last executing test programs: 17.236086411s ago: executing program 1 (id=4985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0xfffffffffffffffc}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f0000000180)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@noload}, {@stripe={'stripe', 0x3d, 0x79}}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@user_xattr}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d0, &(0x7f00000002c0)="$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") r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) setsockopt$sock_int(r4, 0x1, 0x2a, &(0x7f0000000280)=0xd4a, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r8}, 0x10) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r9, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000a00)=[@fadd={0x58, 0x114, 0x6, {{0x9, 0x80}, &(0x7f0000000400)=0x6, 0x0, 0x1, 0x10001, 0x2, 0x9, 0x8, 0xb}}], 0x58}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) ptrace$ARCH_SET_GS(0x1e, 0x0, &(0x7f00000001c0), 0x1001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX=r4, @ANYRESDEC=r2, @ANYRES16=r1, @ANYRES32=r3, @ANYRESHEX, @ANYBLOB="b84b6ff2a773e910a7d3101ae1da76254b53a1de0d46f2c66762d1aeeba01c284f3a42c1cb658c0247dca98a787cc92c3d80d51bd3b4d06ccf5ba60a4b51176a66efd083d74f100f5193f0f3ac5a496b28602c05782caf0fd5ee65e2c7d9b0cabfc70ab48b830213dabd804563fc411f37b20a308d8c0c55f2d7031372683bd75d962f0cd1d0fe427f"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='jbd2_shrink_checkpoint_list\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r11 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r11, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 16.361803964s ago: executing program 1 (id=4997): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f00000003c0), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 9.240548387s ago: executing program 1 (id=5048): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000c085) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000504c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010005080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x200, 0xa) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x4) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1}) ioctl$BLKTRACESETUP(r6, 0x1276, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000400)) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 8.552565607s ago: executing program 2 (id=5053): socket$xdp(0x2c, 0x3, 0x0) pipe(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000340)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) fchmodat(0xffffffffffffffff, 0x0, 0x1be) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x2c, r4, 0x7, 0x2, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_WOL_SET(r2, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) ftruncate(r5, 0xff) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") 8.381197159s ago: executing program 1 (id=5055): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x17c) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r3, 0x0, 0x0) sendmsg$NFC_CMD_DEP_LINK_UP(r2, 0x0, 0x20048802) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r5, 0x7d243a6ea807936d, 0x12, 0x25dfdbf8, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48891}, 0x880) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'ip_vti0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x711, 0x20, 0xffffffff, 0x5, {{0xd, 0x4, 0x2, 0x3, 0x34, 0x67, 0x0, 0x6, 0x4, 0x0, @multicast2, @empty, {[@timestamp={0x44, 0x20, 0x3b, 0x0, 0x5, [0x401, 0x9, 0x0, 0x2ee, 0x80, 0x8000, 0x7]}]}}}}}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) ftruncate(0xffffffffffffffff, 0xd831) sync_file_range(0xffffffffffffffff, 0x6, 0x0, 0x4) 8.380732089s ago: executing program 2 (id=5056): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='kfree\x00'}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000114b22b09d4e0b"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33200000000000000015000000080003e4", @ANYRES32=0x0, @ANYBLOB="0c009900fcffffff0000000010001d800c00008008000d8004000080"], 0x38}}, 0x0) r5 = fcntl$getown(r0, 0x9) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1b, 0x4, @tid=r5}, &(0x7f0000001080)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000140), 0x10) recvmsg$can_bcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) read(r7, &(0x7f0000001480)=""/4096, 0x1000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0) 8.355648629s ago: executing program 0 (id=5057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) connect$unix(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0xa000000a}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xd, r5) inotify_init1(0x80000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 8.173046982s ago: executing program 1 (id=5058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000020c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r5, &(0x7f00000003c0), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 6.492350056s ago: executing program 2 (id=5062): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000002c0)={0x1d, r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) close(r3) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x58a, &(0x7f0000000b40)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) tgkill(0x0, 0x0, 0x21) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r4}, &(0x7f0000004000), &(0x7f0000004040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000000}, 0x18) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000580), &(0x7f00000006c0)=0x4) bind$can_raw(r0, &(0x7f0000000800), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) statfs(&(0x7f0000000000)='./file0\x00', 0x0) 5.656794838s ago: executing program 0 (id=5066): r0 = getpid() bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xa, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec98848", 0xe}], 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000240), &(0x7f0000000280)=r6}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = syz_pidfd_open(r0, 0x0) setns(r7, 0x24020000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r8, 0x10f, 0x87, &(0x7f0000000180)=r10, 0x17e) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000540)={'gre0\x00', 0x0, 0x7, 0x7, 0x2, 0x2, {{0x1c, 0x4, 0x1, 0x28, 0x70, 0x65, 0x0, 0x7, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@lsrr={0x83, 0x13, 0x3a, [@dev={0xac, 0x14, 0x14, 0xa}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102]}, @cipso={0x86, 0x1b, 0x4, [{0x6, 0x2}, {0x2, 0xf, "c2267c12c7bdc829572746b304"}, {0x2, 0x4, "39b1"}]}, @timestamp={0x44, 0x2c, 0x46, 0x0, 0x4, [0x7fffffff, 0xb8, 0x6, 0x9d, 0x3, 0x66e, 0x8000, 0x237, 0x4, 0xffffffff]}, @noop]}}}}}) bind$packet(r10, &(0x7f0000000600)={0x11, 0x1, r11, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 5.428951042s ago: executing program 3 (id=5069): socket$kcm(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0xffffffff, 0xd) syz_emit_ethernet(0x1162, &(0x7f0000001b00)=ANY=[@ANYBLOB="e904a20000000180c2000000080043e2115400660000ce0690787f000001ac1414bb867500000003000d033360ad980ec7869fcabb05033b00128bc6c278b0486940355164dcfa96d1b4010a2ee76b168319ed86060d02801e6abe142d8410e0ba0605cdea890112d1a06f2ffad7aae3f0af7897de3de0f9060c5a6b4f1e278098d4464b050fc1ace8089c0e5abc90fa7a970a0504b682864300000000000b46d090a3660cfa9b4e0010281f1e7f7c226465a9cd5ebcae2e021225a5591ca5dcc6fb3689e376b2a8f37f0509f10789cd99", @ANYRES32=r4, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x600, &(0x7f0000000440)={&(0x7f0000001940)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01dfffffff9a2600000021"], 0x20}, 0x1, 0x0, 0x0, 0x4000c00}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000ffffffff000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x70, 0x101301) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000540)={[{@nojournal_checksum}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@init_itable}, {@oldalloc}, {@init_itable_val={'init_itable', 0x3d, 0x2}}]}, 0x2, 0x46a, &(0x7f00000006c0)="$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") 5.226846295s ago: executing program 4 (id=5070): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0x4d8, &(0x7f0000000540)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) read(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r2) pipe(0x0) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x800) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, 0x0) write$binfmt_elf64(r1, 0x0, 0x5b0) close(r1) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) ioctl$FIBMAP(r4, 0x1, 0x0) 4.17016489s ago: executing program 4 (id=5071): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b33200000000000000015000000080003e4", @ANYBLOB="0c009900fcffffff0000000010001d800c00008008000d8004000080"], 0x38}}, 0x0) 4.088077651s ago: executing program 0 (id=5072): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='kfree\x00'}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000114b22b09d4e0b"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33200000000000000015000000080003e4", @ANYRES32=0x0, @ANYBLOB="0c009900fcffffff0000000010001d800c00008008000d8004000080"], 0x38}}, 0x0) r5 = fcntl$getown(r0, 0x9) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1b, 0x4, @tid=r5}, &(0x7f0000001080)) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000140), 0x10) recvmsg$can_bcm(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) read(r7, &(0x7f0000001480)=""/4096, 0x1000) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) preadv(r6, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0) 3.865173264s ago: executing program 4 (id=5073): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x8}, 0x18) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = syz_io_uring_setup(0x109, &(0x7f0000000240)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001de7efde4be701161ff81000000040000800400", @ANYRES32=r7], 0x1c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x395780}) io_uring_enter(r4, 0x3516, 0xaddf, 0x2, 0x0, 0x1517f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4f0, 0x340, 0x25, 0x148, 0x0, 0x60, 0x458, 0x2a8, 0x2a8, 0x458, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x44, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_bond\x00', 'veth0\x00', {0xff}}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x4}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8000, 'syz0\x00', {0x481c}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x550) 3.374603811s ago: executing program 2 (id=5074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) connect$unix(r2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x88882, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r3, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) connect$unix(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) getuid() syz_clone3(&(0x7f0000000680)={0x40004000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2.732587121s ago: executing program 3 (id=5075): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x4}, 0x18) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1b, 0x4}, &(0x7f0000001080)) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0) 2.617993512s ago: executing program 0 (id=5076): sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r3, 0x100000005) 2.562325853s ago: executing program 3 (id=5077): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)}, 0x20) 2.256390188s ago: executing program 3 (id=5078): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)='%pS \x00'}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={0x0, 0xfffffff8, 0x4, 0x4, 0x3, 0x9, 0x0, 0x8, {0x0, @in={{0x2, 0x4e24, @local}}, 0x9, 0x8, 0xd, 0x8, 0x3}}, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r5}, 0x10) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) r6 = accept4$unix(r3, 0x0, 0x0, 0x0) recvfrom$unix(r6, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000300)={0x0, 0x7f, 0x700}) 2.227754498s ago: executing program 4 (id=5079): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={0xfffffffffffffffc, 0x12000, 0x1000, 0x0, 0x2}, 0x20) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0d00000006000000040000000140000001000000", @ANYRES32], 0x50) close(0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r5, &(0x7f0000000900)}, 0x20) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="0c030000", @ANYRES16=0x0, @ANYBLOB="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"], 0xfffffffffffffe8c}, 0x1, 0x0, 0x0, 0x200048c0}, 0x4000000) 2.12628295s ago: executing program 3 (id=5080): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0x8}, 0x2, 0xffffffff, 0x6, 0x2, 0x4, 0x5, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup, r1, 0x2f, 0x18, 0x4, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x10, &(0x7f0000002e00), 0x0, 0x0, 0xa0, 0x8, 0x0, 0x0}}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) 1.41070613s ago: executing program 1 (id=5081): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000000000000080001"], 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240008c4}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x141, 0xa5, 0x6b, 0x77, 0x20, 0x24c6, 0x830a, 0xdb08, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xde, 0x2, 0x0, 0xff, 0x47, 0xd0}}]}}]}}, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r4 = epoll_create1(0x0) epoll_pwait2(r4, &(0x7f00000002c0)=[{}], 0x1, &(0x7f0000000640), 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @tail_call]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x1}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x44b, &(0x7f00000004c0)="$eJzs282PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rClJYO9PdLLpxz77lzztN7T3vOPW0AI2sq+yeJ2BoRf0bERD3bXGCq/t/Vy2cXrl0+u5BEtfruP0mt3JXLZxeKosV5W/LMdBqRfpHE7jb1rpw+c3y+Ulk6lednV098NLty+swLx07MH106unRy/6FDBw/MvfzS/hf7EmfWpiu7Pl3es/OtD755+/BXTfG3xNEnU90OPl2t9rm64drWkE7GhtgQ1qUUEdnlKtf6/0SUYu3iTcSbnw+1ccBAVavV6pbOh89VgXtYEs15XR5GRfFBn81/i611EPDq4IYfQ3fptfoEKIv7ar7Vj4xFmpcpt8xv+2kqIt4/9+932RaDeQ4BANDkp2z883y78V8aDzWUuy9fG5qMiPsjYntEPBAROyLiwYha2Ycj4pF11t+6SHLj+Ce92FNgtygb/72Sr201j/+K0V9MlvLctlr85eTIscrSvvw1mY7ypiw/16WOn9/44+tOxxrHf9mW1V+MBfN2XBzb1HzO4vzq/O3E3OjS+YhdY+3iT66vBCQRsTMidvVYx7Fnf9jT6djN4++iD+tM1e8jnqlf/3PREn8h6b4+Ofu/qCztmy3uihv99vuFdzrVf1vx90F2/f/f9v6/Hv9k0rheu7L+Oi789WXHOU2v9/948l4tPZ7v+2R+dfXUXMR4crje6Mb9+9fOLfJF+Sz+6b3t+//2WHsldkdEdhM/GhGPRcTjedufiIgnI2Jvl/h/ff2pD3uPf7Cy+BfXdf3XEuPRuqd9onT8lx+bKp28If5r3a//wVpqOt9zK+9/t9Ku3u5mAAAAuPukEbE1knTmejpNZ2bq35ffEZFWlldWnzuy/PHJxfpvBCYj0uJJ10TD89C5fFpfz5+PiPpXC4rjB/Lnxt+WNtfyMwvLlcVhBw8jbkuH/p/5uzTs1gED5/daMLr0fxhd+j+MLv0fRleb/r95GO0A7rx2n/+fDaEdwJ3X0v8t+8EIMf+H0aX/w+jS/2EkrWyOm/9Ivmui+Es9nn7PJqK8IZoxsESkG6IZGzZRvsv7xfDekwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPrpvwAAAP//9gndaw==") r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) 1.207456373s ago: executing program 2 (id=5082): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='kfree\x00'}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b0000000000114b22b09d4e0bf8db4f2189dc5f9cd6a8af35d6859d"], 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="8b33200000000000000015000000080003e4", @ANYRES32=0x0, @ANYBLOB="0c009900fcffffff0000000010001d800c00008008000d8004000080"], 0x38}}, 0x0) r6 = fcntl$getown(r0, 0x9) timer_create(0x2, &(0x7f0000000040)={0x0, 0x1b, 0x4, @tid=r6}, &(0x7f0000001080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f00000010c0)='/proc/bus/input/devices\x00', 0x0, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000140), 0x10) recvmsg$can_bcm(r8, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x42) read(r8, &(0x7f0000001480)=""/4096, 0x1000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000080)=""/4094, 0xbd}], 0x1, 0x33, 0x0) 1.108656524s ago: executing program 3 (id=5083): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaff, @void, @value}, 0x94) unshare(0x18040000) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], 0x0, 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) ioprio_set$pid(0x2, 0x0, 0x0) mmap(&(0x7f000073d000/0x3000)=nil, 0x3000, 0x2000003, 0x8031, r1, 0x8a7b1000) r2 = gettid() perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x7, 0xfffffffffffffffc}, 0x103200, 0x1, 0x840000, 0x5, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f0000000540)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000c034}}], 0x1, 0x80004) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) pivot_root(&(0x7f0000000000)='.\x00', &(0x7f00000004c0)='./file1\x00') socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 1.093281455s ago: executing program 4 (id=5084): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mount$9p_unix(0x0, &(0x7f0000003600)='.\x00', &(0x7f0000003640), 0x2000000, &(0x7f0000000000)={'trans=unix,', {[{@msize={'msize', 0x3d, 0xffffffff00000000}}]}}) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r6 = syz_open_pts(r5, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r6, 0x5412, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) rt_sigqueueinfo(r2, 0x3b, &(0x7f0000000540)={0x0, 0xe, 0xfffffffb}) write$UHID_INPUT(r1, 0x0, 0x0) 623.806681ms ago: executing program 0 (id=5085): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x6, @perf_config_ext={0x3, 0x9}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, 0x0, &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = memfd_secret(0x80000) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000008000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) time(0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000540)={0x0, @broadcast, @multicast1}, &(0x7f0000000580)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000d80)=@updsa={0x22c, 0x1a, 0x0, 0x70bd2c, 0x25dfdbfb, {{@in=@broadcast, @in6=@local, 0x4e24, 0x8, 0x4e20, 0x9, 0xa, 0x20, 0xc0, 0x3b, r6}, {@in=@multicast1, 0x4d4, 0x33}, @in6=@mcast1, {0x8, 0x7, 0xff, 0xe85, 0x3355, 0x8, 0x0, 0x3017}, {0x9, 0x9, 0x2, 0x8}, {0x7, 0x5, 0xc5ff}, 0x70bd26, 0x0, 0xa, 0x4, 0x8, 0x10}, [@algo_auth={0x139, 0x1, {{'md5-generic\x00'}, 0x788, "044da9f16b7235da5f76b5c963f526583d847762c63078f0090525a4d155f5fad071c350e09af73ad8809a4f2dd5233a4889f321c02f76e00a83052a55ecf12cd96b7edc7952831f9adb90c0970ba08f364a59a98fb57c025f56f0df64272fb56facc6923a5ff53ba057c9abb1abe03a9661249ecf5eef85a043a31a8275e4cfedf32c29cc87dc3b6a5107e871459683417f0749c28eb84dc31931fcafc20bccbfc6d91a511b70464dc02aacbac52e9841807f9c62c551869053fe98d9184f85372219e64904ba824b49235697f3201640bf99b3ebff72a396b2117b99fba96bccb8b2cc8295ca5d9dc8ae961456f96e7a"}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x5}, 0x4040080) syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x0, 0x0) 301.763046ms ago: executing program 0 (id=5086): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty}, &(0x7f0000000100)=0xc) gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newqdisc={0x3c, 0x24, 0xf0b, 0x8070bd2a, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xc}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x3c}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000040)=0xfffffffffffffdb1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) r8 = syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000f00)={[{@usrquota}, {@barrier}, {@resuid}, {@min_batch_time={'min_batch_time', 0x3d, 0x101}}, {@errors_remount}, {@bh}]}, 0x6, 0x600, &(0x7f0000001200)="$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") chmod(&(0x7f0000000000)='./file0\x00', 0x44) setns(r8, 0x8000000) 267.573227ms ago: executing program 2 (id=5087): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f0000000100)={0x9, 0xd000001, 0x0, 0xfffffffffffffffc, 0x401, 0x0, 0x200, 0x7}, 0x0, 0x0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x10000000, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0xfffe, r1, &(0x7f00000001c0)='m', 0x1}]) io_uring_setup(0x1d7e, &(0x7f00000004c0)) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x200040, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000100)="e0b954", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$inet6(0xa, 0x3, 0x3c) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)='map_files\x00') getdents64(r4, &(0x7f0000000080)=""/95, 0x5f) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r5}, 0x18) r6 = inotify_init1(0x80000) inotify_add_watch(r6, &(0x7f0000000400)='.\x00', 0xa4000021) read(r6, 0x0, 0x0) close(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) 0s ago: executing program 4 (id=5088): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r3}, 0x18) r4 = socket$packet(0x11, 0x3, 0x300) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f00000002c0)) r6 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex@De', 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x19, &(0x7f0000000000), 0x9, 0x60f, &(0x7f0000000840)="$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") sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="280000002d000100000000000000000008000000", @ANYRES32], 0x28}], 0x1}, 0x0) kernel console output (not intermixed with test programs): EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 454.548259][ T29] audit: type=1400 audit(1747328358.833:21741): avc: denied { ioctl } for pid=16496 comm="syz.4.4150" path="socket:[52295]" dev="sockfs" ino=52295 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 454.575600][ T29] audit: type=1400 audit(1747328358.863:21742): avc: denied { bind } for pid=16497 comm="syz.0.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 454.595340][ T29] audit: type=1400 audit(1747328358.863:21743): avc: denied { name_bind } for pid=16497 comm="syz.0.4151" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 454.617228][ T29] audit: type=1400 audit(1747328358.863:21744): avc: denied { node_bind } for pid=16497 comm="syz.0.4151" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 454.638362][ T29] audit: type=1400 audit(1747328358.863:21745): avc: denied { listen } for pid=16497 comm="syz.0.4151" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 454.659834][ T29] audit: type=1400 audit(1747328358.863:21746): avc: denied { connect } for pid=16497 comm="syz.0.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 454.679827][ T29] audit: type=1400 audit(1747328358.863:21747): avc: denied { name_connect } for pid=16497 comm="syz.0.4151" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 454.701981][ T29] audit: type=1400 audit(1747328358.863:21748): avc: denied { write } for pid=16497 comm="syz.0.4151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 454.747103][ T6034] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.857284][T16506] loop1: detected capacity change from 0 to 512 [ 454.876472][T16506] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 454.885754][T16506] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 454.897978][T16506] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 454.908403][T16506] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 454.920257][T16506] System zones: 0-2, 18-18, 34-34 [ 454.955641][T16506] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 454.982026][T16506] EXT4-fs (loop1): 1 truncate cleaned up [ 454.988633][T16506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.060966][T16506] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 455.115638][ T6034] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.341002][T16518] bond1: (slave batadv0): Releasing active interface [ 455.538309][T16540] set match dimension is over the limit! [ 455.622550][T16544] netlink: 'syz.3.4165': attribute type 1 has an invalid length. [ 455.759580][T16545] loop4: detected capacity change from 0 to 512 [ 455.770797][T16545] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 455.780039][T16545] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 455.792213][T16545] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 455.802317][T16545] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 455.812750][T16545] System zones: 0-2, 18-18, 34-34 [ 455.873310][T16545] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 455.889590][T16545] EXT4-fs (loop4): 1 truncate cleaned up [ 455.897395][T16545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 455.931308][T16542] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 455.951987][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.042854][T16557] loop4: detected capacity change from 0 to 512 [ 456.074896][T16561] ip6gre1: entered allmulticast mode [ 456.082483][T16557] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 456.092401][T16557] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 456.145635][T16557] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 456.205098][T16557] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 456.246573][T16557] System zones: 0-2, 18-18, 34-34 [ 456.264018][T16557] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 456.301932][T16557] EXT4-fs (loop4): 1 truncate cleaned up [ 456.318509][T16557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.322957][T16562] lo speed is unknown, defaulting to 1000 [ 456.357273][T16557] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 456.415116][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.925586][T16571] loop1: detected capacity change from 0 to 128 [ 456.969199][T16571] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.013301][T16571] ext4 filesystem being mounted at /582/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.089774][T16581] loop4: detected capacity change from 0 to 512 [ 457.154140][T16581] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 457.220755][T16589] __nla_validate_parse: 7 callbacks suppressed [ 457.220834][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4184'. [ 457.237543][T16581] EXT4-fs (loop4): mount failed [ 457.886746][T16571] bond2: (slave veth0_to_bond): Releasing active interface [ 457.894147][T16571] vlan2: entered promiscuous mode [ 457.902551][T16571] bond1: (slave macvlan2): Releasing backup interface [ 457.916411][T16571] bond2: (slave veth3): Releasing active interface [ 457.922979][T16571] bond2: (slave veth3): the permanent HWaddr of slave - 42:2e:3b:59:1d:9e - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 457.985841][T16571] bond2: (slave vlan2): Releasing active interface [ 458.000353][T16571] vlan2: left promiscuous mode [ 458.101825][T16613] Cannot find set identified by id 0 to match [ 458.112733][T16615] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 458.165721][ T6034] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 458.183199][T16617] netlink: 'syz.4.4187': attribute type 1 has an invalid length. [ 458.205857][T16620] loop1: detected capacity change from 0 to 512 [ 458.247305][T16620] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 458.295296][T16620] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.392128][T16620] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.4190: Failed to acquire dquot type 0 [ 458.468126][ T6034] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 458.542337][T16631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4194'. [ 458.590155][T16634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4196'. [ 458.622830][T16631] loop1: detected capacity change from 0 to 512 [ 458.655669][T16631] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 458.664904][T16631] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 458.704455][T16631] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 458.715213][T16631] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 458.735518][T16631] System zones: 0-2, 18-18, 34-34 [ 458.747901][T16631] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 458.860958][T16631] EXT4-fs (loop1): 1 truncate cleaned up [ 458.868053][T16631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.930136][T16631] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 458.992935][ T6034] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.044964][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4202'. [ 459.207186][T16660] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 459.210047][T16641] Set syz1 is full, maxelem 65536 reached [ 459.230951][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 459.230970][ T29] audit: type=1326 audit(1747328363.513:21939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.3.4207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8251ee969 code=0x7ffc0000 [ 459.261844][ T29] audit: type=1326 audit(1747328363.513:21940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.3.4207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8251ee969 code=0x7ffc0000 [ 459.283815][T16666] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 459.325140][ T29] audit: type=1326 audit(1747328363.583:21941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.3.4207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8251ee969 code=0x7ffc0000 [ 459.348900][ T29] audit: type=1326 audit(1747328363.583:21942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.3.4207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8251ee969 code=0x7ffc0000 [ 459.373270][ T29] audit: type=1326 audit(1747328363.583:21943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.3.4207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8251ee969 code=0x7ffc0000 [ 459.397611][ T29] audit: type=1326 audit(1747328363.593:21944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="syz.3.4207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd8251ee969 code=0x7ffc0000 [ 459.421310][ T29] audit: type=1326 audit(1747328363.593:21945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8251ee969 code=0x7ffc0000 [ 459.445353][ T29] audit: type=1326 audit(1747328363.593:21946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8251ee969 code=0x7ffc0000 [ 459.468456][ T29] audit: type=1326 audit(1747328363.593:21947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8251ee969 code=0x7ffc0000 [ 459.492290][ T29] audit: type=1326 audit(1747328363.593:21948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16662 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8251ee969 code=0x7ffc0000 [ 459.802463][T16675] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4210'. [ 459.895025][T16680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4212'. [ 460.995396][T16699] netlink: 'syz.3.4218': attribute type 13 has an invalid length. [ 461.011025][T16698] delete_channel: no stack [ 461.022230][T16699] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 461.055775][ T36] hid (null): unknown global tag 0x93 [ 461.061303][ T36] hid (null): unknown global tag 0xe [ 461.064965][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4218'. [ 461.071718][ T36] hid-generic 0000:0401:0006.0007: unexpected long global item [ 461.087579][ T36] hid-generic 0000:0401:0006.0007: probe with driver hid-generic failed with error -22 [ 461.197281][T16710] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4222'. [ 461.371971][T16720] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4225'. [ 461.447136][T16727] futex_wake_op: syz.3.4228 tries to shift op by -1; fix this program [ 461.714903][T16731] delete_channel: no stack [ 461.750705][T16735] futex_wake_op: syz.2.4232 tries to shift op by -1; fix this program [ 461.958684][T16743] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 462.018708][T16742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4235'. [ 462.166545][T16748] loop4: detected capacity change from 0 to 8192 [ 462.337765][T16761] futex_wake_op: syz.4.4242 tries to shift op by -1; fix this program [ 462.399657][T16756] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.989130][T16756] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.081126][T16756] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.155707][T16756] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.332622][T16756] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.354150][T16777] futex_wake_op: syz.4.4247 tries to shift op by -1; fix this program [ 463.364902][T16756] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.376772][T16756] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.388821][T16756] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.987987][T16810] __nla_validate_parse: 1 callbacks suppressed [ 463.988006][T16810] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4254'. [ 464.235849][ T29] kauditd_printk_skb: 375 callbacks suppressed [ 464.235863][ T29] audit: type=1326 audit(1747328368.523:22324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 464.295751][ T29] audit: type=1326 audit(1747328368.533:22325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 464.319500][ T29] audit: type=1326 audit(1747328368.543:22326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 464.343186][ T29] audit: type=1326 audit(1747328368.553:22327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 464.366943][ T29] audit: type=1326 audit(1747328368.563:22328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 464.375532][T16815] lo speed is unknown, defaulting to 1000 [ 464.390663][ T29] audit: type=1326 audit(1747328368.573:22329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 464.453848][ T29] audit: type=1326 audit(1747328368.593:22330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 464.477574][ T29] audit: type=1326 audit(1747328368.603:22331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 464.501368][ T29] audit: type=1326 audit(1747328368.623:22332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 464.524998][ T29] audit: type=1326 audit(1747328368.633:22333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16807 comm="syz.0.4253" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 464.809063][T16860] loop4: detected capacity change from 0 to 512 [ 464.825835][T16860] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 464.834974][T16860] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 464.858811][T16860] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 464.871094][T16860] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 464.879911][T16860] System zones: 0-2, 18-18, 34-34 [ 464.904453][T16860] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 464.944676][T16860] EXT4-fs (loop4): 1 truncate cleaned up [ 464.950766][T16860] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.971742][T16860] EXT4-fs error (device loop4): ext4_find_dest_de:2054: inode #2: block 3: comm syz.4.4260: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 465.451393][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.175839][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4269'. [ 466.425053][T16977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4272'. [ 467.398544][T17010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4284'. [ 467.748858][T17012] lo speed is unknown, defaulting to 1000 [ 467.788289][T17012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4283'. [ 467.797399][T17012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4283'. [ 468.120716][T17025] Cannot find set identified by id 0 to match [ 468.194212][T17030] netlink: 'syz.4.4288': attribute type 1 has an invalid length. [ 468.340900][T17034] netlink: 'syz.3.4291': attribute type 21 has an invalid length. [ 468.348956][T17034] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4291'. [ 468.390931][T17034] netlink: 'syz.3.4291': attribute type 5 has an invalid length. [ 468.398794][T17034] netlink: 'syz.3.4291': attribute type 6 has an invalid length. [ 468.399522][T17037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4301'. [ 468.407318][T17034] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4291'. [ 468.475726][T17043] sch_fq: defrate 4294967295 ignored. [ 468.746056][T17048] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4293'. [ 468.755500][T17048] 0ªX¹¦À: renamed from 61ªX¹¦À [ 468.767030][T17048] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 468.930202][T17048] lo speed is unknown, defaulting to 1000 [ 469.109261][T17062] __nla_validate_parse: 1 callbacks suppressed [ 469.109279][T17062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4299'. [ 469.134719][T17062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4299'. [ 469.266622][ T29] kauditd_printk_skb: 170 callbacks suppressed [ 469.266640][ T29] audit: type=1400 audit(1747328373.553:22504): avc: denied { setopt } for pid=17065 comm="syz.3.4300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 469.309415][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4305'. [ 469.320556][ T29] audit: type=1400 audit(1747328373.583:22505): avc: denied { create } for pid=17073 comm="syz.2.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 469.340589][ T29] audit: type=1400 audit(1747328373.583:22506): avc: denied { write } for pid=4325 comm="syz-executor" name="829" dev="tmpfs" ino=4454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 469.366928][ T29] audit: type=1400 audit(1747328373.583:22507): avc: denied { remove_name } for pid=4325 comm="syz-executor" name="binderfs" dev="tmpfs" ino=4458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 469.394507][ T29] audit: type=1400 audit(1747328373.583:22508): avc: denied { rmdir } for pid=4325 comm="syz-executor" name="829" dev="tmpfs" ino=4454 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 469.421045][ T29] audit: type=1400 audit(1747328373.583:22509): avc: denied { create } for pid=17073 comm="syz.2.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 469.440679][ T29] audit: type=1400 audit(1747328373.583:22510): avc: denied { write } for pid=17073 comm="syz.2.4304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 469.460252][ T29] audit: type=1400 audit(1747328373.593:22511): avc: denied { create } for pid=17076 comm="syz.0.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 469.480783][ T29] audit: type=1400 audit(1747328373.593:22512): avc: denied { write } for pid=17076 comm="syz.0.4305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 469.533444][ T29] audit: type=1400 audit(1747328373.653:22513): avc: denied { create } for pid=17078 comm="syz.1.4306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 470.617655][T17112] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4316'. [ 470.716769][T17111] netlink: 'syz.1.4315': attribute type 21 has an invalid length. [ 470.724665][T17111] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4315'. [ 470.801575][T17111] netlink: 'syz.1.4315': attribute type 5 has an invalid length. [ 470.809422][T17111] netlink: 'syz.1.4315': attribute type 6 has an invalid length. [ 470.817238][T17111] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4315'. [ 470.842440][T17119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4318'. [ 470.901195][T17121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4317'. [ 470.931216][T17123] loop4: detected capacity change from 0 to 512 [ 470.984821][T17123] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 470.995433][T17123] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 471.051646][T17123] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 471.089877][T17123] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 471.111229][T17123] System zones: 0-2, 18-18, 34-34 [ 471.138144][T17123] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 471.192006][T17123] EXT4-fs (loop4): 1 truncate cleaned up [ 471.202044][T17123] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.220661][T17119] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 471.256718][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.476218][T17131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4322'. [ 471.505852][T17129] program syz.1.4319 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 471.580750][T17129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4319'. [ 471.631234][T17131] loop4: detected capacity change from 0 to 512 [ 471.687882][T17131] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 471.697693][T17131] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 471.708429][T17131] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 471.717522][T17131] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 471.728221][T17131] System zones: 0-2, 18-18, 34-34 [ 471.733843][T17131] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 471.749635][T17131] EXT4-fs (loop4): 1 truncate cleaned up [ 471.757288][T17131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.852798][T17131] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 472.105584][T17142] 0ªX¹¦À: renamed from 61ªX¹¦À [ 472.138960][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.205022][T17142] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 472.646543][T17146] lo speed is unknown, defaulting to 1000 [ 472.674352][T17161] futex_wake_op: syz.0.4330 tries to shift op by -1; fix this program [ 474.118543][T17207] loop4: detected capacity change from 0 to 1024 [ 474.135621][T17207] EXT4-fs: Ignoring removed oldalloc option [ 474.141643][T17207] EXT4-fs: Ignoring removed orlov option [ 474.157446][T17207] EXT4-fs (loop4): stripe (1570) is not aligned with cluster size (16), stripe is disabled [ 474.217946][T17207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 474.234480][T17210] netlink: 'syz.2.4346': attribute type 21 has an invalid length. [ 474.242424][T17210] __nla_validate_parse: 3 callbacks suppressed [ 474.242437][T17210] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4346'. [ 474.245882][T17217] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4348'. [ 474.249639][T17210] netlink: 'syz.2.4346': attribute type 5 has an invalid length. [ 474.268338][T17218] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4349'. [ 474.275269][T17210] netlink: 'syz.2.4346': attribute type 6 has an invalid length. [ 474.291672][T17210] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4346'. [ 474.294859][T17207] EXT4-fs (loop4): shut down requested (2) [ 474.331058][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 474.331077][ T29] audit: type=1400 audit(1747328378.613:22623): avc: denied { tracepoint } for pid=17206 comm="syz.4.4345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 474.360854][T17207] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 474.375231][ T29] audit: type=1400 audit(1747328378.643:22624): avc: denied { create } for pid=17221 comm="syz.1.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 474.379999][T17207] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 474.396101][ T29] audit: type=1400 audit(1747328378.643:22625): avc: denied { bind } for pid=17221 comm="syz.1.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 474.424409][ T29] audit: type=1400 audit(1747328378.643:22626): avc: denied { listen } for pid=17221 comm="syz.1.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 474.441084][T17207] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 474.444309][ T29] audit: type=1400 audit(1747328378.653:22627): avc: denied { connect } for pid=17221 comm="syz.1.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 474.469709][T17207] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 474.473835][ T29] audit: type=1400 audit(1747328378.653:22628): avc: denied { accept } for pid=17221 comm="syz.1.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 474.492382][T17207] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 474.501666][ T29] audit: type=1400 audit(1747328378.653:22629): avc: denied { read } for pid=17221 comm="syz.1.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 474.511756][T17207] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=16 [ 474.530886][ T29] audit: type=1400 audit(1747328378.653:22630): avc: denied { sqpoll } for pid=17221 comm="syz.1.4350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 474.560334][ T29] audit: type=1400 audit(1747328378.763:22631): avc: denied { write } for pid=17206 comm="syz.4.4345" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 474.582931][ T29] audit: type=1400 audit(1747328378.793:22632): avc: denied { write } for pid=17206 comm="syz.4.4345" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 474.588324][T17207] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 474.616702][T17207] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=13 [ 474.745512][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.772150][T17230] loop4: detected capacity change from 0 to 128 [ 474.790108][T17230] vfat: Unknown parameter 'ælush ' [ 475.401106][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4362'. [ 475.986529][T17272] SELinux: failed to load policy [ 476.032025][T17276] loop4: detected capacity change from 0 to 512 [ 476.050017][T17276] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 476.094489][T17276] EXT4-fs (loop4): 1 truncate cleaned up [ 476.178304][T17276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.403056][T17289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4376'. [ 476.536016][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.777319][T17297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4380'. [ 476.801541][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4382'. [ 476.905596][T17313] netlink: 'syz.3.4386': attribute type 2 has an invalid length. [ 476.913475][T17313] netlink: 'syz.3.4386': attribute type 9 has an invalid length. [ 476.921303][T17313] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4386'. [ 476.962798][T17319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4389'. [ 477.027715][T17322] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.119382][T17324] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 477.208375][T17342] loop4: detected capacity change from 0 to 512 [ 477.265379][T17342] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 477.282090][T17342] EXT4-fs (loop4): mount failed [ 477.476637][T17357] xt_hashlimit: max too large, truncated to 1048576 [ 477.557018][T17368] hub 2-0:1.0: USB hub found [ 477.561857][T17368] hub 2-0:1.0: 8 ports detected [ 477.977362][T17398] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17398 comm=syz.3.4421 [ 478.404254][T17416] loop4: detected capacity change from 0 to 512 [ 478.417139][T17416] EXT4-fs: Ignoring removed nobh option [ 478.473165][T17416] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.4426: corrupted inode contents [ 478.486558][T17416] EXT4-fs (loop4): Remounting filesystem read-only [ 478.493298][T17416] EXT4-fs (loop4): 1 truncate cleaned up [ 478.500813][T17416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.521578][ T3639] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 478.532333][ T3639] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 478.553363][T17416] ext4 filesystem being mounted at /835/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.610193][ T3639] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 478.652441][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.968833][T17453] netlink: 'syz.2.4440': attribute type 4 has an invalid length. [ 479.156317][T17460] netlink: '+}[@': attribute type 4 has an invalid length. [ 479.695655][T17467] __nla_validate_parse: 9 callbacks suppressed [ 479.695686][T17467] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4446'. [ 479.739644][T17467] loop4: detected capacity change from 0 to 512 [ 479.747377][T17467] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 479.756556][T17467] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 479.774889][T17467] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 479.796846][T17467] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 479.812413][T17467] System zones: 0-2, 18-18, 34-34 [ 479.895666][T17467] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 479.993280][T17486] bond0: (slave ip6gretap1): Removing an active aggregator [ 480.004100][T10207] bond0: Warning: Found an uninitialized port [ 480.012808][T17486] bond0: (slave ip6gretap1): Releasing backup interface [ 480.019891][T17486] bond0: (slave ip6gretap1): the permanent HWaddr of slave - e6:2b:06:9e:e2:f2 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 480.045488][T17467] EXT4-fs (loop4): 1 truncate cleaned up [ 480.051856][T17467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.065985][T17489] netlink: 'syz.2.4453': attribute type 29 has an invalid length. [ 480.087971][T17467] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 480.223300][T17486] bond0: (slave veth3): Releasing backup interface [ 480.308668][ T29] kauditd_printk_skb: 223 callbacks suppressed [ 480.308748][ T29] audit: type=1400 audit(1747328384.433:22849): avc: denied { connect } for pid=17480 comm="syz.3.4451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 480.336047][ T29] audit: type=1400 audit(1747328384.433:22850): avc: denied { write } for pid=17480 comm="syz.3.4451" path="socket:[55113]" dev="sockfs" ino=55113 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 480.396131][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.495976][T17486] bond1: (slave batadv0): Releasing active interface [ 480.538460][T17496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4455'. [ 480.752149][ T29] audit: type=1400 audit(1747328384.693:22851): avc: denied { create } for pid=17485 comm="syz.2.4453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 480.772653][ T29] audit: type=1400 audit(1747328384.703:22852): avc: denied { connect } for pid=17485 comm="syz.2.4453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 480.792445][ T29] audit: type=1400 audit(1747328384.703:22853): avc: denied { read } for pid=17485 comm="syz.2.4453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 480.878542][T17497] loop4: detected capacity change from 0 to 512 [ 480.900774][T17497] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 480.910059][T17497] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 480.965257][T17497] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 480.975604][T17497] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 481.011546][T17497] System zones: 0-2, 18-18, 34-34 [ 481.019154][T17497] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 481.023377][ T29] audit: type=1326 audit(1747328385.303:22854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17506 comm="syz.0.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 481.058352][ T29] audit: type=1326 audit(1747328385.303:22855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17506 comm="syz.0.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 481.082133][ T29] audit: type=1326 audit(1747328385.303:22856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17506 comm="syz.0.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 481.087470][T17497] EXT4-fs (loop4): 1 truncate cleaned up [ 481.106743][ T29] audit: type=1326 audit(1747328385.303:22857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17506 comm="syz.0.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 481.113708][T17497] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.136165][ T29] audit: type=1326 audit(1747328385.303:22858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17506 comm="syz.0.4457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 481.179542][T17496] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 481.191034][T17513] $Hÿ: renamed from bond0 [ 481.221085][T17513] $Hÿ: entered promiscuous mode [ 481.227403][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.353487][T17533] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4469'. [ 481.387828][T17533] loop4: detected capacity change from 0 to 512 [ 481.396509][T17533] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 481.406287][T17533] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 481.426399][T17533] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 481.440025][T17533] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 481.460186][T17533] System zones: 0-2, 18-18, 34-34 [ 481.487695][T17533] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 481.511582][T17533] EXT4-fs (loop4): 1 truncate cleaned up [ 481.518500][T17533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.621316][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.645430][T17555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4474'. [ 481.685985][T17555] loop4: detected capacity change from 0 to 512 [ 481.694894][T17555] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 481.704108][T17555] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 481.725391][T17555] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 481.747981][T17555] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 481.757830][T17555] System zones: 0-2, 18-18, 34-34 [ 481.764388][T17555] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 481.780361][T17555] EXT4-fs (loop4): 1 truncate cleaned up [ 481.786827][T17555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.802293][T17555] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 481.828582][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.314858][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4479'. [ 482.495270][T17585] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4485'. [ 482.506231][T17583] loop4: detected capacity change from 0 to 128 [ 482.513153][T17583] vfat: Unexpected value for 'discard' [ 482.521961][T17587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4486'. [ 482.790857][T17596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4490'. [ 482.904566][T17618] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4497'. [ 482.937706][T17620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4493'. [ 482.955603][T17618] loop4: detected capacity change from 0 to 512 [ 483.027269][T17618] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 483.043358][T17618] EXT4-fs (loop4): mount failed [ 483.153147][T17640] netlink: 'syz.2.4505': attribute type 16 has an invalid length. [ 483.161293][T17640] netlink: 'syz.2.4505': attribute type 17 has an invalid length. [ 483.175244][T17637] hub 2-0:1.0: USB hub found [ 483.180023][T17637] hub 2-0:1.0: 8 ports detected [ 483.194038][T17637] loop4: detected capacity change from 0 to 512 [ 483.200644][T17637] EXT4-fs: Ignoring removed nobh option [ 483.208378][T17640] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 483.238630][T17637] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #16: comm syz.4.4504: corrupted inode contents [ 483.262569][T17637] EXT4-fs (loop4): Remounting filesystem read-only [ 483.270031][T17637] EXT4-fs (loop4): 1 truncate cleaned up [ 483.276482][T17637] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.289134][T10222] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 483.289163][T10222] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 483.289186][T10222] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 483.300615][T17637] ext4 filesystem being mounted at /849/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.349215][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.576818][T17665] loop4: detected capacity change from 0 to 512 [ 483.596962][T17665] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.616584][T17665] ext4 filesystem being mounted at /852/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.712589][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.840503][T17693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.851034][T17693] team0: Port device bond0 added [ 483.925008][T17702] loop4: detected capacity change from 0 to 1024 [ 483.956300][T17702] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.4526: Failed to acquire dquot type 0 [ 483.975816][T17702] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 483.991676][T17702] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.4526: corrupted inode contents [ 484.005265][T17702] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.4526: mark_inode_dirty error [ 484.047179][T17702] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.4526: corrupted inode contents [ 484.077649][T17702] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.4526: mark_inode_dirty error [ 484.090626][T17702] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.4526: corrupted inode contents [ 484.108910][T17702] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 484.136177][T17702] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.4526: corrupted inode contents [ 484.173025][T17727] 1ªX¹¦À: renamed from 60ªX¹¦À [ 484.181254][T17702] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.4526: mark_inode_dirty error [ 484.198039][T17702] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 484.227323][T17727] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 484.265315][T17702] EXT4-fs (loop4): 1 truncate cleaned up [ 484.271498][T17702] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.322739][T17702] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 484.416355][T17742] netlink: 'syz.0.4528': attribute type 27 has an invalid length. [ 484.441700][T17742] 0ªX¹¦À: left allmulticast mode [ 484.447053][T17742] veth0_to_team: left promiscuous mode [ 484.452555][T17742] veth0_to_team: left allmulticast mode [ 484.458255][T17742] ip6gre1: left allmulticast mode [ 484.463601][T17742] vlan2: left allmulticast mode [ 484.468535][T17742] veth1: left allmulticast mode [ 484.473948][T17742] ip6gre2: left allmulticast mode [ 484.497539][T17743] 8021q: adding VLAN 0 to HW filter on device  [ 484.505448][T17743] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.514525][T17743] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 484.550812][T17744] 9pnet_fd: Insufficient options for proto=fd [ 484.813496][T17741] __nla_validate_parse: 8 callbacks suppressed [ 484.819878][T17741] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4525'. [ 484.923947][T17727] lo speed is unknown, defaulting to 1000 [ 485.166939][T17768] netlink: '+}[@': attribute type 4 has an invalid length. [ 485.382369][ T29] kauditd_printk_skb: 768 callbacks suppressed [ 485.382400][ T29] audit: type=1400 audit(1747328389.663:23618): avc: denied { mount } for pid=17763 comm="syz.0.4535" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 485.870311][ T29] audit: type=1400 audit(1747328390.153:23619): avc: denied { tracepoint } for pid=17839 comm="syz.2.4539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 485.877584][T17842] $Hÿ: renamed from bond0 (while UP) [ 485.900237][ T4918] hid (null): unknown global tag 0x93 [ 485.905856][ T4918] hid (null): unknown global tag 0xe [ 485.915036][T17842] $Hÿ: entered promiscuous mode [ 485.918991][ T4918] hid-generic 0000:0401:0006.0008: unexpected long global item [ 485.937314][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4539'. [ 485.956715][ T4918] hid-generic 0000:0401:0006.0008: probe with driver hid-generic failed with error -22 [ 485.971291][ T29] audit: type=1400 audit(1747328390.183:23620): avc: denied { ioctl } for pid=17840 comm="syz.1.4548" path="/dev/loop6" dev="devtmpfs" ino=106 ioctlcmd=0x1279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 485.996995][ T29] audit: type=1400 audit(1747328390.183:23621): avc: denied { read write } for pid=17840 comm="syz.1.4548" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 486.020687][ T29] audit: type=1400 audit(1747328390.183:23622): avc: denied { open } for pid=17840 comm="syz.1.4548" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 486.076884][ T29] audit: type=1400 audit(1747328390.363:23623): avc: denied { create } for pid=17854 comm="syz.3.4541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 486.114517][ T29] audit: type=1400 audit(1747328390.363:23624): avc: denied { setopt } for pid=17854 comm="syz.3.4541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 486.151742][ T29] audit: type=1400 audit(1747328390.433:23625): avc: denied { create } for pid=17861 comm="syz.0.4544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 486.170802][T17867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4545'. [ 486.184572][ T29] audit: type=1400 audit(1747328390.463:23626): avc: denied { sys_module } for pid=17862 comm="syz.3.4543" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 486.219030][T17870] bond0 (unregistering): Released all slaves [ 486.258730][ T29] audit: type=1400 audit(1747328390.543:23627): avc: denied { execute } for pid=17862 comm="syz.3.4543" name="file0" dev="tmpfs" ino=4350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 486.427944][T17886] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4557'. [ 486.547593][T17888] netlink: 'syz.3.4546': attribute type 4 has an invalid length. [ 486.576490][T17896] netlink: 180 bytes leftover after parsing attributes in process `syz.3.4549'. [ 486.916009][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.968258][T17905] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4553'. [ 486.977307][T17905] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4553'. [ 486.986400][T17905] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4553'. [ 487.043703][T17905] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4553'. [ 487.133211][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4554'. [ 487.335613][T17914] loop4: detected capacity change from 0 to 512 [ 487.356719][T17914] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 487.366727][T17914] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 487.387721][T17918] netlink: 'syz.3.4560': attribute type 29 has an invalid length. [ 487.403935][T17914] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 487.438808][T17914] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 487.458404][T17914] System zones: 0-2, 18-18, 34-34 [ 487.473121][T17914] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 487.507067][T17914] EXT4-fs (loop4): 1 truncate cleaned up [ 487.523384][T17914] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.552659][T17914] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 487.587931][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.648527][T17924] loop4: detected capacity change from 0 to 512 [ 487.688731][T17924] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 487.718553][T17924] EXT4-fs (loop4): mount failed [ 487.799382][T17933] loop4: detected capacity change from 0 to 512 [ 487.819343][T17933] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 487.828693][T17933] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 487.838840][T17933] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 487.848657][T17933] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 487.856797][T17933] System zones: 0-2, 18-18, 34-34 [ 487.862549][T17933] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 487.877843][T17933] EXT4-fs (loop4): 1 truncate cleaned up [ 487.884309][T17933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.898258][T17933] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 487.943794][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.548928][T17971] bridge0: entered promiscuous mode [ 488.556129][T17971] macvlan3: entered promiscuous mode [ 488.563166][T17971] bridge0: port 1(macvlan3) entered blocking state [ 488.570419][T17971] bridge0: port 1(macvlan3) entered disabled state [ 488.579249][T17971] macvlan3: entered allmulticast mode [ 488.584747][T17971] bridge0: entered allmulticast mode [ 488.592950][T17971] macvlan3: left allmulticast mode [ 488.598890][T17971] bridge0: left allmulticast mode [ 488.693105][T17971] bridge0: left promiscuous mode [ 488.762347][T17975] loop4: detected capacity change from 0 to 2048 [ 489.069428][T17982] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 489.367095][T17991] netlink: 'syz.2.4583': attribute type 29 has an invalid length. [ 489.553155][T18003] netlink: 'syz.1.4587': attribute type 13 has an invalid length. [ 489.628540][T18003] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.637053][T18003] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.646175][T18003] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.654803][T18003] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.991421][T18023] SELinux: ebitmap start bit (1728054080) is beyond the end of the bitmap (1472) [ 490.002233][T18023] SELinux: failed to load policy [ 490.067595][T18028] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 490.114512][T18031] netlink: 'syz.4.4598': attribute type 1 has an invalid length. [ 490.215457][T18033] loop4: detected capacity change from 0 to 512 [ 490.222628][T18033] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 490.236161][T18033] EXT4-fs (loop4): 1 truncate cleaned up [ 490.242274][T18033] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.327512][T18033] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57373 sclass=netlink_route_socket pid=18033 comm=syz.4.4598 [ 490.397163][ T29] kauditd_printk_skb: 297 callbacks suppressed [ 490.397211][ T29] audit: type=1400 audit(1747328394.683:23924): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 490.429346][T18042] xt_CT: You must specify a L4 protocol and not use inversions on it [ 490.437800][ T29] audit: type=1400 audit(1747328394.713:23925): avc: denied { write } for pid=18038 comm="syz.3.4600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 490.467150][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.480554][ T29] audit: type=1400 audit(1747328394.763:23926): avc: denied { write } for pid=18043 comm="syz.2.4601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 490.506694][ T29] audit: type=1400 audit(1747328394.783:23927): avc: denied { mount } for pid=18043 comm="syz.2.4601" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 490.543098][T18048] loop4: detected capacity change from 0 to 2048 [ 490.578687][ T29] audit: type=1400 audit(1747328394.863:23928): avc: denied { execmem } for pid=18050 comm="syz.1.4604" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 490.598248][ T29] audit: type=1400 audit(1747328394.863:23929): avc: denied { create } for pid=18049 comm="syz.2.4605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 490.618132][ T29] audit: type=1400 audit(1747328394.863:23930): avc: denied { bind } for pid=18049 comm="syz.2.4605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 490.618846][T18052] __nla_validate_parse: 7 callbacks suppressed [ 490.618864][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4606'. [ 490.637724][ T29] audit: type=1400 audit(1747328394.863:23931): avc: denied { setopt } for pid=18049 comm="syz.2.4605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 490.637788][ T29] audit: type=1400 audit(1747328394.863:23932): avc: denied { write } for pid=18049 comm="syz.2.4605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 490.640191][ T29] audit: type=1400 audit(1747328394.923:23933): avc: denied { map } for pid=18049 comm="syz.2.4605" path="pipe:[57814]" dev="pipefs" ino=57814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 490.644744][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4606'. [ 490.676505][T18058] syz!: rxe_newlink: already configured on team_slave_0 [ 490.695112][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4606'. [ 490.759579][T18048] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.771816][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4606'. [ 490.781720][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4606'. [ 490.836788][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4606'. [ 490.858723][T18067] netlink: 'syz.1.4609': attribute type 29 has an invalid length. [ 490.876372][T18048] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 1 with max blocks 1 with error 28 [ 490.888765][T18048] EXT4-fs (loop4): This should not happen!! Data will be lost [ 490.888765][T18048] [ 490.899250][T18048] EXT4-fs (loop4): Total free blocks count 0 [ 490.905371][T18048] EXT4-fs (loop4): Free/Dirty block details [ 490.911293][T18048] EXT4-fs (loop4): free_blocks=0 [ 490.916391][T18048] EXT4-fs (loop4): dirty_blocks=0 [ 490.921445][T18048] EXT4-fs (loop4): Block reservation details [ 490.928257][T18048] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 490.931219][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4606'. [ 490.943138][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4606'. [ 490.955482][T18052] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4606'. [ 490.991589][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.023080][T18076] team0: Port device bond0 removed [ 491.032739][T18076] netlink: 'syz.0.4613': attribute type 29 has an invalid length. [ 491.056828][T18078] dvmrp1: entered allmulticast mode [ 491.067788][T18078] dvmrp1: left allmulticast mode [ 491.140065][T18085] loop4: detected capacity change from 0 to 128 [ 491.160136][T18085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4615'. [ 491.172307][T18083] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 491.200356][T18080] lo speed is unknown, defaulting to 1000 [ 491.282689][T18092] netlink: 'syz.1.4617': attribute type 16 has an invalid length. [ 491.290627][T18092] netlink: 'syz.1.4617': attribute type 17 has an invalid length. [ 491.306931][T18093] loop4: detected capacity change from 0 to 128 [ 491.315178][T18093] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 491.317178][T18092] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 491.328101][T18093] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 491.343302][T18092] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 491.359126][ T4918] lo speed is unknown, defaulting to 1000 [ 491.365191][ T4918] syz0: Port: 1 Link ACTIVE [ 491.701812][T18109] netlink: 'syz.1.4620': attribute type 29 has an invalid length. [ 491.796067][T18116] loop4: detected capacity change from 0 to 512 [ 491.804589][T18116] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 491.813861][T18116] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 491.820237][T18118] tipc: Can't bind to reserved service type 1 [ 491.840072][T18116] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 491.849263][T18116] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 491.862725][T18116] System zones: 0-2, 18-18, 34-34 [ 491.882357][T18116] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 491.914645][T18116] EXT4-fs (loop4): 1 truncate cleaned up [ 491.954443][T18116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 492.029974][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.190750][T18155] loop4: detected capacity change from 0 to 512 [ 492.211660][T18157] netlink: 'syz.2.4636': attribute type 29 has an invalid length. [ 492.248940][T18125] lo speed is unknown, defaulting to 1000 [ 492.278283][T18155] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 492.300912][T18155] EXT4-fs (loop4): 1 truncate cleaned up [ 492.315140][T18155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.377798][T18163] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 493.020649][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.066627][T18170] loop4: detected capacity change from 0 to 512 [ 493.074786][T18170] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 493.083999][T18170] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 493.104552][T18170] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 493.114749][T18170] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 493.123173][T18170] System zones: 0-2, 18-18, 34-34 [ 493.129594][T18170] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 493.146117][T18170] EXT4-fs (loop4): 1 truncate cleaned up [ 493.153415][T18170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 493.240804][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.104354][T18211] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 494.471195][T18221] loop4: detected capacity change from 0 to 512 [ 494.496097][T18221] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 494.535895][T18221] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.4655: invalid block [ 494.555785][T18221] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4655: invalid indirect mapped block 4294967295 (level 1) [ 494.580673][T18221] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.4655: invalid indirect mapped block 4294967295 (level 1) [ 494.624950][T18221] EXT4-fs (loop4): 2 truncates cleaned up [ 494.631764][T18221] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.869848][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.323346][T18236] loop4: detected capacity change from 0 to 512 [ 495.374620][T18240] netlink: 'syz.0.4662': attribute type 16 has an invalid length. [ 495.382512][T18240] netlink: 'syz.0.4662': attribute type 17 has an invalid length. [ 495.409051][T18236] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 495.418323][T18236] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 495.443750][ T29] kauditd_printk_skb: 509 callbacks suppressed [ 495.443767][ T29] audit: type=1400 audit(1747328399.723:24443): avc: denied { write } for pid=18242 comm="syz.1.4664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 495.470812][ T29] audit: type=1400 audit(1747328399.733:24444): avc: denied { allowed } for pid=18242 comm="syz.1.4664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 495.524329][T18240] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 495.538404][ T29] audit: type=1400 audit(1747328399.773:24445): avc: denied { create } for pid=18242 comm="syz.1.4664" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 495.561626][T18236] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 495.561782][T18236] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 495.561878][T18236] System zones: 0-2, 18-18, 34-34 [ 495.562171][T18236] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 495.562607][T18236] EXT4-fs (loop4): 1 truncate cleaned up [ 495.571190][ T29] audit: type=1400 audit(1747328399.773:24446): avc: denied { map } for pid=18242 comm="syz.1.4664" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=58078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 495.605527][T18236] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 495.630481][ T29] audit: type=1400 audit(1747328399.773:24447): avc: denied { read write } for pid=18242 comm="syz.1.4664" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=58078 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 495.724310][T18236] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 495.735759][ T29] audit: type=1400 audit(1747328399.923:24448): avc: denied { mount } for pid=18233 comm="syz.4.4660" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 495.758409][ T29] audit: type=1400 audit(1747328399.923:24449): avc: denied { remount } for pid=18233 comm="syz.4.4660" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 495.778364][ T29] audit: type=1400 audit(1747328400.043:24450): avc: denied { create } for pid=18239 comm="syz.2.4663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 495.819655][T18243] lo speed is unknown, defaulting to 1000 [ 495.835029][ T29] audit: type=1400 audit(1747328400.123:24451): avc: denied { write } for pid=18239 comm="syz.2.4663" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 495.855896][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 495.873021][T18241] __nla_validate_parse: 19 callbacks suppressed [ 495.873041][T18241] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.4663'. [ 495.890928][ T29] audit: type=1400 audit(1747328400.123:24452): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 495.900743][T18252] futex_wake_op: syz.0.4675 tries to shift op by -1; fix this program [ 495.981753][T18257] tipc: New replicast peer: 255.255.255.255 [ 495.988181][T18257] tipc: Enabled bearer , priority 10 [ 496.371929][T18268] SELinux: ebitmap start bit (1728054080) is beyond the end of the bitmap (1472) [ 496.394590][T18268] SELinux: failed to load policy [ 496.840349][T18283] loop4: detected capacity change from 0 to 512 [ 496.848182][T18283] EXT4-fs: Ignoring removed nomblk_io_submit option [ 496.885558][T18283] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 496.899284][T18283] ext4 filesystem being mounted at /882/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 497.042433][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 497.069841][T18294] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4676'. [ 497.144680][T18298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4679'. [ 497.153815][T18298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4679'. [ 497.162778][T18298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4679'. [ 497.198219][T18298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4679'. [ 497.270918][T18300] random: crng reseeded on system resumption [ 497.329078][T18292] Set syz1 is full, maxelem 65536 reached [ 498.171503][T18310] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.4682'. [ 498.191030][T18306] lo speed is unknown, defaulting to 1000 [ 498.198980][T18317] loop4: detected capacity change from 0 to 2048 [ 498.314378][T18317] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 498.373129][T18317] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 498.373223][T18324] netlink: 'syz.3.4688': attribute type 21 has an invalid length. [ 498.403849][T18324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4688'. [ 498.412925][T18324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4688'. [ 498.422654][T18324] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4688'. [ 498.437593][T18317] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 498.537477][T18337] 0ªX¹¦À: renamed from 61ªX¹¦À [ 498.578048][T18337] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 498.611467][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.805354][T18337] lo speed is unknown, defaulting to 1000 [ 498.935044][T18363] loop4: detected capacity change from 0 to 527 [ 498.946613][T18363] ext4: Unknown parameter ' ' [ 499.063457][T18366] dvmrp1: entered allmulticast mode [ 499.071868][T18366] dvmrp1: left allmulticast mode [ 499.108202][T18373] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 499.267053][T18368] lo speed is unknown, defaulting to 1000 [ 499.541645][T18387] bond3: entered promiscuous mode [ 499.547786][T18387] bond3: entered allmulticast mode [ 499.556200][T18387] 8021q: adding VLAN 0 to HW filter on device bond3 [ 499.590012][T18400] netlink: 'syz.0.4711': attribute type 1 has an invalid length. [ 499.689877][T18403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57373 sclass=netlink_route_socket pid=18403 comm=syz.0.4711 [ 500.583169][T18420] lo speed is unknown, defaulting to 1000 [ 500.626257][ T29] kauditd_printk_skb: 984 callbacks suppressed [ 500.632566][ T29] audit: type=1400 audit(1747328404.913:25437): avc: denied { write } for pid=18404 comm="syz.2.4715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 500.653233][ T29] audit: type=1400 audit(1747328404.913:25438): avc: denied { read } for pid=18404 comm="syz.2.4715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 500.899851][ T29] audit: type=1326 audit(1747328404.963:25439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.0.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 500.923561][ T29] audit: type=1326 audit(1747328404.963:25440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.0.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 500.947343][ T29] audit: type=1326 audit(1747328404.973:25441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.0.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 500.970984][ T29] audit: type=1326 audit(1747328404.983:25442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.0.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=116 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 500.994667][ T29] audit: type=1326 audit(1747328405.003:25443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.0.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 501.018281][ T29] audit: type=1326 audit(1747328405.003:25444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.0.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 501.042017][ T29] audit: type=1326 audit(1747328405.033:25445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.0.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 501.065618][ T29] audit: type=1326 audit(1747328405.043:25446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18410 comm="syz.0.4714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08f18fe969 code=0x7ffc0000 [ 501.104397][T18429] __nla_validate_parse: 5 callbacks suppressed [ 501.104414][T18429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4720'. [ 501.128937][T18429] ˆyz!: rxe_newlink: already configured on team_slave_0 [ 501.482563][T18436] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4723'. [ 502.008739][T18447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4724'. [ 502.241821][T18452] netlink: 'syz.4.4725': attribute type 13 has an invalid length. [ 502.282473][T18452] bond0: left promiscuous mode [ 502.447307][T18463] loop4: detected capacity change from 0 to 512 [ 502.467327][T18463] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 502.553175][T18471] netlink: 'syz.3.4727': attribute type 27 has an invalid length. [ 502.613701][T18471] lo: left promiscuous mode [ 502.618261][T18471] lo: left allmulticast mode [ 502.634176][T18471] sit0: left allmulticast mode [ 502.648737][T18471] $Hÿ: left promiscuous mode [ 502.654421][T18471] dummy0: left promiscuous mode [ 502.662099][T18471] 0ªX¹¦À: left allmulticast mode [ 502.668711][T18471] bond1: left promiscuous mode [ 502.693220][T18472] 8021q: adding VLAN 0 to HW filter on device $Hÿ [ 502.755108][T18472] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 502.911082][T18463] EXT4-fs (loop4): 1 truncate cleaned up [ 502.918940][T18463] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 502.949360][T18463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4729'. [ 502.960398][T18463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4729'. [ 503.131575][T18463] lo speed is unknown, defaulting to 1000 [ 503.418855][T18483] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 503.885628][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 504.109848][T18498] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.118164][T18498] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.127079][T18498] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.135480][T18498] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.149092][T18498] geneve2: entered promiscuous mode [ 504.154476][T18498] geneve2: entered allmulticast mode [ 504.165440][T18502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4737'. [ 504.183700][T18498] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.192168][T18498] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.200615][T18498] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.209070][T18498] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.247946][T18504] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 504.256373][ T4918] IPVS: starting estimator thread 0... [ 504.353986][T18507] IPVS: using max 2352 ests per chain, 117600 per kthread [ 504.949561][T18517] netlink: 'syz.2.4741': attribute type 29 has an invalid length. [ 505.025312][T18519] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4742'. [ 505.043756][T18519] netem: change failed [ 505.106360][ T36] hid (null): unknown global tag 0x93 [ 505.111943][ T36] hid (null): unknown global tag 0xe [ 505.125263][ T36] hid-generic 0000:0401:0006.0009: unexpected long global item [ 505.134093][ T36] hid-generic 0000:0401:0006.0009: probe with driver hid-generic failed with error -22 [ 505.932199][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 505.932217][ T29] audit: type=1400 audit(1747328410.213:25834): avc: denied { ioctl } for pid=18546 comm="syz.2.4751" path="socket:[59574]" dev="sockfs" ino=59574 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 506.094448][T18547] lo speed is unknown, defaulting to 1000 [ 506.194303][T18553] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4752'. [ 506.213960][ T29] audit: type=1400 audit(1747328410.493:25835): avc: denied { write } for pid=18552 comm="syz.1.4752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 506.259296][ T29] audit: type=1400 audit(1747328410.523:25836): avc: denied { mac_admin } for pid=18552 comm="syz.1.4752" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 506.280786][ T29] audit: type=1400 audit(1747328410.523:25837): avc: denied { relabelto } for pid=18552 comm="syz.1.4752" name="690" dev="tmpfs" ino=3779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 506.307324][ T29] audit: type=1400 audit(1747328410.523:25838): avc: denied { associate } for pid=18552 comm="syz.1.4752" name="690" dev="tmpfs" ino=3779 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 506.357477][T18557] bond2 (unregistering): Released all slaves [ 506.390929][T18561] netlink: 'syz.0.4755': attribute type 32 has an invalid length. [ 506.421553][ T29] audit: type=1400 audit(1747328410.663:25839): avc: denied { write } for pid=6034 comm="syz-executor" name="690" dev="tmpfs" ino=3779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 506.448086][ T29] audit: type=1400 audit(1747328410.663:25840): avc: denied { remove_name } for pid=6034 comm="syz-executor" name="binderfs" dev="tmpfs" ino=3783 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 506.475358][ T29] audit: type=1400 audit(1747328410.663:25841): avc: denied { rmdir } for pid=6034 comm="syz-executor" name="690" dev="tmpfs" ino=3779 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 506.501591][ T29] audit: type=1400 audit(1747328410.673:25842): avc: denied { create } for pid=18560 comm="syz.0.4755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 506.522082][ T29] audit: type=1400 audit(1747328410.673:25843): avc: denied { write } for pid=18560 comm="syz.0.4755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 506.558620][T18572] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4758'. [ 506.632327][T18574] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4758'. [ 506.724337][T18574] netlink: 'syz.1.4758': attribute type 21 has an invalid length. [ 506.946168][T18569] lo speed is unknown, defaulting to 1000 [ 506.969989][T18595] random: crng reseeded on system resumption [ 507.070629][T18603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.080162][T18603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.120768][T18608] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4764'. [ 507.938072][T18652] lo speed is unknown, defaulting to 1000 [ 508.175906][T18662] netlink: 'syz.1.4773': attribute type 10 has an invalid length. [ 508.200731][T18662] ip6gretap1: entered promiscuous mode [ 508.206319][T18662] ip6gretap1: entered allmulticast mode [ 508.231484][T18662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4773'. [ 508.240923][T18662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4773'. [ 508.263014][T18662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4773'. [ 508.339845][T18662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4773'. [ 508.348980][T18662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4773'. [ 508.363087][T18662] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4773'. [ 508.500617][T18683] netlink: 'syz.2.4777': attribute type 4 has an invalid length. [ 508.570078][T18694] siw: device registration error -23 [ 508.597226][T18692] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.605774][T18692] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.614816][T18692] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.623132][T18692] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.633951][T18692] geneve1: entered promiscuous mode [ 508.639391][T18692] geneve1: entered allmulticast mode [ 508.661054][T18692] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.669548][T18692] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.679153][T18692] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.687601][T18692] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.729593][T18703] vlan0: entered allmulticast mode [ 508.734846][T18703] $Hÿ: entered allmulticast mode [ 509.387786][T18746] siw: device registration error -23 [ 509.511936][T18760] tipc: Failed to remove unknown binding: 66,1,1/1:3250974540/3250974541 [ 509.521446][T18760] tipc: Failed to remove unknown binding: 66,1,1/1:3250974540/3250974541 [ 509.709453][T18773] netem: incorrect ge model size [ 509.714573][T18773] netem: change failed [ 509.725204][T18748] lo speed is unknown, defaulting to 1000 [ 510.251614][T18805] netem: change failed [ 510.596141][T18827] lo speed is unknown, defaulting to 1000 [ 510.629088][T18839] vlan0: entered allmulticast mode [ 511.108897][T18844] lo speed is unknown, defaulting to 1000 [ 511.251079][T18863] netlink: 'syz.4.4815': attribute type 29 has an invalid length. [ 511.340536][ T29] kauditd_printk_skb: 549 callbacks suppressed [ 511.340555][ T29] audit: type=1400 audit(1747328415.623:26393): avc: denied { ioctl } for pid=18866 comm="syz.1.4816" path="socket:[59891]" dev="sockfs" ino=59891 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 511.392003][T18874] __nla_validate_parse: 14 callbacks suppressed [ 511.392025][T18874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4816'. [ 511.773305][ T29] audit: type=1326 audit(1747328416.053:26394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18880 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 511.893359][ T29] audit: type=1326 audit(1747328416.123:26395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18880 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 511.917174][ T29] audit: type=1326 audit(1747328416.123:26396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18880 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 511.940969][ T29] audit: type=1326 audit(1747328416.123:26397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18880 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 511.964596][ T29] audit: type=1326 audit(1747328416.153:26398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18880 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 511.988198][ T29] audit: type=1326 audit(1747328416.153:26399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18880 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 512.011832][ T29] audit: type=1326 audit(1747328416.153:26400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18880 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 512.035531][ T29] audit: type=1326 audit(1747328416.153:26401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18880 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 512.059147][ T29] audit: type=1326 audit(1747328416.153:26402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18880 comm="syz.1.4818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 512.113029][T18885] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4819'. [ 512.174223][T18885] loop4: detected capacity change from 0 to 512 [ 512.218582][T18885] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 512.246347][T18885] EXT4-fs (loop4): mount failed [ 512.369968][T18891] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4820'. [ 512.871124][T18912] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4828'. [ 512.888125][T18912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4828'. [ 512.923768][T18914] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20000 [ 513.017784][T18914] unsupported nla_type 52263 [ 513.189371][T18912] lo speed is unknown, defaulting to 1000 [ 513.612303][T18918] netlink: 'syz.0.4830': attribute type 29 has an invalid length. [ 513.696779][T18921] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4832'. [ 514.123409][T18931] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.131745][T18931] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.140064][T18931] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.148390][T18931] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.158595][T18931] geneve1: entered promiscuous mode [ 514.163961][T18931] geneve1: entered allmulticast mode [ 514.170378][T18931] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.178822][T18931] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.187262][T18931] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.195661][T18931] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.921332][ T36] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 514.930468][ T36] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 514.940976][T18948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.956906][T18948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.966320][T18946] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 515.662902][T19017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4848'. [ 515.808754][ T4918] hid (null): unknown global tag 0x93 [ 515.814304][ T4918] hid (null): unknown global tag 0xe [ 515.821565][ T4918] hid-generic 0000:0401:0006.000B: unexpected long global item [ 515.829749][ T4918] hid-generic 0000:0401:0006.000B: probe with driver hid-generic failed with error -22 [ 516.942139][T19089] loop4: detected capacity change from 0 to 2048 [ 516.996930][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 516.996945][ T29] audit: type=1400 audit(1747328421.283:26685): avc: denied { mount } for pid=19086 comm="syz.4.4856" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 517.107416][ T29] audit: type=1400 audit(1747328421.313:26686): avc: denied { cpu } for pid=19086 comm="syz.4.4856" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 517.172992][T19095] syz.4.4856: attempt to access beyond end of device [ 517.172992][T19095] loop4: rw=0, sector=1936, nr_sectors = 128 limit=2048 [ 517.879543][ T29] audit: type=1400 audit(1747328422.163:26687): avc: denied { unmount } for pid=3319 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 517.979412][ T29] audit: type=1400 audit(1747328422.263:26688): avc: denied { map_create } for pid=19118 comm="syz.4.4859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 518.011704][T19116] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4860'. [ 518.033933][ T29] audit: type=1400 audit(1747328422.273:26689): avc: denied { prog_load } for pid=19118 comm="syz.4.4859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 518.053351][ T29] audit: type=1400 audit(1747328422.273:26690): avc: denied { bpf } for pid=19118 comm="syz.4.4859" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 518.074288][ T29] audit: type=1400 audit(1747328422.273:26691): avc: denied { perfmon } for pid=19118 comm="syz.4.4859" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 518.095406][ T29] audit: type=1400 audit(1747328422.293:26692): avc: denied { mount } for pid=19115 comm="syz.2.4869" name="/" dev="ramfs" ino=59128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 518.117927][ T29] audit: type=1400 audit(1747328422.293:26693): avc: denied { create } for pid=19118 comm="syz.4.4859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 518.137859][ T29] audit: type=1400 audit(1747328422.303:26694): avc: denied { create } for pid=19118 comm="syz.4.4859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 518.201054][T19129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4862'. [ 518.319978][T19135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4864'. [ 518.441286][T19141] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 518.526369][T19145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 518.695281][T19160] loop4: detected capacity change from 0 to 1024 [ 519.038877][T19160] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.4871: Failed to acquire dquot type 0 [ 519.055537][T19160] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 519.073605][T19160] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.4871: corrupted inode contents [ 519.139722][T19160] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.4871: mark_inode_dirty error [ 519.184675][T19160] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.4871: corrupted inode contents [ 519.222343][T19160] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.4871: mark_inode_dirty error [ 519.252088][T19160] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.4871: corrupted inode contents [ 519.303031][T19160] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 519.321549][T19160] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.4871: corrupted inode contents [ 519.355216][T19160] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.4871: mark_inode_dirty error [ 519.403631][T19160] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 519.452818][T19160] EXT4-fs (loop4): 1 truncate cleaned up [ 519.459324][T19160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.501240][T19192] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4874'. [ 519.519620][T19160] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 519.716422][T19209] 9pnet_fd: Insufficient options for proto=fd [ 520.180264][T19233] lo speed is unknown, defaulting to 1000 [ 521.403262][T19237] rdma_op ffff88810341f580 conn xmit_rdma 0000000000000000 [ 521.446288][T19241] netlink: 'syz.3.4882': attribute type 10 has an invalid length. [ 521.738850][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.750055][T19258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4882'. [ 521.759142][T19258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4882'. [ 521.796557][T19258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4882'. [ 521.855384][T19264] netem: incorrect ge model size [ 521.955145][T19258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4882'. [ 521.964256][T19258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4882'. [ 522.014588][ T29] kauditd_printk_skb: 327 callbacks suppressed [ 522.014605][ T29] audit: type=1400 audit(1747328426.223:27011): avc: denied { watch watch_reads } for pid=19265 comm="syz.2.4883" path="/1015" dev="tmpfs" ino=5454 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 522.046718][ T29] audit: type=1400 audit(1747328426.233:27012): avc: denied { create } for pid=19273 comm="syz.4.4884" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 522.068514][ T29] audit: type=1400 audit(1747328426.273:27013): avc: denied { create } for pid=19265 comm="syz.2.4883" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 522.090239][ T29] audit: type=1400 audit(1747328426.273:27014): avc: denied { read } for pid=19265 comm="syz.2.4883" name="file0" dev="tmpfs" ino=5459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 522.113773][ T29] audit: type=1400 audit(1747328426.273:27015): avc: denied { open } for pid=19265 comm="syz.2.4883" path="/1015/file0" dev="tmpfs" ino=5459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 522.137802][ T29] audit: type=1400 audit(1747328426.273:27016): avc: denied { bind } for pid=19265 comm="syz.2.4883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 522.278303][T19258] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4882'. [ 522.300569][T19243] ip6gretap1: entered promiscuous mode [ 522.306287][T19243] ip6gretap1: entered allmulticast mode [ 522.314361][ T29] audit: type=1400 audit(1747328426.523:27017): avc: denied { write } for pid=19273 comm="syz.4.4884" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 522.343186][T19277] netlink: 'syz.4.4884': attribute type 13 has an invalid length. [ 522.481257][ T29] audit: type=1400 audit(1747328426.753:27018): avc: denied { execute } for pid=19283 comm="syz.1.4885" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=59237 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 522.594782][ T29] audit: type=1400 audit(1747328426.863:27019): avc: denied { unlink } for pid=3315 comm="syz-executor" name="file0" dev="tmpfs" ino=5459 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 522.617966][ T29] audit: type=1400 audit(1747328426.873:27020): avc: denied { create } for pid=19291 comm="syz.2.4888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 522.654378][T19296] loop4: detected capacity change from 0 to 512 [ 522.685265][T19296] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 522.700869][T19296] EXT4-fs (loop4): mount failed [ 522.857261][T19302] loop4: detected capacity change from 0 to 4096 [ 522.868282][T19302] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.931955][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.983006][T19307] netlink: 'syz.4.4892': attribute type 29 has an invalid length. [ 523.266207][T19314] __nla_validate_parse: 6 callbacks suppressed [ 523.266251][T19314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4895'. [ 523.712163][T19330] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 523.766709][T19332] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4901'. [ 523.928707][T19334] block device autoloading is deprecated and will be removed. [ 524.230956][T19336] loop4: detected capacity change from 0 to 512 [ 524.281020][T19336] EXT4-fs (loop4): orphan cleanup on readonly fs [ 524.289695][T19336] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.4902: bg 0: block 248: padding at end of block bitmap is not set [ 524.315722][T19336] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.4902: Failed to acquire dquot type 1 [ 524.377195][T19336] EXT4-fs (loop4): 1 truncate cleaned up [ 524.387830][T19336] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 524.532184][T19336] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 524.556437][T19336] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 524.639677][T19353] lo speed is unknown, defaulting to 1000 [ 524.699721][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.357858][T19381] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4914'. [ 525.623787][T19388] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4917'. [ 525.637906][T19388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4917'. [ 525.674236][T19388] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19388 comm=syz.0.4917 [ 525.891747][T19390] netem: incorrect ge model size [ 526.170419][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4919'. [ 526.179553][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4919'. [ 526.188671][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4919'. [ 526.350375][T19410] loop4: detected capacity change from 0 to 128 [ 526.360880][T19410] FAT-fs (loop4): bogus number of FAT structure [ 526.367301][T19410] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 526.376675][T19410] FAT-fs (loop4): Can't find a valid FAT filesystem [ 526.700217][T19417] netlink: 'syz.0.4926': attribute type 29 has an invalid length. [ 527.097729][ T29] kauditd_printk_skb: 643 callbacks suppressed [ 527.097752][ T29] audit: type=1400 audit(1747328431.303:27660): avc: denied { tracepoint } for pid=19424 comm="syz.4.4930" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 527.928074][T19425] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4930'. [ 528.219950][ T29] audit: type=1400 audit(1747328432.443:27661): avc: denied { mount } for pid=19421 comm="syz.1.4929" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 528.678699][ T29] audit: type=1400 audit(1747328432.963:27662): avc: denied { setopt } for pid=19442 comm="syz.3.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 528.732587][ T29] audit: type=1400 audit(1747328432.973:27663): avc: denied { connect } for pid=19439 comm="syz.2.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 528.752429][ T29] audit: type=1400 audit(1747328432.973:27664): avc: denied { write } for pid=19439 comm="syz.2.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 528.772168][ T29] audit: type=1400 audit(1747328432.973:27665): avc: denied { create } for pid=19439 comm="syz.2.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 528.792961][ T29] audit: type=1400 audit(1747328432.973:27666): avc: denied { connect } for pid=19439 comm="syz.2.4945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 528.813155][ T29] audit: type=1400 audit(1747328432.983:27667): avc: denied { bind } for pid=19442 comm="syz.3.4936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 528.833674][ T29] audit: type=1400 audit(1747328432.983:27668): avc: denied { name_bind } for pid=19442 comm="syz.3.4936" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 528.856355][ T29] audit: type=1400 audit(1747328432.983:27669): avc: denied { node_bind } for pid=19442 comm="syz.3.4936" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 529.989306][T19470] netlink: 180 bytes leftover after parsing attributes in process `syz.4.4942'. [ 530.160800][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4942'. [ 530.821242][T19492] lo speed is unknown, defaulting to 1000 [ 533.350271][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 533.350290][ T29] audit: type=1400 audit(1747328437.633:27697): avc: denied { cpu } for pid=19525 comm="syz.1.4963" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 533.358013][T19529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4964'. [ 533.534339][ T29] audit: type=1326 audit(1747328437.813:27698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.1.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 533.558134][ T29] audit: type=1326 audit(1747328437.813:27699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.1.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 533.582587][ T29] audit: type=1326 audit(1747328437.813:27700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.1.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 533.607031][ T29] audit: type=1326 audit(1747328437.813:27701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.1.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 533.630715][ T29] audit: type=1326 audit(1747328437.813:27702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.1.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 533.655027][ T29] audit: type=1326 audit(1747328437.813:27703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.1.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 533.678867][ T29] audit: type=1326 audit(1747328437.813:27704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.1.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 533.703182][ T29] audit: type=1326 audit(1747328437.813:27705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.1.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 533.727468][ T29] audit: type=1326 audit(1747328437.813:27706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19533 comm="syz.1.4965" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4691fe969 code=0x7ffc0000 [ 533.989553][T19547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4970'. [ 534.003978][T19553] netlink: 180 bytes leftover after parsing attributes in process `syz.1.4971'. [ 534.191791][T19554] lo speed is unknown, defaulting to 1000 [ 534.588623][T19565] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4974'. [ 535.553106][T19577] lo speed is unknown, defaulting to 1000 [ 535.793237][T19589] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4983'. [ 535.844488][T19594] atomic_op ffff88816d951928 conn xmit_atomic 0000000000000000 [ 535.856569][T19576] lo speed is unknown, defaulting to 1000 [ 536.023135][T19602] loop4: detected capacity change from 0 to 512 [ 536.042364][T19602] EXT4-fs warning (device loop4): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 536.054064][T19602] EXT4-fs warning (device loop4): dx_probe:851: Enable large directory feature to access it [ 536.064281][T19602] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.4987: Corrupt directory, running e2fsck is recommended [ 536.078590][T19602] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 536.088109][T19602] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.4987: corrupted in-inode xattr: invalid ea_ino [ 536.103030][T19602] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.4987: couldn't read orphan inode 15 (err -117) [ 536.119227][T19602] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.185497][T19602] EXT4-fs warning (device loop4): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 536.197201][T19602] EXT4-fs warning (device loop4): dx_probe:851: Enable large directory feature to access it [ 536.208124][T19602] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.4987: Corrupt directory, running e2fsck is recommended [ 536.233401][T19602] EXT4-fs warning (device loop4): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 536.245933][T19602] EXT4-fs warning (device loop4): dx_probe:851: Enable large directory feature to access it [ 536.256092][T19602] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.4987: Corrupt directory, running e2fsck is recommended [ 536.269855][T19602] EXT4-fs warning (device loop4): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 536.282128][T19602] EXT4-fs warning (device loop4): dx_probe:851: Enable large directory feature to access it [ 536.292390][T19602] EXT4-fs warning (device loop4): dx_probe:936: inode #2: comm syz.4.4987: Corrupt directory, running e2fsck is recommended [ 536.306622][T19602] EXT4-fs warning (device loop4): dx_probe:848: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 536.333731][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.381018][T19613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4991'. [ 536.390127][T19613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4991'. [ 536.419927][T19615] netlink: 'syz.0.4993': attribute type 29 has an invalid length. [ 536.423845][T19613] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.436111][T19613] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.444352][T19613] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.452844][T19613] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 536.472232][T19613] loop4: detected capacity change from 0 to 164 [ 536.500124][T19613] Unable to read rock-ridge attributes [ 536.508392][T19613] Unable to read rock-ridge attributes [ 536.520765][T19613] Unable to read rock-ridge attributes [ 536.527047][T19613] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 536.563197][T19621] loop4: detected capacity change from 0 to 512 [ 536.570947][T19621] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 536.590611][T19621] EXT4-fs (loop4): 1 truncate cleaned up [ 536.610472][T19621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.613614][T19625] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4996'. [ 536.692120][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.779480][T19633] loop4: detected capacity change from 0 to 512 [ 536.786606][T19633] EXT4-fs: dax option not supported [ 536.981722][T19641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5002'. [ 537.961734][T19666] loop4: detected capacity change from 0 to 512 [ 537.969201][T19666] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 538.012725][T19666] EXT4-fs (loop4): 1 truncate cleaned up [ 538.078765][T19668] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5009'. [ 538.136322][T19666] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.432004][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.555289][ T29] kauditd_printk_skb: 87 callbacks suppressed [ 538.555373][ T29] audit: type=1400 audit(1747328442.833:27794): avc: denied { ioctl } for pid=19674 comm="syz.4.5011" path="socket:[60984]" dev="sockfs" ino=60984 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 538.623805][T19656] lo speed is unknown, defaulting to 1000 [ 538.870942][T19681] netlink: 'syz.0.5013': attribute type 29 has an invalid length. [ 538.959766][ T29] audit: type=1400 audit(1747328443.243:27795): avc: denied { create } for pid=19683 comm="syz.2.5014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 539.000076][ T29] audit: type=1400 audit(1747328443.263:27796): avc: denied { write } for pid=19683 comm="syz.2.5014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 539.084089][ T29] audit: type=1400 audit(1747328443.373:27797): avc: denied { bind } for pid=19685 comm="syz.2.5015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 539.306255][T19691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5016'. [ 540.156522][ T29] audit: type=1326 audit(1747328444.443:27798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc71ee969 code=0x7ffc0000 [ 540.181089][ T29] audit: type=1326 audit(1747328444.443:27799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc71ee969 code=0x7ffc0000 [ 540.208864][ T29] audit: type=1326 audit(1747328444.493:27800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1bc71ee969 code=0x7ffc0000 [ 540.232576][ T29] audit: type=1326 audit(1747328444.493:27801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc71ee969 code=0x7ffc0000 [ 540.256790][ T29] audit: type=1326 audit(1747328444.493:27802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc71ee969 code=0x7ffc0000 [ 540.280477][ T29] audit: type=1326 audit(1747328444.493:27803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19704 comm="syz.2.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1bc71ee969 code=0x7ffc0000 [ 540.455864][T19714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5023'. [ 540.485545][T19720] netlink: 'syz.2.5026': attribute type 29 has an invalid length. [ 540.528152][T19723] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5028'. [ 541.575166][T19736] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5029'. [ 541.585689][T19726] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.5029'. [ 541.604292][T19736] netlink: 'syz.0.5029': attribute type 13 has an invalid length. [ 541.736563][T19743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5031'. [ 541.791466][T19742] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5033'. [ 541.817240][T19742] bond0: entered promiscuous mode [ 541.822388][T19742] bond0: entered allmulticast mode [ 541.829707][T19742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.835138][T19756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5034'. [ 542.658167][T19771] vlan0: entered allmulticast mode [ 542.663401][T19771] bridge_slave_0: entered allmulticast mode [ 543.281342][T19779] lo speed is unknown, defaulting to 1000 [ 543.328307][T19781] xt_hashlimit: max too large, truncated to 1048576 [ 543.620413][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 543.620474][ T29] audit: type=1400 audit(1747328447.903:28025): avc: denied { create } for pid=19788 comm="syz.0.5046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 543.707704][ T29] audit: type=1400 audit(1747328447.933:28026): avc: denied { connect } for pid=19788 comm="syz.0.5046" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 543.775058][ T29] audit: type=1400 audit(1747328448.063:28027): avc: denied { write } for pid=19796 comm="syz.0.5050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 543.907016][ T29] audit: type=1400 audit(1747328448.153:28028): avc: denied { read write } for pid=19793 comm="syz.1.5048" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 543.935066][ T29] audit: type=1400 audit(1747328448.153:28029): avc: denied { open } for pid=19793 comm="syz.1.5048" path="/syzcgroup/cpu/syz1/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:net_conf_t:s0" [ 543.963456][ T29] audit: type=1400 audit(1747328448.153:28030): avc: denied { write } for pid=19793 comm="syz.1.5048" name="file0" dev="tmpfs" ino=4117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 543.986954][ T29] audit: type=1400 audit(1747328448.153:28031): avc: denied { ioctl } for pid=19793 comm="syz.1.5048" path="/750/file0" dev="tmpfs" ino=4117 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 544.085302][T19799] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5048'. [ 544.462622][T19809] futex_wake_op: syz.0.5061 tries to shift op by -1; fix this program [ 544.467123][T19805] loop4: detected capacity change from 0 to 1024 [ 544.479086][ T29] audit: type=1326 audit(1747328448.763:28032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19810 comm="syz.3.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8251ee969 code=0x7ffc0000 [ 544.502992][ T29] audit: type=1326 audit(1747328448.763:28033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19810 comm="syz.3.5051" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8251ee969 code=0x7ffc0000 [ 544.527026][ T29] audit: type=1326 audit(1747328448.763:28034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19806 comm="syz.2.5053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bc71ee969 code=0x7ffc0000 [ 544.565004][T19805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.595543][T19805] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5052'. [ 544.607430][T19805] lo: entered promiscuous mode [ 544.612251][T19805] lo: entered allmulticast mode [ 544.668621][T19805] infiniband syo1: set down [ 544.673426][T19805] infiniband syo1: added veth0_to_bridge [ 544.676393][T19820] netlink: 'syz.2.5056': attribute type 29 has an invalid length. [ 544.693235][T19821] vlan0: entered allmulticast mode [ 544.696667][T19805] RDS/IB: syo1: added [ 544.702746][T19805] smc: adding ib device syo1 with port count 1 [ 544.710562][T19805] smc: ib device syo1 port 1 has pnetid [ 546.601277][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.756129][T19933] loop4: detected capacity change from 0 to 512 [ 547.774452][T19933] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.793750][T19933] ext4 filesystem being mounted at /947/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 547.932994][T19933] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.5070: corrupted xattr block 32: invalid header [ 547.989611][T19903] lo speed is unknown, defaulting to 1000 [ 548.055537][T19933] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 548.181781][T19933] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.5070: corrupted xattr block 32: invalid header [ 548.332508][T19933] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 548.667925][T19933] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.5070: corrupted xattr block 32: invalid header [ 548.702371][ T29] kauditd_printk_skb: 270 callbacks suppressed [ 548.702389][ T29] audit: type=1400 audit(1747328452.953:28305): avc: denied { read write } for pid=19931 comm="syz.4.5070" name="file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 548.774054][T19933] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 548.839271][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.859537][ T29] audit: type=1400 audit(1747328453.103:28306): avc: denied { open } for pid=19931 comm="syz.4.5070" path="/947/file0/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 548.968459][T19954] netlink: 'syz.0.5072': attribute type 29 has an invalid length. [ 549.035085][T19958] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5071'. [ 550.200854][T19980] lo speed is unknown, defaulting to 1000 [ 550.807946][ T29] audit: type=1400 audit(1747328455.093:28307): avc: denied { write } for pid=19988 comm="syz.3.5078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 550.899534][ T29] audit: type=1400 audit(1747328455.123:28308): avc: denied { accept } for pid=19988 comm="syz.3.5078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 550.919451][ T29] audit: type=1400 audit(1747328455.123:28309): avc: denied { read } for pid=19988 comm="syz.3.5078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 551.013687][T19997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5080'. [ 551.577479][T20000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5081'. [ 551.685952][T20000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.708601][ T29] audit: type=1400 audit(1747328455.953:28310): avc: denied { read write } for pid=19999 comm="syz.1.5081" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.732489][ T29] audit: type=1400 audit(1747328455.973:28311): avc: denied { open } for pid=19999 comm="syz.1.5081" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.756110][ T29] audit: type=1400 audit(1747328455.973:28312): avc: denied { ioctl } for pid=19999 comm="syz.1.5081" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 551.798430][T20000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.818154][ T29] audit: type=1400 audit(1747328456.093:28313): avc: denied { prog_load } for pid=20001 comm="syz.2.5082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 551.837549][ T29] audit: type=1400 audit(1747328456.093:28314): avc: denied { bpf } for pid=20001 comm="syz.2.5082" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 551.842878][T20002] netlink: 'syz.2.5082': attribute type 29 has an invalid length. [ 551.987423][T19998] lo speed is unknown, defaulting to 1000 [ 552.432310][T20015] netlink: 'syz.0.5085': attribute type 13 has an invalid length. [ 553.065292][T20026] ================================================================== [ 553.073429][T20026] BUG: KCSAN: data-race in fsnotify_detach_mark / inotify_handle_inode_event [ 553.082220][T20026] [ 553.084558][T20026] write to 0xffff88814c03e314 of 4 bytes by task 20020 on cpu 0: [ 553.092290][T20026] fsnotify_detach_mark+0xba/0x160 [ 553.097512][T20026] fsnotify_clear_marks_by_group+0x2f9/0x4b0 [ 553.103523][T20026] fsnotify_destroy_group+0x53/0x180 [ 553.108834][T20026] inotify_release+0x1f/0x30 [ 553.113440][T20026] __fput+0x29b/0x650 [ 553.117432][T20026] ____fput+0x1c/0x30 [ 553.121453][T20026] task_work_run+0x131/0x1a0 [ 553.126063][T20026] resume_user_mode_work+0x6a/0x70 [ 553.131188][T20026] syscall_exit_to_user_mode+0x77/0xb0 [ 553.136659][T20026] do_syscall_64+0xdd/0x1a0 [ 553.141187][T20026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.147094][T20026] [ 553.149421][T20026] read to 0xffff88814c03e314 of 4 bytes by task 20026 on cpu 1: [ 553.157316][T20026] inotify_handle_inode_event+0x34e/0x3d0 [ 553.163051][T20026] fsnotify_handle_inode_event+0x1c0/0x220 [ 553.168982][T20026] fsnotify+0x1290/0x14b0 [ 553.173327][T20026] __fsnotify_parent+0x29e/0x330 [ 553.178286][T20026] vfs_open+0x19c/0x1e0 [ 553.182448][T20026] path_openat+0x1c5e/0x2170 [ 553.187051][T20026] do_filp_open+0x109/0x230 [ 553.191565][T20026] do_sys_openat2+0xa6/0x110 [ 553.196162][T20026] __x64_sys_openat+0xf2/0x120 [ 553.200948][T20026] x64_sys_call+0x1af/0x2fb0 [ 553.205565][T20026] do_syscall_64+0xd0/0x1a0 [ 553.210089][T20026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.215995][T20026] [ 553.218320][T20026] value changed: 0x00000033 -> 0x00000030 [ 553.224059][T20026] [ 553.226384][T20026] Reported by Kernel Concurrency Sanitizer on: [ 553.232544][T20026] CPU: 1 UID: 0 PID: 20026 Comm: syz.2.5087 Not tainted 6.15.0-rc6-syzkaller-00105-g088d13246a46 #0 PREEMPT(voluntary) [ 553.245055][T20026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 553.255125][T20026] ================================================================== [ 553.280211][T20025] loop4: detected capacity change from 0 to 1024 [ 553.310503][T20025] EXT4-fs (loop4): unsupported descriptor size 0 [ 553.321537][T20025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5088'.