syz.2.12208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 606.555629][ T29] audit: type=1400 audit(864.498:95061): avc: denied { map_create } for pid=1805 comm="syz.3.12204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 606.623871][ T29] audit: type=1400 audit(864.498:95062): avc: denied { prog_load } for pid=1813 comm="syz.2.12208" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 606.642805][ T29] audit: type=1400 audit(864.538:95063): avc: denied { write } for pid=1813 comm="syz.2.12208" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=0 [ 606.666321][ T29] audit: type=1400 audit(864.548:95064): avc: denied { prog_load } for pid=1805 comm="syz.3.12204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 606.685761][ T29] audit: type=1400 audit(864.558:95065): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 606.925164][ T1831] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12225'. [ 607.297719][ T1863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12230'. [ 608.058351][ T1940] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 608.181502][ T1958] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=8192 sclass=netlink_tcpdiag_socket pid=1958 comm=syz.3.12284 [ 608.338306][ T1973] lo speed is unknown, defaulting to 1000 [ 608.353225][ T1973] hsr0 speed is unknown, defaulting to 1000 [ 608.366747][ T1973] lo speed is unknown, defaulting to 1000 [ 608.914662][ T1997] lo speed is unknown, defaulting to 1000 [ 608.925386][ T1997] hsr0 speed is unknown, defaulting to 1000 [ 608.926219][ T2001] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12292'. [ 608.933404][ T1997] lo speed is unknown, defaulting to 1000 [ 609.233978][ T2039] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12324'. [ 609.982095][ T2109] wireguard0: entered promiscuous mode [ 609.987848][ T2109] wireguard0: entered allmulticast mode [ 611.427161][ T29] kauditd_printk_skb: 723 callbacks suppressed [ 611.427203][ T29] audit: type=1400 audit(869.388:95789): avc: denied { map_create } for pid=2206 comm="syz.1.12394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 611.456286][ T29] audit: type=1400 audit(869.418:95790): avc: denied { prog_load } for pid=2205 comm="syz.4.12392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 611.476328][ T29] audit: type=1400 audit(869.418:95791): avc: denied { prog_load } for pid=2206 comm="syz.1.12394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 611.496822][ T29] audit: type=1400 audit(869.418:95792): avc: denied { create } for pid=2206 comm="syz.1.12394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 611.539777][ T29] audit: type=1400 audit(869.498:95793): avc: denied { map_create } for pid=2210 comm="syz.1.12395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 611.573381][ T29] audit: type=1400 audit(869.518:95794): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 611.598860][ T29] audit: type=1400 audit(869.528:95795): avc: denied { prog_load } for pid=2210 comm="syz.1.12395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 611.618028][ T29] audit: type=1400 audit(869.528:95796): avc: denied { execute } for pid=2210 comm="syz.1.12395" dev="tmpfs" ino=3532 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 611.651601][ T29] audit: type=1400 audit(869.608:95797): avc: denied { prog_load } for pid=2212 comm="syz.1.12396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 611.673491][ T29] audit: type=1400 audit(869.638:95798): avc: denied { watch watch_reads } for pid=2212 comm=77DEA305A391 path="/2510" dev="tmpfs" ino=13129 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 612.088728][ T2240] sch_fq: defrate 4294967295 ignored. [ 612.162018][ T2248] 8021q: VLANs not supported on gre0 [ 612.597332][ T2290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12432'. [ 612.942043][ T2330] netem: change failed [ 613.118289][ T2346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12470'. [ 613.808017][ T2443] netlink: 'syz.1.12508': attribute type 3 has an invalid length. [ 614.200669][ T2505] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 614.323569][ T2516] geneve0: entered allmulticast mode [ 614.530485][ T2537] netlink: 'syz.2.12553': attribute type 3 has an invalid length. [ 616.437268][ T29] kauditd_printk_skb: 1186 callbacks suppressed [ 616.437283][ T29] audit: type=1400 audit(874.398:96985): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 616.468320][ T29] audit: type=1400 audit(874.398:96986): avc: denied { map_create } for pid=2748 comm="syz.3.12658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 616.488213][ T29] audit: type=1400 audit(874.398:96987): avc: denied { prog_load } for pid=2748 comm="syz.3.12658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 616.507465][ T29] audit: type=1400 audit(874.408:96988): avc: denied { prog_load } for pid=2748 comm="syz.3.12658" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 616.527404][ T29] audit: type=1400 audit(874.428:96989): avc: denied { create } for pid=2739 comm="syz.2.12651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 616.550031][ T29] audit: type=1400 audit(874.458:96990): avc: denied { create } for pid=2754 comm="syz.0.12657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 616.570765][ T29] audit: type=1400 audit(874.458:96991): avc: denied { prog_load } for pid=2754 comm="syz.0.12657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 616.589761][ T29] audit: type=1400 audit(874.458:96992): avc: denied { create } for pid=2754 comm="syz.0.12657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 616.610046][ T29] audit: type=1400 audit(874.478:96993): avc: denied { prog_load } for pid=2756 comm="syz.1.12661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 616.629003][ T29] audit: type=1400 audit(874.478:96994): avc: denied { map_create } for pid=2756 comm="syz.1.12661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 617.423435][ T2844] Falling back ldisc for ttyS3. [ 618.163463][ T2936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=2936 comm=syz.4.12746 [ 618.297796][ T2947] lo speed is unknown, defaulting to 1000 [ 618.310582][ T2947] hsr0 speed is unknown, defaulting to 1000 [ 618.321287][ T2947] lo speed is unknown, defaulting to 1000 [ 619.146738][ T3006] lo speed is unknown, defaulting to 1000 [ 619.153769][ T3006] hsr0 speed is unknown, defaulting to 1000 [ 619.162230][ T3006] lo speed is unknown, defaulting to 1000 [ 619.318582][ T3052] lo speed is unknown, defaulting to 1000 [ 619.330587][ T3052] hsr0 speed is unknown, defaulting to 1000 [ 619.337374][ T3052] lo speed is unknown, defaulting to 1000 [ 620.252656][ T3164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12849'. [ 620.670581][ T3218] lo speed is unknown, defaulting to 1000 [ 620.694720][ T3218] hsr0 speed is unknown, defaulting to 1000 [ 620.713210][ T3218] lo speed is unknown, defaulting to 1000 [ 620.807278][ T3230] netlink: 'syz.1.12881': attribute type 21 has an invalid length. [ 620.820051][ T3230] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12881'. [ 620.829375][ T3230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12881'. [ 620.924576][ T3240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12887'. [ 621.287297][ T3270] netlink: 'syz.2.12894': attribute type 21 has an invalid length. [ 621.305836][ T3270] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12894'. [ 621.315370][ T3270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12894'. [ 621.444263][ T29] kauditd_printk_skb: 1093 callbacks suppressed [ 621.444279][ T29] audit: type=1400 audit(879.408:98088): avc: denied { read write } for pid=3320 comm="syz-executor" name="loop0" dev="devtmpfs" ino=1380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 621.478345][ T29] audit: type=1400 audit(879.408:98089): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 621.504065][ T29] audit: type=1400 audit(879.438:98090): avc: denied { map_create } for pid=3296 comm="syz.4.12914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 621.523601][ T29] audit: type=1400 audit(879.438:98091): avc: denied { prog_load } for pid=3298 comm="syz.2.12915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 621.543627][ T29] audit: type=1400 audit(879.438:98092): avc: denied { mounton } for pid=3298 comm="syz.2.12915" path="/2711/file0" dev="tmpfs" ino=14131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 621.566847][ T29] audit: type=1400 audit(879.438:98093): avc: denied { mounton } for pid=3298 comm="syz.2.12915" path="/2711/file0" dev="tmpfs" ino=14131 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 621.589979][ T29] audit: type=1400 audit(879.468:98094): avc: denied { read } for pid=3297 comm="syz.0.12913" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=0 [ 621.613765][ T29] audit: type=1400 audit(879.468:98095): avc: denied { prog_load } for pid=3296 comm="syz.4.12914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 621.648864][ T29] audit: type=1400 audit(879.468:98096): avc: denied { prog_load } for pid=3296 comm="syz.4.12914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 621.668030][ T29] audit: type=1400 audit(879.468:98097): avc: denied { map_create } for pid=3306 comm="syz.1.12920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 621.910894][ T3367] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12938'. [ 621.924580][ T3367] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12938'. [ 622.460395][ T3454] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3454 comm=syz.3.12964 [ 623.318867][ T3561] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3561 comm=syz.1.13013 [ 623.740140][ T3618] lo speed is unknown, defaulting to 1000 [ 623.749926][ T3618] hsr0 speed is unknown, defaulting to 1000 [ 623.767273][ T3618] lo speed is unknown, defaulting to 1000 [ 623.903604][ T3635] lo speed is unknown, defaulting to 1000 [ 623.932575][ T3635] hsr0 speed is unknown, defaulting to 1000 [ 623.949174][ T3635] lo speed is unknown, defaulting to 1000 [ 624.329054][ T3673] serio: Serial port ptm0 [ 624.834446][ T3704] lo speed is unknown, defaulting to 1000 [ 624.841415][ T3704] hsr0 speed is unknown, defaulting to 1000 [ 624.851352][ T3704] lo speed is unknown, defaulting to 1000 [ 625.680972][ T3804] Process accounting resumed [ 626.252749][ T3852] wireguard0: entered promiscuous mode [ 626.258310][ T3852] wireguard0: entered allmulticast mode [ 626.424591][ T3874] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 626.452926][ T29] kauditd_printk_skb: 1045 callbacks suppressed [ 626.452943][ T29] audit: type=1400 audit(884.418:99143): avc: denied { map_create } for pid=3875 comm="syz.2.13161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 626.501880][ T29] audit: type=1400 audit(884.418:99144): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 626.526057][ T29] audit: type=1400 audit(884.438:99145): avc: denied { map_create } for pid=3877 comm="syz.1.13162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 626.544837][ T29] audit: type=1400 audit(884.438:99146): avc: denied { prog_load } for pid=3875 comm="syz.2.13161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 626.564588][ T29] audit: type=1400 audit(884.438:99147): avc: denied { prog_load } for pid=3877 comm="syz.1.13162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 626.583467][ T29] audit: type=1400 audit(884.438:99148): avc: denied { allowed } for pid=3877 comm="syz.1.13162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 626.604276][ T29] audit: type=1400 audit(884.448:99149): avc: denied { prog_load } for pid=3875 comm="syz.2.13161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 626.625113][ T29] audit: type=1400 audit(884.468:99150): avc: denied { map_create } for pid=3880 comm="syz.4.13163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 626.645396][ T29] audit: type=1400 audit(884.468:99151): avc: denied { prog_load } for pid=3880 comm="syz.4.13163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 626.664805][ T29] audit: type=1400 audit(884.488:99152): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 626.913209][ T3912] lo speed is unknown, defaulting to 1000 [ 626.927993][ T3912] hsr0 speed is unknown, defaulting to 1000 [ 626.942242][ T3912] lo speed is unknown, defaulting to 1000 [ 627.373910][ T3954] lo speed is unknown, defaulting to 1000 [ 627.391331][ T3954] hsr0 speed is unknown, defaulting to 1000 [ 627.435616][ T3954] lo speed is unknown, defaulting to 1000 [ 627.475533][ T3963] lo speed is unknown, defaulting to 1000 [ 627.490094][ T3963] hsr0 speed is unknown, defaulting to 1000 [ 627.522152][ T3963] lo speed is unknown, defaulting to 1000 [ 628.217956][ T4043] netlink: 'syz.4.13241': attribute type 1 has an invalid length. [ 628.340397][ T4047] bond3: (slave geneve2): making interface the new active one [ 628.349646][ T4047] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 628.362324][ T4132] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 628.386000][ T4132] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 628.401132][ T4132] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 628.414705][ T4132] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 629.443307][ T4201] lo speed is unknown, defaulting to 1000 [ 629.452868][ T4201] hsr0 speed is unknown, defaulting to 1000 [ 629.459477][ T4201] lo speed is unknown, defaulting to 1000 [ 630.332225][ T4292] ip6tnl2: entered promiscuous mode [ 630.337705][ T4292] ip6tnl2: entered allmulticast mode [ 630.587926][ T4332] netlink: 96 bytes leftover after parsing attributes in process `syz.0.13375'. [ 631.462969][ T29] kauditd_printk_skb: 1112 callbacks suppressed [ 631.462989][ T29] audit: type=1400 audit(889.428:100265): avc: denied { map_create } for pid=4418 comm="syz.4.13416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 631.489729][ T29] audit: type=1400 audit(889.428:100266): avc: denied { prog_load } for pid=4418 comm="syz.4.13416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 631.508844][ T29] audit: type=1400 audit(889.428:100267): avc: denied { prog_load } for pid=4418 comm="syz.4.13416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 631.528565][ T29] audit: type=1400 audit(889.428:100268): avc: denied { prog_load } for pid=4418 comm="syz.4.13416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 631.548739][ T29] audit: type=1400 audit(889.448:100269): avc: denied { read write } for pid=3312 comm="syz-executor" name="loop4" dev="devtmpfs" ino=1345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 631.571918][ T29] audit: type=1400 audit(889.488:100270): avc: denied { open } for pid=4422 comm="syz.4.13418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 631.591471][ T29] audit: type=1400 audit(889.488:100271): avc: denied { open } for pid=4422 comm="syz.4.13418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 631.611226][ T29] audit: type=1400 audit(889.488:100272): avc: denied { open } for pid=4422 comm="syz.4.13418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 631.633581][ T29] audit: type=1400 audit(889.488:100273): avc: denied { open } for pid=4422 comm="syz.4.13418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 631.653068][ T29] audit: type=1400 audit(889.488:100274): avc: denied { open } for pid=4422 comm="syz.4.13418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 632.046925][ T4466] netlink: 'syz.3.13438': attribute type 10 has an invalid length. [ 632.110180][ T4474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13441'. [ 632.604317][ T4542] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 632.628692][ T4542] hsr_slave_1 (unregistering): left promiscuous mode [ 633.503663][ T4565] program syz.4.13483 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 633.672246][ T3408] kernel read not supported for file bpf-prog (pid: 3408 comm: kworker/0:3) [ 633.846344][ T4593] bridge_slave_0: default FDB implementation only supports local addresses [ 634.732786][ T4661] sctp: [Deprecated]: syz.3.13525 (pid 4661) Use of struct sctp_assoc_value in delayed_ack socket option. [ 634.732786][ T4661] Use struct sctp_sack_info instead [ 634.762294][ T4663] netlink: 'syz.4.13527': attribute type 6 has an invalid length. [ 635.217746][ T4684] netlink: 104 bytes leftover after parsing attributes in process `syz.2.13539'. [ 635.616398][ T4730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13559'. [ 635.626817][ T4730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13559'. [ 635.645848][ T4730] erspan0: entered promiscuous mode [ 635.654705][ T4730] gretap0: entered promiscuous mode [ 635.660539][ T4730] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 635.671163][ T4730] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 635.683056][ T4735] loop9: detected capacity change from 0 to 7 [ 635.690193][ T4735] Buffer I/O error on dev loop9, logical block 0, async page read [ 635.699395][ T4735] Buffer I/O error on dev loop9, logical block 0, async page read [ 635.707960][ T4735] loop9: unable to read partition table [ 635.718230][ T4735] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯  [ 635.718230][ T4735] ) failed (rc=-5) [ 635.732855][ T4732] sd 0:0:1:0: device reset [ 635.933627][ T4748] loop3: detected capacity change from 0 to 128 [ 636.444147][ T4784] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 636.460647][ T4781] €Â: renamed from hsr0 [ 636.611879][ T4800] xt_hashlimit: max too large, truncated to 1048576 [ 636.753303][ T29] kauditd_printk_skb: 483 callbacks suppressed [ 636.753411][ T29] audit: type=1400 audit(894.718:100758): avc: denied { firmware_load } for pid=4807 comm="syz.1.13594" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 636.849539][ T29] audit: type=1326 audit(894.808:100759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.4.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e48feec9 code=0x7ffc0000 [ 636.873391][ T29] audit: type=1326 audit(894.808:100760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.4.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e48feec9 code=0x7ffc0000 [ 636.897622][ T29] audit: type=1326 audit(894.858:100761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.4.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67e48feec9 code=0x7ffc0000 [ 636.921373][ T29] audit: type=1326 audit(894.858:100762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.4.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e48feec9 code=0x7ffc0000 [ 636.941941][ T4804] netlink: 'syz.2.13593': attribute type 1 has an invalid length. [ 636.945328][ T29] audit: type=1326 audit(894.858:100763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.4.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e48feec9 code=0x7ffc0000 [ 636.954361][ T4804] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.13593'. [ 637.056084][ T29] audit: type=1326 audit(894.948:100764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.4.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67e48feec9 code=0x7ffc0000 [ 637.079884][ T29] audit: type=1326 audit(894.948:100765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.4.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e48feec9 code=0x7ffc0000 [ 637.103371][ T29] audit: type=1326 audit(894.948:100766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.4.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f67e48feec9 code=0x7ffc0000 [ 637.126950][ T29] audit: type=1326 audit(894.968:100767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4810 comm="syz.4.13595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f67e48feec9 code=0x7ffc0000 [ 637.214249][ T4822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13600'. [ 637.334043][ T4827] netlink: 'syz.4.13602': attribute type 3 has an invalid length. [ 638.067392][ T4861] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4861 comm=syz.3.13618 [ 638.375456][ T4883] loop4: detected capacity change from 0 to 512 [ 638.395170][ T4883] EXT4-fs (loop4): too many log groups per flexible block group [ 638.405481][ T4883] EXT4-fs (loop4): failed to initialize mballoc (-12) [ 638.413289][ T4883] EXT4-fs (loop4): mount failed [ 638.723859][ T4778] Set syz1 is full, maxelem 65536 reached [ 638.997631][ T4910] loop4: detected capacity change from 0 to 512 [ 639.062968][ T4910] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 639.092146][ T4910] EXT4-fs (loop4): mount failed [ 639.435563][ T4948] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4948 comm=syz.4.13653 [ 639.515012][ T4955] netlink: 256 bytes leftover after parsing attributes in process `syz.3.13657'. [ 639.832516][ T4987] xt_hashlimit: max too large, truncated to 1048576 [ 640.139073][ T4999] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4999 comm=syz.1.13675 [ 640.151849][ T4999] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4999 comm=syz.1.13675 [ 640.592916][ T5015] rdma_op ffff888150481180 conn xmit_rdma 0000000000000000 [ 641.609855][ T5080] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13707'. [ 641.900834][ T5106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5106 comm=syz.3.13711 [ 641.914434][ T5106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5106 comm=syz.3.13711 [ 641.929400][ T5106] netlink: 'syz.3.13711': attribute type 29 has an invalid length. [ 642.279898][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 642.279925][ T29] audit: type=1400 audit(900.238:100890): avc: denied { ioctl } for pid=5143 comm="syz.3.13715" path="socket:[116114]" dev="sockfs" ino=116114 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 642.282363][ T5144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13715'. [ 642.635620][ T5153] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13719'. [ 642.760871][ T29] audit: type=1400 audit(900.718:100891): avc: denied { write } for pid=5167 comm="syz.1.13726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 642.798213][ T29] audit: type=1400 audit(900.758:100892): avc: denied { connect } for pid=5169 comm="syz.4.13727" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 642.867450][ T5174] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13728'. [ 642.946515][ T5188] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 642.964619][ T29] audit: type=1326 audit(900.928:100893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.2.13735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac82eec9 code=0x7ffc0000 [ 642.968273][ T5184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13732'. [ 642.988521][ T29] audit: type=1326 audit(900.928:100894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.2.13735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac82eec9 code=0x7ffc0000 [ 643.041514][ T5191] loop4: detected capacity change from 0 to 1024 [ 643.042203][ T29] audit: type=1326 audit(900.948:100895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.2.13735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bac82eec9 code=0x7ffc0000 [ 643.073475][ T29] audit: type=1326 audit(900.948:100896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.2.13735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac82eec9 code=0x7ffc0000 [ 643.096955][ T29] audit: type=1326 audit(900.948:100897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.2.13735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac82eec9 code=0x7ffc0000 [ 643.121157][ T29] audit: type=1326 audit(900.958:100898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.2.13735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bac82eec9 code=0x7ffc0000 [ 643.145059][ T29] audit: type=1326 audit(900.958:100899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.2.13735" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bac82eec9 code=0x7ffc0000 [ 643.202983][ T5202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5202 comm=syz.1.13737 [ 643.205341][ T5191] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.277763][ T5191] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.13736: Allocating blocks 449-513 which overlap fs metadata [ 643.296205][ T5209] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13743'. [ 643.305940][ T5209] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13743'. [ 643.332311][ T5190] EXT4-fs (loop4): pa ffff8881004a1b60: logic 48, phys. 177, len 21 [ 643.335182][ T5209] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13743'. [ 643.340564][ T5190] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 643.349845][ T5209] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13743'. [ 643.465525][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.472108][ T5209] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13743'. [ 643.640523][ T5234] loop3: detected capacity change from 0 to 1024 [ 643.660129][ T5234] EXT4-fs: Ignoring removed orlov option [ 643.686358][ T5234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 643.703555][ T5243] IPVS: Unknown mcast interface: ipvlan1 [ 643.796228][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.374542][ T5303] netlink: 'syz.1.13779': attribute type 29 has an invalid length. [ 644.384117][ T5303] netlink: 'syz.1.13779': attribute type 29 has an invalid length. [ 644.520908][ T5309] SELinux: failed to load policy [ 645.765850][ T5360] loop3: detected capacity change from 0 to 128 [ 645.851061][ T5360] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 645.940644][ T3323] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 646.109903][ T5381] loop3: detected capacity change from 0 to 1024 [ 646.121498][ T5381] EXT4-fs: Ignoring removed orlov option [ 646.136164][ T5381] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.182202][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.762814][ T5416] loop3: detected capacity change from 0 to 512 [ 646.776794][ T5416] EXT4-fs: Ignoring removed i_version option [ 646.783240][ T5416] EXT4-fs: Ignoring removed bh option [ 646.821490][ T5418] syzkaller1: entered promiscuous mode [ 646.821461][ T5416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.827053][ T5418] syzkaller1: entered allmulticast mode [ 646.915594][ T3323] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.053251][ T5426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.074973][ T5426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.093214][ T5428] SELinux: Context AÇÂ) is not valid (left unmapped). [ 647.237245][ T5441] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5441 comm=syz.3.13837 [ 647.496120][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 647.496179][ T29] audit: type=1400 audit(905.458:101038): avc: denied { mounton } for pid=5456 comm="syz.0.13843" path="/proc/4877/task" dev="proc" ino=117691 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 647.616026][ T5466] netlink: 'syz.2.13847': attribute type 13 has an invalid length. [ 647.624393][ T29] audit: type=1400 audit(905.578:101039): avc: denied { write } for pid=5465 comm="syz.4.13848" name="001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 647.656733][ T5467] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 647.664742][ T5467] vhci_hcd: invalid port number 96 [ 647.670144][ T5467] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 647.671707][ T29] audit: type=1400 audit(905.618:101040): avc: denied { map } for pid=5465 comm="syz.4.13848" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 647.737083][ T5075] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.750078][ T5075] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.780805][ T5075] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.798058][ T5075] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 647.858648][ T5473] __nla_validate_parse: 10 callbacks suppressed [ 647.858665][ T5473] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13851'. [ 648.064497][ T29] audit: type=1326 audit(906.018:101041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5477 comm="syz.3.13853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 648.088446][ T29] audit: type=1326 audit(906.018:101042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5477 comm="syz.3.13853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 648.112590][ T29] audit: type=1326 audit(906.028:101043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5477 comm="syz.3.13853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 648.135868][ T29] audit: type=1326 audit(906.028:101044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5477 comm="syz.3.13853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 648.160233][ T29] audit: type=1326 audit(906.028:101045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5477 comm="syz.3.13853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 648.199757][ T29] audit: type=1326 audit(906.148:101046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5477 comm="syz.3.13853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 648.199816][ T5478] loop3: detected capacity change from 0 to 2048 [ 648.224438][ T29] audit: type=1326 audit(906.148:101047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5477 comm="syz.3.13853" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 648.332939][ T5478] loop3: p1 < > p4 [ 648.342135][ T5478] loop3: p4 size 8388608 extends beyond EOD, truncated [ 648.436639][ T5497] syzkaller1: entered promiscuous mode [ 648.442922][ T5497] syzkaller1: entered allmulticast mode [ 648.592309][ T5500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13862'. [ 648.648169][ T36] hid_parser_main: 26 callbacks suppressed [ 648.648192][ T36] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 648.661535][ T36] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 648.668990][ T36] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 648.676831][ T36] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 648.684492][ T36] hid-generic 0000:0000:0000.0016: unknown main item tag 0x2 [ 648.692076][ T36] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 648.699765][ T36] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 648.707233][ T36] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 648.719948][ T36] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 648.727407][ T36] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 648.827017][ T36] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 648.943674][ T5517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13870'. [ 649.321128][ T5523] lo speed is unknown, defaulting to 1000 [ 649.328359][ T5523] hsr0 speed is unknown, defaulting to 1000 [ 649.336620][ T5523] lo speed is unknown, defaulting to 1000 [ 649.345773][ T5525] loop4: detected capacity change from 0 to 128 [ 649.367647][ T5525] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 649.501575][ T3312] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 649.725355][ T5549] loop4: detected capacity change from 0 to 1024 [ 649.742277][ T5549] EXT4-fs: Ignoring removed orlov option [ 649.754976][ T5549] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 649.899452][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.964947][ T5562] netlink: 'syz.1.13886': attribute type 4 has an invalid length. [ 649.989281][ T5560] syzkaller0: entered promiscuous mode [ 649.995683][ T5560] syzkaller0: entered allmulticast mode [ 651.052877][ T5626] sch_tbf: burst 512 is lower than device syzkaller0 mtu (1500) ! [ 652.595677][ T5679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13931'. [ 652.645721][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 652.645740][ T29] audit: type=1400 audit(910.608:101090): avc: denied { append } for pid=5682 comm="syz.4.13933" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 652.750144][ T5681] SELinux: failed to load policy [ 653.051204][ T29] audit: type=1326 audit(911.008:101091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.3.13943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 653.108731][ T29] audit: type=1326 audit(911.008:101092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.3.13943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 653.132397][ T29] audit: type=1326 audit(911.038:101093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.3.13943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 653.155955][ T29] audit: type=1326 audit(911.038:101094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.3.13943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 653.179931][ T29] audit: type=1326 audit(911.038:101095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.3.13943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 653.203413][ T29] audit: type=1326 audit(911.048:101096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.3.13943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 653.227403][ T29] audit: type=1326 audit(911.048:101097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.3.13943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 653.250728][ T29] audit: type=1326 audit(911.048:101098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.3.13943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 653.273941][ T29] audit: type=1326 audit(911.048:101099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.3.13943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 653.853188][ T5731] Falling back ldisc for ttyS3. [ 653.934921][ T36] hid_parser_main: 32 callbacks suppressed [ 653.934944][ T36] hid-generic 0000:0000:10003.0017: unknown main item tag 0x0 [ 653.949128][ T36] hid-generic 0000:0000:10003.0017: unknown main item tag 0x0 [ 653.957067][ T36] hid-generic 0000:0000:10003.0017: unknown main item tag 0x0 [ 653.964956][ T36] hid-generic 0000:0000:10003.0017: unknown main item tag 0x0 [ 653.973088][ T36] hid-generic 0000:0000:10003.0017: unknown main item tag 0x0 [ 653.980692][ T36] hid-generic 0000:0000:10003.0017: unknown main item tag 0x0 [ 653.988498][ T36] hid-generic 0000:0000:10003.0017: unknown main item tag 0x0 [ 653.996746][ T36] hid-generic 0000:0000:10003.0017: unknown main item tag 0x0 [ 654.004711][ T36] hid-generic 0000:0000:10003.0017: item fetching failed at offset 8/43 [ 654.050089][ T36] hid-generic 0000:0000:10003.0017: probe with driver hid-generic failed with error -22 [ 654.186410][ T5747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.202794][ T5747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 656.114421][ T5821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13989'. [ 656.583127][ T5833] netlink: 96 bytes leftover after parsing attributes in process `syz.0.13994'. [ 656.741520][ T5847] syzkaller0: entered promiscuous mode [ 656.747187][ T5847] syzkaller0: entered allmulticast mode [ 657.291141][ T5872] syzkaller1: entered promiscuous mode [ 657.297661][ T5872] syzkaller1: entered allmulticast mode [ 657.781895][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 657.781910][ T29] audit: type=1400 audit(915.738:101109): avc: denied { create } for pid=5907 comm="syz.2.14026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 658.067465][ T5108] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 658.172382][ T5108] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 658.264604][ T5108] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 658.345618][ T5108] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 658.659532][ T5108] bond0 (unregistering): (slave gretap0): Releasing active interface [ 658.693864][ T29] audit: type=1400 audit(916.658:101110): avc: denied { bind } for pid=5917 comm="syz.0.14028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 658.730175][ T5108] bond3 (unregistering): (slave geneve2): Releasing active interface [ 658.752057][ T29] audit: type=1400 audit(916.708:101111): avc: denied { setopt } for pid=5917 comm="syz.0.14028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 658.757319][ T5918] netlink: 'syz.0.14028': attribute type 10 has an invalid length. [ 658.886764][ T5108] bond1 (unregistering): Released all slaves [ 658.905050][ T5108] bond0 (unregistering): Released all slaves [ 658.929336][ T5108] bond2 (unregistering): Released all slaves [ 658.955286][ T5108] bond3 (unregistering): Released all slaves [ 659.078482][ T5108] tipc: Left network mode [ 659.225443][ T5108] hsr_slave_0: left promiscuous mode [ 659.424884][ T5919] lo speed is unknown, defaulting to 1000 [ 659.442584][ T5919] hsr0 speed is unknown, defaulting to 1000 [ 659.456249][ T5919] lo speed is unknown, defaulting to 1000 [ 659.654389][ T5108] IPVS: stop unused estimator thread 0... [ 659.708056][ T5919] chnl_net:caif_netlink_parms(): no params data found [ 659.771083][ T5978] loop3: detected capacity change from 0 to 1024 [ 659.779192][ T5978] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 659.780924][ T5919] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.790349][ T5978] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 659.798433][ T5919] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.817205][ T5919] bridge_slave_0: entered allmulticast mode [ 659.826511][ T5919] bridge_slave_0: entered promiscuous mode [ 659.830507][ T5978] JBD2: no valid journal superblock found [ 659.838391][ T5978] EXT4-fs (loop3): Could not load journal inode [ 659.847125][ T5919] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.855300][ T5919] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.863327][ T5919] bridge_slave_1: entered allmulticast mode [ 659.870349][ T5919] bridge_slave_1: entered promiscuous mode [ 659.903382][ T5919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.917775][ T5919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 659.952857][ T5919] team0: Port device team_slave_0 added [ 659.960780][ T5919] team0: Port device team_slave_1 added [ 659.967127][ T5966] lo speed is unknown, defaulting to 1000 [ 659.984787][ T5966] hsr0 speed is unknown, defaulting to 1000 [ 659.992704][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.999878][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.026532][ T5919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.038921][ T5919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.046065][ T5919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.072260][ T5919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.088460][ T5966] lo speed is unknown, defaulting to 1000 [ 660.170815][ T5108] erspan0 (unregistering): left promiscuous mode [ 660.181565][ T5108] gretap0 (unregistering): left promiscuous mode [ 660.210310][ T5108] bond3 (unregistering): (slave gretap1): Releasing active interface [ 660.276655][ T5108] bond4 (unregistering): (slave bridge1): Releasing active interface [ 660.487703][ T5108] bond1 (unregistering): (slave veth3): Releasing active interface [ 660.496706][ T5108] bond1 (unregistering): Released all slaves [ 660.506168][ T5108] bond2 (unregistering): Released all slaves [ 660.514829][ T5108] bond3 (unregistering): Released all slaves [ 660.524393][ T5108] bond4 (unregistering): Released all slaves [ 660.534139][ T5108] bond5 (unregistering): Released all slaves [ 660.543635][ T5108] bond0 (unregistering): Released all slaves [ 660.608285][ T5919] hsr_slave_0: entered promiscuous mode [ 660.615001][ T5919] hsr_slave_1: entered promiscuous mode [ 660.649566][ T5108] tipc: Disabling bearer [ 660.655396][ T5108] tipc: Left network mode [ 660.661069][ T29] audit: type=1400 audit(918.618:101112): avc: denied { validate_trans } for pid=6013 comm="syz.0.14058" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 660.695993][ T29] audit: type=1400 audit(918.658:101113): avc: denied { create } for pid=6012 comm=77DEA305FF07 name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 660.729709][ T29] audit: type=1400 audit(918.658:101114): avc: denied { write } for pid=6012 comm=77DEA305FF07 name="file0" dev="tmpfs" ino=14976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 660.752299][ T29] audit: type=1400 audit(918.658:101115): avc: denied { open } for pid=6012 comm=77DEA305FF07 path="/2869/file0" dev="tmpfs" ino=14976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 660.775445][ T29] audit: type=1400 audit(918.658:101116): avc: denied { ioctl } for pid=6012 comm=77DEA305FF07 path="/2869/file0" dev="tmpfs" ino=14976 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 660.778764][ T1038] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 660.807397][ T1038] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 660.815301][ T1038] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 660.820464][ T29] audit: type=1400 audit(918.718:101117): avc: denied { unlink } for pid=3313 comm="syz-executor" name="file0" dev="tmpfs" ino=14976 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 660.823076][ T1038] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 660.853488][ T1038] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 660.862120][ T1038] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 660.870024][ T1038] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 660.877880][ T1038] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 660.885484][ T1038] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 660.893356][ T1038] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 660.919229][ T1038] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz1 [ 661.000301][ T5108] hsr_slave_0: left promiscuous mode [ 661.099000][ T6040] netlink: 'syz.1.14068': attribute type 4 has an invalid length. [ 661.134996][ T6040] netlink: 'syz.1.14068': attribute type 4 has an invalid length. [ 661.149603][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 661.191576][ T29] audit: type=1326 audit(919.148:101118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6044 comm="syz.1.14070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54f27eec9 code=0x7ffc0000 [ 661.287150][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.294806][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.302497][ T5966] bridge_slave_0: entered allmulticast mode [ 661.309585][ T5966] bridge_slave_0: entered promiscuous mode [ 661.331932][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.339125][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.350398][ T5966] bridge_slave_1: entered allmulticast mode [ 661.358135][ T5966] bridge_slave_1: entered promiscuous mode [ 661.401580][ T5919] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 661.418535][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.433382][ T5108] IPVS: stop unused estimator thread 0... [ 661.439601][ T5919] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 661.453756][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 661.469379][ T5919] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 661.499859][ T5919] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 661.511728][ T5966] team0: Port device team_slave_0 added [ 661.529360][ T5966] team0: Port device team_slave_1 added [ 661.562487][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.569809][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.596313][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.608293][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.615828][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.642220][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 661.735304][ T5966] hsr_slave_0: entered promiscuous mode [ 661.742787][ T5966] hsr_slave_1: entered promiscuous mode [ 661.751933][ T5966] debugfs: 'hsr0' already exists in 'hsr' [ 661.757989][ T5966] Cannot create hsr debugfs directory [ 661.796296][ T5919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.843502][ T5919] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.871006][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.878255][ T5075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.903443][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.910917][ T5075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.044169][ T5966] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 662.065189][ T5966] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 662.085603][ T5966] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 662.092453][ T6094] SELinux: failed to load policy [ 662.106590][ T5919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.116279][ T5966] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 662.207149][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.239979][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.260637][ T172] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.267962][ T172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.288600][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.295948][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.368334][ T5966] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 662.440587][ T5919] veth0_vlan: entered promiscuous mode [ 662.460295][ T5919] veth1_vlan: entered promiscuous mode [ 662.503614][ T5919] veth0_macvtap: entered promiscuous mode [ 662.532008][ T5919] veth1_macvtap: entered promiscuous mode [ 662.541454][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.560096][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.575948][ T5919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.590533][ T5116] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.600267][ T5116] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.612973][ T172] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.633758][ T172] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.807256][ T5966] veth0_vlan: entered promiscuous mode [ 662.821721][ T5966] veth1_vlan: entered promiscuous mode [ 662.851508][ T5966] veth0_macvtap: entered promiscuous mode [ 662.862073][ T5966] veth1_macvtap: entered promiscuous mode [ 662.886978][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.901581][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.929275][ T5088] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.946681][ T5088] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.962715][ T5088] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.981004][ T5116] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.026699][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 663.026718][ T29] audit: type=1400 audit(920.988:101152): avc: denied { write } for pid=5966 comm="syz-executor" name="loop6" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 663.125973][ T29] audit: type=1400 audit(921.088:101153): avc: denied { execute } for pid=6173 comm="syz.0.14105" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=121256 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 663.379919][ T29] audit: type=1400 audit(921.338:101154): avc: denied { append } for pid=6196 comm="syz.3.14114" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 663.423651][ T6192] SELinux: failed to load policy [ 663.424607][ T29] audit: type=1400 audit(921.388:101155): avc: denied { map } for pid=6194 comm="syz.1.14113" path="socket:[121286]" dev="sockfs" ino=121286 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 663.520528][ T6200] loop3: detected capacity change from 0 to 8192 [ 663.975468][ T29] audit: type=1400 audit(921.938:101156): avc: denied { ioctl } for pid=6235 comm="syz.5.14132" path="socket:[120400]" dev="sockfs" ino=120400 ioctlcmd=0x48e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 664.040817][ T6240] netlink: 'syz.6.14133': attribute type 5 has an invalid length. [ 664.081629][ T6250] sd 0:0:1:0: device reset [ 664.178983][ T6234] SELinux: ebitmap: truncated map [ 664.219505][ T6234] SELinux: failed to load policy [ 664.271366][ T6262] loop6: detected capacity change from 0 to 8192 [ 664.454173][ T29] audit: type=1400 audit(922.418:101157): avc: denied { ioctl } for pid=6274 comm="syz.5.14149" path="net:[4026532380]" dev="nsfs" ino=4026532380 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 664.566432][ T6288] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14155'. [ 664.577572][ T29] audit: type=1400 audit(922.528:101158): avc: denied { bind } for pid=6286 comm="syz.5.14155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 664.714974][ T6295] SELinux: failed to load policy [ 664.792878][ T6304] netlink: 96 bytes leftover after parsing attributes in process `syz.6.14162'. [ 664.837899][ T29] audit: type=1400 audit(922.798:101159): avc: denied { ioctl } for pid=6311 comm="syz.6.14166" path="socket:[120554]" dev="sockfs" ino=120554 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 664.897405][ T6316] netlink: 96 bytes leftover after parsing attributes in process `syz.1.14168'. [ 664.937711][ T29] audit: type=1400 audit(922.898:101160): avc: denied { ioctl } for pid=6317 comm="syz.1.14170" path="socket:[121448]" dev="sockfs" ino=121448 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 665.053759][ T29] audit: type=1400 audit(923.018:101161): avc: denied { remount } for pid=6330 comm="syz.3.14174" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 665.113348][ T6335] syzkaller1: entered promiscuous mode [ 665.119034][ T6335] syzkaller1: entered allmulticast mode [ 666.004990][ T6392] 9pnet_fd: Insufficient options for proto=fd [ 666.147300][ T6386] lo speed is unknown, defaulting to 1000 [ 666.168040][ T6386] hsr0 speed is unknown, defaulting to 1000 [ 666.190545][ T6386] lo speed is unknown, defaulting to 1000 [ 666.879873][ T6421] netlink: 'syz.6.14215': attribute type 4 has an invalid length. [ 667.019240][ T5088] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.027707][ T5088] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 667.046810][ T5088] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.055508][ T5088] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 667.070355][ T5088] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.079266][ T5088] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 667.090578][ T5088] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.099435][ T5088] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 667.231546][ T5088] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.297811][ T5088] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.367489][ T5088] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.447674][ T5088] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.492989][ T6438] lo speed is unknown, defaulting to 1000 [ 667.499354][ T6438] hsr0 speed is unknown, defaulting to 1000 [ 667.506090][ T6438] lo speed is unknown, defaulting to 1000 [ 667.581353][ T5088] bridge_slave_1: left allmulticast mode [ 667.587303][ T5088] bridge_slave_1: left promiscuous mode [ 667.593248][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.603542][ T5088] bridge_slave_0: left allmulticast mode [ 667.609240][ T5088] bridge_slave_0: left promiscuous mode [ 667.615188][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.718864][ T5088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 667.730583][ T5088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 667.741184][ T5088] bond0 (unregistering): Released all slaves [ 667.813108][ T5088] hsr_slave_0: left promiscuous mode [ 667.819079][ T5088] hsr_slave_1: left promiscuous mode [ 667.835961][ T5088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.843782][ T5088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.861097][ T5088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.869226][ T5088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.887333][ T5088] veth1_macvtap: left promiscuous mode [ 667.893282][ T5088] veth0_macvtap: left promiscuous mode [ 667.898903][ T5088] veth1_vlan: left promiscuous mode [ 667.904368][ T5088] veth0_vlan: left promiscuous mode [ 668.046769][ T5088] team0 (unregistering): Port device team_slave_1 removed [ 668.057957][ T5088] team0 (unregistering): Port device team_slave_0 removed [ 668.129955][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 668.129974][ T29] audit: type=1326 audit(926.088:101201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.6.14231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8198e0eec9 code=0x7ffc0000 [ 668.152528][ T6438] chnl_net:caif_netlink_parms(): no params data found [ 668.159502][ T29] audit: type=1326 audit(926.088:101202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6460 comm="syz.6.14231" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8198e0eec9 code=0x7ffc0000 [ 668.265604][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.273375][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.358099][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 668.373569][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 668.384444][ T6482] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 668.384444][ T6482] program syz.0.14238 not setting count and/or reply_len properly [ 668.544001][ T172] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.554541][ T172] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.588680][ T172] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.597926][ T172] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.620106][ T29] audit: type=1400 audit(926.578:101203): avc: denied { setopt } for pid=6490 comm="syz.3.14241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 668.639895][ T29] audit: type=1400 audit(926.578:101204): avc: denied { bind } for pid=6490 comm="syz.3.14241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 668.659453][ T29] audit: type=1400 audit(926.578:101205): avc: denied { listen } for pid=6490 comm="syz.3.14241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 668.680071][ T29] audit: type=1400 audit(926.578:101206): avc: denied { write } for pid=6490 comm="syz.3.14241" path="socket:[121955]" dev="sockfs" ino=121955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 668.716705][ T6438] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.724546][ T6438] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.748943][ T6438] bridge_slave_0: entered allmulticast mode [ 668.772964][ T6438] bridge_slave_0: entered promiscuous mode [ 668.794708][ T6438] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.802217][ T6438] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.824240][ T6438] bridge_slave_1: entered allmulticast mode [ 668.834135][ T6438] bridge_slave_1: entered promiscuous mode [ 668.887578][ T6438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.901693][ T6438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.939928][ T6438] team0: Port device team_slave_0 added [ 668.948751][ T6438] team0: Port device team_slave_1 added [ 668.955499][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14246'. [ 669.002493][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.009584][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.036265][ T6438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.055641][ T6438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.062871][ T6438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.090017][ T6438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.115461][ T6510] netlink: 48 bytes leftover after parsing attributes in process `syz.3.14249'. [ 669.153243][ T6438] hsr_slave_0: entered promiscuous mode [ 669.159884][ T6438] hsr_slave_1: entered promiscuous mode [ 669.244873][ T29] audit: type=1400 audit(927.208:101207): avc: denied { read } for pid=6522 comm="syz.3.14255" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 669.268251][ T29] audit: type=1400 audit(927.208:101208): avc: denied { open } for pid=6522 comm="syz.3.14255" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 669.320620][ T6530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 669.329712][ T6530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 669.333030][ T6438] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 669.348086][ T6438] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 669.358679][ T6438] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 669.369175][ T6438] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 669.422543][ T6438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.437194][ T6438] 8021q: adding VLAN 0 to HW filter on device team0 [ 669.449660][ T5063] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.456809][ T5063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.469601][ T5063] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.477084][ T5063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.565452][ T6438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.710957][ T6438] veth0_vlan: entered promiscuous mode [ 669.721149][ T6438] veth1_vlan: entered promiscuous mode [ 669.746499][ T6438] veth0_macvtap: entered promiscuous mode [ 669.755961][ T6438] veth1_macvtap: entered promiscuous mode [ 669.770211][ T6438] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 669.782875][ T6438] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 669.795992][ T5063] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.806208][ T5063] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.815666][ T5063] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.827140][ T5063] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.917902][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14262'. [ 669.963068][ T29] audit: type=1326 audit(927.928:101209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.7.14264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f8eec9 code=0x7ffc0000 [ 669.986617][ T29] audit: type=1326 audit(927.928:101210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6569 comm="syz.7.14264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe384f8eec9 code=0x7ffc0000 [ 670.013666][ T6568] netlink: 32 bytes leftover after parsing attributes in process `syz.1.14263'. [ 670.167334][ T6588] wg2: entered promiscuous mode [ 670.172829][ T6588] wg2: entered allmulticast mode [ 670.789034][ T6628] loop6: detected capacity change from 0 to 2048 [ 670.804955][ T6628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 670.915971][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14294'. [ 670.918342][ T5966] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 670.927618][ T6637] IPVS: Error connecting to the multicast addr [ 670.953317][ T5966] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 670.980223][ T5966] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.182911][ T6661] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 671.873248][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14327'. [ 672.033123][ T9] hid_parser_main: 33 callbacks suppressed [ 672.033147][ T9] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 672.046729][ T9] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 672.054326][ T9] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 672.061854][ T9] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 672.069463][ T9] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 672.077070][ T9] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 672.084534][ T9] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 672.091966][ T9] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 672.099397][ T9] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 672.106923][ T9] hid-generic 0003:0003:0000.0019: unknown main item tag 0x0 [ 672.196414][ T9] hid-generic 0003:0003:0000.0019: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 672.364147][ T6750] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14340'. [ 672.723071][ T6761] loop7: detected capacity change from 0 to 512 [ 672.734254][ T6761] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 672.769654][ T6761] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 672.777968][ T6761] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002] [ 672.903264][ T6761] System zones: 0-1, 15-15, 18-18, 34-34 [ 672.912161][ T6761] EXT4-fs (loop7): orphan cleanup on readonly fs [ 672.918611][ T6761] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 672.933380][ T6761] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 672.958137][ T6761] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.14342: bg 0: block 40: padding at end of block bitmap is not set [ 672.972069][ T6771] serio: Serial port ptm0 [ 672.973625][ T6761] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 672.993560][ T6761] EXT4-fs (loop7): 1 truncate cleaned up [ 673.000518][ T6761] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 673.066220][ T6438] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 673.154923][ T6786] tipc: Started in network mode [ 673.159909][ T6786] tipc: Node identity 662290127beb, cluster identity 4711 [ 673.167837][ T6786] tipc: Enabled bearer , priority 0 [ 673.212997][ T6786] syzkaller0: entered promiscuous mode [ 673.218668][ T6786] syzkaller0: entered allmulticast mode [ 673.225153][ T6786] tipc: Resetting bearer [ 673.252283][ T6785] tipc: Resetting bearer [ 673.272926][ T6785] tipc: Disabling bearer [ 673.385074][ T6804] netlink: 68 bytes leftover after parsing attributes in process `syz.7.14360'. [ 673.462759][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 673.462778][ T29] audit: type=1326 audit(931.428:101340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.0.14363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff07eec9 code=0x7ffc0000 [ 673.520199][ T29] audit: type=1326 audit(931.428:101341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.0.14363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd1ff07eec9 code=0x7ffc0000 [ 673.543501][ T29] audit: type=1326 audit(931.428:101342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.0.14363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff07eec9 code=0x7ffc0000 [ 673.567362][ T29] audit: type=1326 audit(931.428:101343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.0.14363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ff07eec9 code=0x7ffc0000 [ 673.591132][ T29] audit: type=1326 audit(931.428:101344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.0.14363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff07eec9 code=0x7ffc0000 [ 673.614840][ T29] audit: type=1326 audit(931.428:101345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.0.14363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1ff07eec9 code=0x7ffc0000 [ 673.638424][ T29] audit: type=1326 audit(931.428:101346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.0.14363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ff07eec9 code=0x7ffc0000 [ 673.661824][ T29] audit: type=1326 audit(931.428:101347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.0.14363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd1ff07eec9 code=0x7ffc0000 [ 673.685286][ T29] audit: type=1326 audit(931.428:101348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.0.14363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1ff07ef03 code=0x7ffc0000 [ 673.708968][ T29] audit: type=1326 audit(931.428:101349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6812 comm="syz.0.14363" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd1ff07d97f code=0x7ffc0000 [ 673.891446][ T6837] lo speed is unknown, defaulting to 1000 [ 673.899286][ T6837] hsr0 speed is unknown, defaulting to 1000 [ 673.906134][ T6837] lo speed is unknown, defaulting to 1000 [ 673.922211][ T6845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14374'. [ 673.931240][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14374'. [ 673.985655][ T1038] hid-generic 0003:0003:0000.001A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 674.186469][ T6865] netlink: 'syz.7.14383': attribute type 10 has an invalid length. [ 674.227503][ T6865] team0: Port device dummy0 added [ 674.235407][ T6865] netlink: 'syz.7.14383': attribute type 10 has an invalid length. [ 674.255201][ T6865] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 674.269702][ T6865] team0: Failed to send options change via netlink (err -105) [ 674.279494][ T6865] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 674.288848][ T6865] team0: Port device dummy0 removed [ 674.299107][ T6865] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 674.521454][ T6883] tipc: Enabled bearer , priority 0 [ 674.579138][ T6888] lo speed is unknown, defaulting to 1000 [ 674.600536][ T6888] hsr0 speed is unknown, defaulting to 1000 [ 674.609141][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14395'. [ 674.610586][ T6888] lo speed is unknown, defaulting to 1000 [ 674.618329][ T6895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14395'. [ 674.989850][ T6910] netlink: 'syz.7.14404': attribute type 12 has an invalid length. [ 675.211031][ T6933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14414'. [ 675.224609][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14414'. [ 675.283914][ T6936] IPv6: Can't replace route, no match found [ 675.299248][ T6938] bridge0: port 1(gretap0) entered blocking state [ 675.306379][ T6938] bridge0: port 1(gretap0) entered disabled state [ 675.313237][ T6938] gretap0: entered allmulticast mode [ 675.319306][ T6938] gretap0: entered promiscuous mode [ 675.328875][ T6938] gretap0: left allmulticast mode [ 675.334147][ T6938] gretap0: left promiscuous mode [ 675.339402][ T6938] bridge0: port 1(gretap0) entered disabled state [ 675.440988][ T6940] netlink: 'syz.7.14417': attribute type 12 has an invalid length. [ 675.523870][ T6951] bridge0: port 3(gretap0) entered blocking state [ 675.530374][ T6951] bridge0: port 3(gretap0) entered disabled state [ 675.537351][ T6951] gretap0: entered allmulticast mode [ 675.552533][ T6951] gretap0: entered promiscuous mode [ 675.558259][ T6951] bridge0: port 3(gretap0) entered blocking state [ 675.564822][ T6951] bridge0: port 3(gretap0) entered forwarding state [ 675.575723][ T6951] gretap0: left allmulticast mode [ 675.580815][ T6951] gretap0: left promiscuous mode [ 675.586256][ T6951] bridge0: port 3(gretap0) entered disabled state [ 675.699278][ T6957] syzkaller0: entered promiscuous mode [ 675.704854][ T6957] syzkaller0: entered allmulticast mode [ 675.883385][ T6971] tipc: Enabling of bearer rejected, already enabled [ 675.944231][ T6979] loop7: detected capacity change from 0 to 512 [ 675.951961][ T6979] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 675.964724][ T6979] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 675.980171][ T6979] EXT4-fs (loop7): 1 truncate cleaned up [ 675.987801][ T6979] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 676.036007][ T6438] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 676.047409][ T6987] netlink: 'syz.3.14438': attribute type 10 has an invalid length. [ 676.058564][ T6987] netlink: 'syz.3.14438': attribute type 10 has an invalid length. [ 676.072013][ T6989] loop7: detected capacity change from 0 to 512 [ 676.085583][ T6989] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.14439: bad orphan inode 11862016 [ 676.097876][ T6989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 676.226251][ T6996] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #19: comm syz.7.14439: corrupted inode contents [ 676.246062][ T6996] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #19: comm syz.7.14439: mark_inode_dirty error [ 676.259811][ T6996] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #19: comm syz.7.14439: corrupted inode contents [ 676.272588][ T6996] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2996: inode #19: comm syz.7.14439: mark_inode_dirty error [ 676.286539][ T6996] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2999: inode #19: comm syz.7.14439: mark inode dirty (error -117) [ 676.299899][ T6996] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 676.331055][ T6438] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 676.913978][ T36] usb usb8-port1: attempt power cycle [ 677.323868][ T7011] bridge0: port 1(gretap0) entered blocking state [ 677.330482][ T7011] bridge0: port 1(gretap0) entered disabled state [ 677.337817][ T7011] gretap0: entered allmulticast mode [ 677.348084][ T7011] gretap0: left allmulticast mode [ 677.353491][ T7011] bridge0: port 1(gretap0) entered disabled state [ 677.682287][ T7026] netlink: 64 bytes leftover after parsing attributes in process `syz.3.14455'. [ 677.785320][ T7029] vhci_hcd: invalid port number 96 [ 677.790876][ T7029] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 677.852925][ T7033] netlink: 96 bytes leftover after parsing attributes in process `syz.3.14458'. [ 678.224940][ T7038] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14460'. [ 678.235261][ T7038] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14460'. [ 678.563982][ T7049] IPv4: Oversized IP packet from 127.202.26.0 [ 678.739797][ T36] usb usb8-port1: unable to enumerate USB device [ 678.833159][ T7058] infiniband syz!: set down [ 678.837734][ T7058] infiniband syz!: added team_slave_0 [ 678.855950][ T7058] RDS/IB: syz!: added [ 679.137837][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 679.137856][ T29] audit: type=1400 audit(937.098:101453): avc: denied { read } for pid=7068 comm="syz.1.14473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 679.276380][ T7081] netlink: 3672 bytes leftover after parsing attributes in process `syz.3.14479'. [ 679.378229][ T7082] SELinux: failed to load policy [ 679.415529][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14485'. [ 679.781200][ T7122] netlink: 5420 bytes leftover after parsing attributes in process `syz.1.14496'. [ 679.854320][ T29] audit: type=1400 audit(937.818:101454): avc: denied { watch watch_reads } for pid=7130 comm="syz.3.14500" path="/proc/7266" dev="proc" ino=124077 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 679.938669][ T7135] vhci_hcd: invalid port number 96 [ 679.944218][ T7135] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 679.987931][ T29] audit: type=1400 audit(937.948:101455): avc: denied { connect } for pid=7136 comm="syz.3.14502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 680.145445][ T7144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7144 comm=syz.3.14505 [ 680.356665][ T5088] tipc: Subscription rejected, illegal request [ 680.446105][ T7168] tipc: Started in network mode [ 680.451065][ T7168] tipc: Node identity 4, cluster identity 4711 [ 680.457284][ T7168] tipc: Node number set to 4 [ 680.465173][ T29] audit: type=1326 audit(938.428:101456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.1.14509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54f27eec9 code=0x7ffc0000 [ 680.489276][ T29] audit: type=1326 audit(938.428:101457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.1.14509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54f27eec9 code=0x7ffc0000 [ 680.514579][ T29] audit: type=1326 audit(938.478:101458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.1.14509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fb54f27eec9 code=0x7ffc0000 [ 680.538173][ T29] audit: type=1326 audit(938.478:101459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.1.14509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54f27eec9 code=0x7ffc0000 [ 680.562618][ T29] audit: type=1326 audit(938.498:101460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7151 comm="syz.1.14509" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54f27eec9 code=0x7ffc0000 [ 680.792284][ T29] audit: type=1326 audit(938.758:101461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7184 comm="syz.3.14524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 680.815942][ T29] audit: type=1326 audit(938.758:101462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7184 comm="syz.3.14524" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f692d45eec9 code=0x7ffc0000 [ 681.176345][ T7207] lo speed is unknown, defaulting to 1000 [ 681.183567][ T7207] hsr0 speed is unknown, defaulting to 1000 [ 681.191682][ T7207] lo speed is unknown, defaulting to 1000 [ 681.891872][ T7255] syzkaller0: entered promiscuous mode [ 681.897508][ T7255] syzkaller0: entered allmulticast mode [ 681.984975][ T7263] netlink: 22 bytes leftover after parsing attributes in process `syz.7.14558'. [ 682.025131][ T7267] loop7: detected capacity change from 0 to 128 [ 682.076609][ T7275] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 682.076609][ T7275] program syz.6.14564 not setting count and/or reply_len properly [ 682.114936][ T7271] ALSA: seq fatal error: cannot create timer (-19) [ 682.161758][ T7281] netlink: 'syz.3.14566': attribute type 13 has an invalid length. [ 682.177528][ T5088] Bluetooth: hci0: Frame reassembly failed (-84) [ 682.346858][ T7288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14569'. [ 682.356251][ T7288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.14569'. [ 683.043821][ T7308] loop7: detected capacity change from 0 to 1024 [ 683.050651][ T7308] EXT4-fs: Ignoring removed orlov option [ 683.056550][ T7308] EXT4-fs: Ignoring removed nomblk_io_submit option [ 683.087068][ T7308] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 683.166998][ T6438] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 683.206517][ T7313] loop7: detected capacity change from 0 to 1024 [ 683.225235][ T7313] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 683.261834][ T6438] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 683.332913][ T7319] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14580'. [ 684.201949][ T8361] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 684.208768][ T3503] Bluetooth: hci0: command 0x1003 tx timeout [ 684.315884][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14599'. [ 684.401884][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 684.402026][ T29] audit: type=1400 audit(942.358:101586): avc: denied { write } for pid=7369 comm="syz.7.14601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 684.448771][ T29] audit: type=1400 audit(942.408:101587): avc: denied { execmem } for pid=7375 comm="syz.7.14603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 684.554490][ T29] audit: type=1326 audit(942.518:101588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.1.14607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54f27eec9 code=0x7ffc0000 [ 684.577952][ T29] audit: type=1326 audit(942.518:101589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.1.14607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54f27eec9 code=0x7ffc0000 [ 684.672038][ T29] audit: type=1326 audit(942.538:101590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.1.14607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb54f27eec9 code=0x7ffc0000 [ 684.695487][ T29] audit: type=1326 audit(942.538:101591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.1.14607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54f27eec9 code=0x7ffc0000 [ 684.718716][ T29] audit: type=1326 audit(942.538:101592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.1.14607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54f27eec9 code=0x7ffc0000 [ 684.742145][ T29] audit: type=1326 audit(942.538:101593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.1.14607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb54f27eec9 code=0x7ffc0000 [ 684.765336][ T29] audit: type=1326 audit(942.538:101594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.1.14607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb54f27eec9 code=0x7ffc0000 [ 684.788828][ T29] audit: type=1326 audit(942.538:101595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7383 comm="syz.1.14607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb54f27eec9 code=0x7ffc0000 [ 684.847042][ T7393] syzkaller0: Caught tx_queue_len zero misconfig [ 685.109506][ T7416] netlink: 24 bytes leftover after parsing attributes in process `syz.7.14620'. [ 685.220033][ T7425] loop6: detected capacity change from 0 to 1024 [ 685.229436][ T7425] EXT4-fs: Ignoring removed bh option [ 685.236219][ T7425] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 685.317270][ T7425] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 685.353325][ T5966] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 685.492086][ T7432] netlink: 'syz.6.14626': attribute type 6 has an invalid length. [ 685.500001][ T7432] netlink: 32 bytes leftover after parsing attributes in process `syz.6.14626'. [ 686.030817][ T7450] netlink: 168 bytes leftover after parsing attributes in process `syz.1.14633'. [ 686.079794][ T7454] netlink: 1347 bytes leftover after parsing attributes in process `syz.1.14634'. [ 686.222677][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14638'. [ 686.326309][ T7476] loop7: detected capacity change from 0 to 1024 [ 686.341634][ T7476] EXT4-fs: Ignoring removed nobh option [ 686.347337][ T7476] EXT4-fs: Ignoring removed bh option [ 686.365088][ T7476] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 686.432922][ T6438] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.462914][ T7486] loop7: detected capacity change from 0 to 128 [ 686.494898][ T7486] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 686.563683][ T6438] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 687.512557][ T3623] usb usb8-port1: attempt power cycle [ 687.853299][ T7512] Set syz1 is full, maxelem 65536 reached [ 687.926329][ T7529] syzkaller0: Caught tx_queue_len zero misconfig [ 688.772726][ T7554] veth0: entered promiscuous mode [ 688.802418][ T7554] veth0: left promiscuous mode [ 688.993179][ T7562] pim6reg1: entered promiscuous mode [ 688.998541][ T7562] pim6reg1: entered allmulticast mode [ 689.171680][ T5116] Bluetooth: hci0: Frame reassembly failed (-84) [ 689.382677][ T3623] usb usb8-port1: unable to enumerate USB device [ 689.428400][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 689.428421][ T29] audit: type=1400 audit(947.388:101696): avc: denied { getopt } for pid=7565 comm="syz.6.14683" lport=13 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 689.566174][ T7571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=7571 comm=syz.6.14684 [ 690.066227][ T29] audit: type=1400 audit(948.028:101697): avc: denied { load_policy } for pid=7578 comm="syz.7.14687" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 690.090150][ T7581] SELinux: failed to load policy [ 690.124893][ T29] audit: type=1400 audit(948.089:101698): avc: denied { execute } for pid=7588 comm="syz.1.14691" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=124827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 690.145477][ T7587] syzkaller0: entered promiscuous mode [ 690.157059][ T7587] syzkaller0: entered allmulticast mode [ 690.341021][ T29] audit: type=1400 audit(948.299:101699): avc: denied { connect } for pid=7594 comm="syz.6.14694" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 690.386672][ T29] audit: type=1400 audit(948.349:101700): avc: denied { bind } for pid=7597 comm="syz.6.14695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 690.418640][ T29] audit: type=1400 audit(948.369:101701): avc: denied { ioctl } for pid=7597 comm="syz.6.14695" path="socket:[124842]" dev="sockfs" ino=124842 ioctlcmd=0x48e3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 690.463755][ T29] audit: type=1400 audit(948.429:101702): avc: denied { create } for pid=7601 comm="syz.6.14697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 690.525713][ T7602] __nla_validate_parse: 1 callbacks suppressed [ 690.525730][ T7602] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14697'. [ 690.551202][ T29] audit: type=1400 audit(948.509:101703): avc: denied { mounton } for pid=7603 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 690.668102][ T29] audit: type=1400 audit(948.629:101704): avc: denied { create } for pid=7609 comm="syz.6.14698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 690.688777][ T29] audit: type=1400 audit(948.629:101705): avc: denied { setopt } for pid=7609 comm="syz.6.14698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 690.867944][ T7603] lo speed is unknown, defaulting to 1000 [ 690.885088][ T7603] hsr0 speed is unknown, defaulting to 1000 [ 690.895618][ T7603] lo speed is unknown, defaulting to 1000 [ 691.121742][ T7603] chnl_net:caif_netlink_parms(): no params data found [ 691.242429][ T8361] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 691.258355][ T7603] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.265801][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.365152][ T7603] bridge_slave_0: entered allmulticast mode [ 691.392047][ T7603] bridge_slave_0: entered promiscuous mode [ 691.429986][ T7603] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.437261][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.481949][ T7603] bridge_slave_1: entered allmulticast mode [ 691.488504][ T7632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14704'. [ 691.503229][ T7603] bridge_slave_1: entered promiscuous mode [ 691.531550][ T7634] netlink: 24 bytes leftover after parsing attributes in process `'. [ 691.626797][ T7603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.679394][ T7603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.884624][ T7639] SELinux: failed to load policy [ 692.104350][ T172] bond1 (unregistering): Released all slaves [ 692.128174][ T172] bond2 (unregistering): Released all slaves [ 692.148494][ T172] bond3 (unregistering): Released all slaves [ 692.169840][ T172] bond4 (unregistering): Released all slaves [ 692.194471][ T172] bond5 (unregistering): Released all slaves [ 692.222963][ T172] bond6 (unregistering): Released all slaves [ 692.251789][ T172] bond7 (unregistering): Released all slaves [ 692.267765][ T172] bond8 (unregistering): Released all slaves [ 692.340181][ T172] tipc: Left network mode [ 692.346252][ T7603] team0: Port device team_slave_0 added [ 692.362475][ T7603] team0: Port device team_slave_1 added [ 692.431790][ T7664] vxcan1: entered allmulticast mode [ 692.444911][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.452132][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.478238][ T7603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.555917][ T7672] loop7: detected capacity change from 0 to 512 [ 692.579205][ T7672] EXT4-fs (loop7): 1 orphan inode deleted [ 692.592525][ T7672] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 692.638922][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.646089][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 692.672336][ T7603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.713815][ T6438] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 692.792086][ T7603] hsr_slave_0: entered promiscuous mode [ 692.821635][ T7603] hsr_slave_1: entered promiscuous mode [ 692.831375][ T7603] debugfs: 'hsr0' already exists in 'hsr' [ 692.837269][ T7603] Cannot create hsr debugfs directory [ 692.931875][ T7699] loop6: detected capacity change from 0 to 512 [ 692.977933][ T172] IPVS: stop unused estimator thread 0... [ 692.979454][ T7699] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.14729: bg 0: block 248: padding at end of block bitmap is not set [ 692.999610][ T7699] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.14729: Failed to acquire dquot type 1 [ 693.012419][ T7699] EXT4-fs (loop6): 1 truncate cleaned up [ 693.018566][ T7699] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 693.130821][ T5966] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 693.148904][ T7603] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 693.160216][ T7603] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 693.171292][ T7603] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 693.181168][ T7603] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 693.256821][ T7603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.281555][ T7603] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.292828][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.300410][ T5108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.312263][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.319385][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.399795][ T7603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 693.541198][ T7603] veth0_vlan: entered promiscuous mode [ 693.550099][ T7603] veth1_vlan: entered promiscuous mode [ 693.567911][ T7603] veth0_macvtap: entered promiscuous mode [ 693.576158][ T7603] veth1_macvtap: entered promiscuous mode [ 693.588951][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 693.601131][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 693.613630][ T172] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.623017][ T172] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.631946][ T172] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 693.643886][ T5108] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.195423][ T7762] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14744'. [ 694.234586][ T5108] Bluetooth: hci0: Frame reassembly failed (-84) [ 694.241639][ T8361] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 694.570632][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14756'. [ 694.624635][ T29] kauditd_printk_skb: 704 callbacks suppressed [ 694.624698][ T29] audit: type=1400 audit(952.587:102408): avc: denied { read } for pid=7789 comm="syz.6.14757" name="sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 694.654620][ T29] audit: type=1400 audit(952.587:102409): avc: denied { open } for pid=7789 comm="syz.6.14757" path="/dev/sg0" dev="devtmpfs" ino=137 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 694.703551][ T7794] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14758'. [ 694.712802][ T29] audit: type=1400 audit(952.587:102410): avc: denied { create } for pid=7787 comm="syz.1.14756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 694.732303][ T29] audit: type=1400 audit(952.587:102411): avc: denied { ioctl } for pid=7787 comm="syz.1.14756" path="socket:[126327]" dev="sockfs" ino=126327 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 694.775144][ T7797] loop6: detected capacity change from 0 to 128 [ 694.783969][ T7797] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 694.799529][ T29] audit: type=1400 audit(952.757:102412): avc: denied { add_name } for pid=7796 comm="syz.6.14759" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 694.820614][ T29] audit: type=1400 audit(952.757:102413): avc: denied { create } for pid=7796 comm="syz.6.14759" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 694.846680][ T29] audit: type=1400 audit(952.797:102414): avc: denied { read write open } for pid=7796 comm="syz.6.14759" path="/103/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file1" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 694.908069][ T29] audit: type=1400 audit(952.857:102415): avc: denied { setattr } for pid=7796 comm="syz.6.14759" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 694.934896][ T5966] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 695.101188][ T29] audit: type=1400 audit(953.057:102416): avc: denied { read write } for pid=7805 comm="syz.6.14763" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 695.125763][ T29] audit: type=1400 audit(953.057:102417): avc: denied { open } for pid=7805 comm="syz.6.14763" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 695.592223][ T7829] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14774'. [ 695.604412][ T7829] netlink: 416 bytes leftover after parsing attributes in process `syz.3.14774'. [ 695.723787][ T7837] sd 0:0:1:0: device reset [ 695.868018][ T7852] loop6: detected capacity change from 0 to 1024 [ 695.893362][ T7852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.921691][ T5966] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 696.294469][ T3503] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 696.300711][ T8361] Bluetooth: hci0: command 0x1003 tx timeout [ 696.451449][ T7883] netlink: 'syz.7.14795': attribute type 1 has an invalid length. [ 696.459519][ T7883] netlink: 224 bytes leftover after parsing attributes in process `syz.7.14795'. [ 696.582447][ T7890] loop7: detected capacity change from 0 to 2048 [ 696.676693][ T7894] loop7: detected capacity change from 0 to 128 [ 697.134391][ T7931] loop8: detected capacity change from 0 to 2048 [ 697.167162][ T7931] EXT4-fs (loop8): failed to initialize system zone (-117) [ 697.192654][ T7931] EXT4-fs (loop8): mount failed [ 697.253896][ T7931] macvlan0: entered promiscuous mode [ 697.290543][ T7931] batadv0: entered promiscuous mode [ 697.302215][ T7931] hsr1: entered allmulticast mode [ 697.307674][ T7931] macvlan0: entered allmulticast mode [ 697.313084][ T7931] veth1_vlan: entered allmulticast mode [ 697.318940][ T7931] batadv0: entered allmulticast mode [ 697.497770][ T7965] loop7: detected capacity change from 0 to 128 [ 697.509887][ T7965] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 697.547423][ T7965] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 697.556896][ T7975] loop8: detected capacity change from 0 to 256 [ 697.599170][ T5088] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 697.624853][ T7983] wg2: left promiscuous mode [ 697.629650][ T7983] wg2: left allmulticast mode [ 697.838218][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14822'. [ 697.900572][ T8023] tipc: Started in network mode [ 697.905676][ T8023] tipc: Node identity 12df918fed0b, cluster identity 4711 [ 697.912901][ T8023] tipc: Enabled bearer , priority 0 [ 697.967150][ T8022] tipc: Resetting bearer [ 698.016336][ T8022] tipc: Disabling bearer [ 698.165534][ T8036] netlink: 'syz.8.14828': attribute type 10 has an invalid length. [ 698.206964][ T8036] team0: Port device dummy0 added [ 698.214396][ T8036] netlink: 'syz.8.14828': attribute type 10 has an invalid length. [ 698.223516][ T8036] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 698.239403][ T8036] team0: Failed to send options change via netlink (err -105) [ 698.247147][ T8036] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 698.256309][ T8036] team0: Port device dummy0 removed [ 698.264266][ T8036] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 698.596902][ T8051] tipc: Cannot configure node identity twice [ 698.800762][ T8055] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14837'. [ 698.836489][ T8057] netlink: 'syz.3.14835': attribute type 10 has an invalid length. [ 698.855229][ T8057] netlink: 'syz.3.14835': attribute type 10 has an invalid length. [ 698.902770][ T8064] wg2: entered promiscuous mode [ 698.907765][ T8064] wg2: entered allmulticast mode [ 699.051316][ T8072] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14844'. [ 699.116689][ T8076] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14846'. [ 699.161583][ T5118] Bluetooth: hci0: Frame reassembly failed (-84) [ 699.291849][ T8098] netlink: 'syz.6.14857': attribute type 5 has an invalid length. [ 699.470029][ T8107] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 699.594800][ T8122] lo speed is unknown, defaulting to 1000 [ 699.601417][ T8122] hsr0 speed is unknown, defaulting to 1000 [ 699.816253][ T29] kauditd_printk_skb: 149 callbacks suppressed [ 699.816269][ T29] audit: type=1400 audit(957.764:102567): avc: denied { setopt } for pid=8135 comm="syz.1.14875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 699.842500][ T29] audit: type=1400 audit(957.764:102568): avc: denied { write } for pid=8135 comm="syz.1.14875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 699.923097][ T29] audit: type=1326 audit(957.854:102569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8111 comm="syz.6.14864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8198e0eec9 code=0x7ffc0000 [ 699.946838][ T29] audit: type=1326 audit(957.854:102570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8111 comm="syz.6.14864" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8198e0eec9 code=0x7ffc0000 [ 700.065345][ T8151] netlink: 20 bytes leftover after parsing attributes in process `syz.1.14880'. [ 700.080564][ T8153] syzkaller0: left promiscuous mode [ 700.085923][ T8153] syzkaller0: left allmulticast mode [ 700.093365][ T8153] tipc: Enabling of bearer rejected, already enabled [ 700.154858][ T8155] pim6reg1: entered promiscuous mode [ 700.160418][ T8155] pim6reg1: entered allmulticast mode [ 700.271414][ T29] audit: type=1400 audit(958.224:102571): avc: denied { create } for pid=8165 comm="syz.6.14887" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 700.304446][ T8166] can0: slcan on ttyS3. [ 700.335641][ T29] audit: type=1400 audit(958.284:102572): avc: denied { read } for pid=8170 comm="syz.3.14888" name="qrtr-tun" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 700.364697][ T29] audit: type=1400 audit(958.314:102573): avc: denied { connect } for pid=8170 comm="syz.3.14888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 700.384590][ T29] audit: type=1400 audit(958.314:102574): avc: denied { write } for pid=8170 comm="syz.3.14888" path="socket:[126825]" dev="sockfs" ino=126825 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 700.410096][ T8165] can0 (unregistered): slcan off ttyS3. [ 700.435773][ T29] audit: type=1400 audit(958.374:102575): avc: denied { ioctl } for pid=8174 comm="syz.1.14889" path="socket:[128016]" dev="sockfs" ino=128016 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 700.461883][ T29] audit: type=1400 audit(958.384:102576): avc: denied { unlink } for pid=5966 comm="syz-executor" name="file0" dev="tmpfs" ino=668 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 700.625626][ T8192] tipc: Enabled bearer , priority 0 [ 700.644722][ T8192] tipc: Disabling bearer [ 700.660137][ T8200] loop6: detected capacity change from 0 to 1024 [ 700.660308][ T8196] netlink: 120 bytes leftover after parsing attributes in process `syz.1.14896'. [ 700.667509][ T8200] EXT4-fs: Ignoring removed oldalloc option [ 700.682275][ T8200] EXT4-fs: Ignoring removed bh option [ 700.706450][ T8200] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 700.856725][ T8217] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14903'. [ 700.940828][ T8225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 700.960515][ T8225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.989467][ T5089] Bluetooth: hci1: Frame reassembly failed (-84) [ 701.099183][ T8237] vhci_hcd: invalid port number 96 [ 701.104453][ T8237] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 701.166952][T15231] Bluetooth: hci0: command 0x1003 tx timeout [ 701.173695][ T8361] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 701.272448][ T8251] netlink: 28 bytes leftover after parsing attributes in process `syz.3.14919'. [ 701.279600][ T8254] loop7: detected capacity change from 0 to 1024 [ 701.289482][ T8254] EXT4-fs: inline encryption not supported [ 701.295671][ T8254] EXT4-fs: Ignoring removed i_version option [ 701.310470][ T8254] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 701.344691][ T8254] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 701.377530][ T6438] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.391946][ T8200] ================================================================== [ 701.400281][ T8200] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 701.408408][ T8200] [ 701.410745][ T8200] write to 0xffff88811a8ecb3c of 4 bytes by task 8211 on cpu 0: [ 701.418539][ T8200] xas_set_mark+0x12b/0x140 [ 701.423071][ T8200] __folio_start_writeback+0x155/0x390 [ 701.428661][ T8200] ext4_bio_write_folio+0x5ad/0x9f0 [ 701.433896][ T8200] mpage_process_page_bufs+0x4a1/0x620 [ 701.439464][ T8200] mpage_prepare_extent_to_map+0x786/0xc00 [ 701.445289][ T8200] ext4_do_writepages+0xa05/0x2750 [ 701.450445][ T8200] ext4_writepages+0x176/0x300 [ 701.455223][ T8200] do_writepages+0x1c6/0x310 [ 701.459915][ T8200] file_write_and_wait_range+0x156/0x2c0 [ 701.465570][ T8200] generic_buffers_fsync_noflush+0x45/0x120 [ 701.471578][ T8200] ext4_sync_file+0x1ab/0x690 [ 701.476370][ T8200] vfs_fsync_range+0x10d/0x130 [ 701.481150][ T8200] ext4_buffered_write_iter+0x34f/0x3c0 [ 701.486818][ T8200] ext4_file_write_iter+0x387/0xf60 [ 701.492054][ T8200] iter_file_splice_write+0x666/0xa60 [ 701.497523][ T8200] direct_splice_actor+0x156/0x2a0 [ 701.502747][ T8200] splice_direct_to_actor+0x312/0x680 [ 701.508185][ T8200] do_splice_direct+0xda/0x150 [ 701.512971][ T8200] do_sendfile+0x380/0x650 [ 701.517534][ T8200] __x64_sys_sendfile64+0x105/0x150 [ 701.522778][ T8200] x64_sys_call+0x2bb4/0x3000 [ 701.527475][ T8200] do_syscall_64+0xd2/0x200 [ 701.532079][ T8200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.538164][ T8200] [ 701.540583][ T8200] read to 0xffff88811a8ecb3c of 4 bytes by task 8200 on cpu 1: [ 701.548247][ T8200] file_write_and_wait_range+0x10e/0x2c0 [ 701.553943][ T8200] generic_buffers_fsync_noflush+0x45/0x120 [ 701.559959][ T8200] ext4_sync_file+0x1ab/0x690 [ 701.564918][ T8200] vfs_fsync_range+0x10d/0x130 [ 701.569712][ T8200] ext4_buffered_write_iter+0x34f/0x3c0 [ 701.575290][ T8200] ext4_file_write_iter+0x387/0xf60 [ 701.580692][ T8200] iter_file_splice_write+0x666/0xa60 [ 701.586178][ T8200] direct_splice_actor+0x156/0x2a0 [ 701.591410][ T8200] splice_direct_to_actor+0x312/0x680 [ 701.597100][ T8200] do_splice_direct+0xda/0x150 [ 701.601919][ T8200] do_sendfile+0x380/0x650 [ 701.606472][ T8200] __x64_sys_sendfile64+0x105/0x150 [ 701.611786][ T8200] x64_sys_call+0x2bb4/0x3000 [ 701.616676][ T8200] do_syscall_64+0xd2/0x200 [ 701.621323][ T8200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.627538][ T8200] [ 701.629886][ T8200] value changed: 0x0a000021 -> 0x04000021 [ 701.635718][ T8200] [ 701.638067][ T8200] Reported by Kernel Concurrency Sanitizer on: [ 701.644499][ T8200] CPU: 1 UID: 0 PID: 8200 Comm: syz.6.14898 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 701.656174][ T8200] Tainted: [W]=WARN [ 701.660200][ T8200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 701.670857][ T8200] ================================================================== [ 701.705100][ T8265] loop7: detected capacity change from 0 to 2048 [ 701.719767][ T5966] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.729800][ T8265] EXT4-fs (loop7): failed to initialize system zone (-117) [ 701.737385][ T8265] EXT4-fs (loop7): mount failed [ 701.751809][ T8265] macvlan0: entered promiscuous mode [ 701.758668][ T8265] batadv0: entered promiscuous mode [ 701.764538][ T8265] debugfs: 'hsr1' already exists in 'hsr' [ 701.770357][ T8265] Cannot create hsr debugfs directory [ 701.775912][ T8265] hsr1: entered allmulticast mode [ 701.781005][ T8265] macvlan0: entered allmulticast mode [ 701.786407][ T8265] veth1_vlan: entered allmulticast mode [ 701.792074][ T8265] batadv0: entered allmulticast mode [ 703.007724][ T8361] Bluetooth: hci1: command 0x1003 tx timeout [ 703.013820][ T3503] Bluetooth: hci1: Opcode 0x1003 failed: -110