last executing test programs: 2.882867881s ago: executing program 3 (id=1263): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r0}, 0x20) r2 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e55, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2.769675218s ago: executing program 4 (id=1268): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x4381, 0x7, 0x8, 0x7fff, 0x3}}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000300), 0x12, 0x538, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000759, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@usrquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}, 0x0}, {@dax_inode}, {@nobh}, {@dax_inode}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffffffe}}, {@dax_always}, {@usrjquota}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@usrquota}, {@jqfmt_vfsold}, {@journal_checksum}, {@journal_checksum}], [{@audit}, {@fowner_gt}, {@audit}], 0x2c}, 0x6, 0x50c, &(0x7f0000000a40)="$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") lsetxattr$security_evm(&(0x7f00000001c0)='.\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback, 0xffffffffffffffff, 0x2f}, 0x20) syz_open_dev$sg(0x0, 0xe6, 0x2602) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x2014, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0xd07, 0x40}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@fallback=r0, r2, 0x2f, 0x28, 0x4}, 0x20) select(0x40, &(0x7f0000000240)={0x3, 0x5, 0xb96, 0x1, 0x1, 0x9, 0x6, 0x400}, 0x0, &(0x7f0000000340)={0xa, 0x2536, 0xffffffffffff0001, 0x9, 0x1, 0x29e, 0x10000, 0x8}, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000400)="a576daa406ebf181493bb654dc3135157ce698bcf7d751a346a7e44efc3412bf0daf47f141d7104036ce2260bf568bf6c30d52f972c61cf324efca0d0e2514ca7486bade791217c937dacf91c193d2fe6cbc97c97c23ca1fdc2a0326f8e972c6f539f1be1eb449b4b5fc59e1214bfad4edfedb780f5e939647363670434cddf510f0f1a0ee1f4a86", &(0x7f0000000080)=@udp6=r4, 0x1}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000000801010000000000000000030000020900010073797a310000000006000240880900001400048006000740000000060800064000000009050003000600db3592a2da91683a607b96ef69bd850000"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) 2.262063927s ago: executing program 3 (id=1272): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004010}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000015c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000600)=""/74, 0x4a}], 0x4}, 0x1801}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x120, 0x0) socket(0xa, 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.135033414s ago: executing program 0 (id=1276): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.04816945s ago: executing program 0 (id=1279): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fedbdf25fc0000000000000000f1000000000000ac1414bb00000000000000ecffffffffffffff04000000000a0060803b00"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4048000) 2.008006112s ago: executing program 0 (id=1282): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f0000000040)='./bus\x00', 0x1) mount$9p_unix(0x0, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0), 0x1000010, &(0x7f0000000140)=ANY=[@ANYBLOB='transn=9p2000,dfltuid=']) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000540), 0x2}, 0x1160bb, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040), &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.518445131s ago: executing program 4 (id=1284): socket(0x80000000000000a, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x8, 0x0, 0x9}]}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.459752204s ago: executing program 0 (id=1286): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000003200), &(0x7f0000003240)=0x10) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000003280)=0x9) unshare(0x22020400) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x18) copy_file_range(r2, 0x0, r0, 0x0, 0xfffffffffffffffe, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000af8010000120a010200000000000000000200fffe0900020073797a310000000008000440000000000900010073797a30000000000800034000000008"], 0x220}, 0x1, 0x0, 0x0, 0x890}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x2000c8d0}, 0x20000800) recvmmsg(r2, &(0x7f00000030c0)=[{{&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000480)=[{&(0x7f0000000000)=""/42, 0x2a}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000200)=""/163, 0xa3}, {&(0x7f00000002c0)=""/95, 0x5f}, {&(0x7f0000000340)=""/11, 0xb}, {&(0x7f0000000380)=""/204, 0xcc}], 0x6}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000500)=""/50, 0x32}, {&(0x7f0000000540)=""/214, 0xd6}, {&(0x7f0000000640)=""/93, 0x5d}, {&(0x7f00000006c0)=""/80, 0x50}, {&(0x7f0000000740)=""/144, 0x90}], 0x5, &(0x7f0000000880)=""/172, 0xac}, 0xaf6}, {{&(0x7f0000000940)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f00000009c0)=""/251, 0xfb}, {&(0x7f0000000ac0)=""/72, 0x48}, {&(0x7f0000000b40)=""/97, 0x61}], 0x3, &(0x7f0000000c00)=""/54, 0x36}, 0x7}, {{&(0x7f0000000c40)=@nfc, 0x80, &(0x7f0000002040)=[{&(0x7f0000000cc0)=""/108, 0x6c}, {&(0x7f0000000d40)=""/23, 0x17}, {&(0x7f0000000d80)=""/226, 0xe2}, {&(0x7f0000000e80)=""/70, 0x46}, {&(0x7f0000000f00)=""/186, 0xba}, {&(0x7f0000000fc0)=""/11, 0xb}, {&(0x7f0000001000)=""/8, 0x8}, {&(0x7f0000001040)=""/4096, 0x1000}], 0x8, &(0x7f00000020c0)=""/4096, 0x1000}, 0x1000}], 0x4, 0x10321, &(0x7f00000031c0)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000680001"], 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x20004000) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.447383005s ago: executing program 1 (id=1287): r0 = socket(0x2, 0x2, 0x1) bind$unix(r0, &(0x7f0000000000)=@abs, 0x6e) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000700)=[{0x0}], 0x1, 0x180, 0x9) 1.378576759s ago: executing program 1 (id=1288): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000100)=0x5, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) recvmmsg(r0, 0x0, 0x0, 0x2001, 0x0) 1.378073329s ago: executing program 4 (id=1289): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10, 0x4}, {0x0, 0x9}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.344538891s ago: executing program 0 (id=1290): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) fchown(r2, 0xee00, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000009c0)=[{&(0x7f00000000c0)="f11fc3b86d4d416805a96069888fc278bda9e3b83ab3", 0x16}], 0x1) r6 = epoll_create1(0x80000) r7 = fcntl$dupfd(r3, 0x406, r4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) r8 = getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x80) kcmp$KCMP_EPOLL_TFD(r8, r8, 0x7, r6, &(0x7f0000000100)={r6, r7}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_socket_connect_nvme_tcp() 1.332654502s ago: executing program 3 (id=1291): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000", 0x3e}, {&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16", 0x77}], 0x2}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7dbbd18fa5533a6b0acc138c81a8acb", 0xd3}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.280786795s ago: executing program 1 (id=1292): syz_emit_ethernet(0x90, &(0x7f0000000240)={@empty, @multicast, @val={@void, {0x8100, 0x4, 0x1, 0x1}}, {@x25={0x805, {0x1, 0x50, 0xf6, "12f9867d252ca41eb69328c88efddbec8ee01dbb7664af0e8e6adfcbf32103c32c6d3541f3b900d60c50ec562d8dd32efca09425130cb751a8c45a4b82ba2ac0d9735d190b59ec07e8dfa1f3871138caf99ea769d8c7009f3bb8d04fd594f41721eb620f530c91d8ff2638a698499620c7c8b7781cd2420026faf8"}}}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xe) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) 1.280467605s ago: executing program 1 (id=1293): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x76, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002340)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b9", 0xc4}], 0x1}}], 0x1, 0x2090) sendmmsg(r0, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)="e6c1c956bd1598c9e7ebd59c16a067dac05bb0e3df8c5dc56b747e257a62da518996bf7a37f291b01f0abc0ab5bf153bc1904ee872bb7cfd10e04ebf587379ece4dc90852afecfedbf58e68d26be890ca37acaf2424107", 0x57}, {&(0x7f0000000900)="fb45a34012d97609ce4fb8a3020a486b8ef5c37fcf148c1d19b08acf14f2e58534fbfb296c2444114d261e53ab2c4343a326379f37a68a089f3a6f2968827c99e290d04f11b587bd4fc4625804f2080ac21d65afdb6d7880e6891807f27396e1e1f989c20be22230f94625218726559487ce2181221c674dbe1bce6052740ada777132a7ccc331fab63b2dfaff0e4e8dd457745dfca31410f9d75b2fb1f9ecf3ef80c2fa9509699a5e392f733422d3b955b34a3680c2340fcf184add85e792403f70a131ad82be3651a8f1c0dba355bd6564609f038707373a1eada343fda41060535d9773df6e88afbe7812ad27667a0ccdbfb9b2fd64a486cb0348e56bf7d65120605b17c0f03c1fb595b49c5a455125130219c6c3bf406b54fa62ccca66ff780d2cccbf554311595ff7b3fa8cb4cd148d37ea28873cef05adfed930336f400a7771362a58fcce9e7bf374fc6e1e4aa5c8917f69bac7c2867bb0c460cc6cb4c40f55bac58d5e52357d2375b06253856681824df4a36069f4b5a4b772101019a01e92c342eb2585c2416d4bdfcd73480dc427ebe173196e22ef00a9068b6e83fbe2ae18e0c1cfa2ce5357ce5fb73b66ddd576ab856cb55a7bc0f5e4a983bb80df39f1c6f2ef2c755cf09b475aa7e16d7e42d380acb5d4378c6815c9dd33eb1e40c14354c362df7b4bb06b08abdcc6f990f19fe65f6d6c643a355776eec2854f7748a117a074c6ba629c64cd2fd14193edf1883b1b7270d31bab135a2010d86bcb88ed54a35c8239785ee6ab81d78771b53823688d50a32b8415dbf5c4dbdb7425870723ce0518c21a037cec99891afd66c8007ddaa523ef11e083aa149f6d1a8f4908a358e0c395113e1fb2cea838faa9878f25cf51ab7803c04d386896e7888062aaef7238b5ae9013094fe3b653b43fd8beca6acdf3c4bf316bd6cd5b6655d9dd1338a1683068328447049b0f9630a161928a855942b52ce65b4a41f5991c5f6798818da89caea1a1e27d0bff18424f00bb13e25a3dea902b51eebc658158deb0ea9f43ddaf8b73b96315d82bc1bf75b41e3ff7d772d953a6e01d0297d0b57953eb35f0c908cb9e69a88c99c17cda02c27e21d9d58496d2ac79eab5c11281048e2336bed9a9c27b0d6ceefe75ce3ecf2c27f1dcaa93bc57260129a826e7e7c413cf9648fbd853eafc27891d2a55e741e441ba2033aa9e8e1e4c6158905f6b1ec723183dcae243a4a6951f0559f0932d9263ce6618202fea0ca0eb7d35a8b108d6544f7a126305d7fa7447c41d64fc15b84cd377af28ba5b8eec398352f65d2bb00ee822679b9240b2a66744eca60c1e6b5d7df2682ab6e4e248a8d108c35a3ff71c5717e3ab77334f5c0cac957aff9de2b58c25ed1190644558558d1c18b961e1c4fdfe07dfff2cfe7730bb2fad8f1c059ccb135c4cd17a73636aa046afbda224ccff01c77a402daa743fd53efeae8af0ff71a1a524838c944e520f54415b14f4887111064ae1866ef4d492962f90c3d70ecfeb9211352a91d64a21e9930eff1280ea53bc26df6dc32eac066f1f78d964f92f04b46013884173154ba279cd2fe2fce22ee7ed0c3af2eb7c3399234c5da6023e8bae9efdeeb801b530dec5bc1b1be6062be951998dd0b722c204a65de92b3fe19f1e3ee81ab2f038229f918a841ddb1bd88f7142bed77a85c39d4f5c262c2ee98e4656ac72c35cba07b2073555260eb65db6fe3cf50395175009026ce2cf1ceba9c25bae388087c5a3931dfb6248d227c4db9ca1a36d953b0be1d058911fac2ecaf2cc9f3197d4458c2285876d303e3d3443c57e56c278ff793676501e34ae5258437da62788f4b6346e5a5e1522718c193d53c5246e115a512897915cd0086acc4ef1db0dd75db13914ef0d41ae7752ad9b1d84ef8da6ae75e3a909c31d5278c2c69579854de13043d62499ccc499e9f80d80ff7c31cd0cd7c77d7c8fae04d6b7b37dc0b9b4dda13e451b28db81dcc0183570190b5ba6ff2afe1c94e9420dc2b1bfa6a9bf8efa6049aaec6b71b9c287dd777128e4423b0d627886d36fc5d7fc4e832eff600a39d21622086d2449446cb47089fb5307e36114f74534c8b9f575ce7ee5e94896ee124cf9ba0b43361e96fe0cc733a9acc84be2079033b3ae1b49d6ec95f73090a7188e013ffc09a008cf9666840c51d8ff1932322fa3f2caad31a65ffaa9619f6a49073c91b6473b8bc53604bab1f58395a14baf6ef841caaf977a2bceb80b7dc39e766ae2f87320cd0772ac4d1dda840818e1e7a30b13dd798aaff96d98f852f847f425a04c2d901d53403c07c224f98cb66f4285af89cb363b8f1d910c93cb83dd6118239270182015dc0295042fae896f376dd6deffea51c853296a9babe1a5c8e9be0d1ba7692c607ed89e136ced3b00cf6822c5cf6be8c73b3d8afa6a575887afdc45b5b56ba706e33c8f69f24c866c6c3a6f66142687cf1b526e78b354bc133fd9b46050aec0215e1f1773ba00b8b117f357a3368218bdb53cf4e2e599e5ebeb749214508fcaf3d9482f54ceaa166ab6de5e6528378a9615ec13f6cfae9206cb396885ca01800be7a59bf0acf6b7bb530aa974856327358892b2f3317d49383569abd04013f2737216cc7226a0b8cf8047c273181f4f98f93e4b7fb5afc9943b666f103c521baece7478c35b7052717e6b76bf80dce37696bde32e4b19afc125c9a09ad2fb585079e3e2b67aa525d506f9aa7f627883ec63cedda2dc8c5fc284267b178d773cfe6370ad5a2852901bab93c7d039f9e2ef27145124604d1e7ed7f402ee8a6955e1d4bb3d072b38642f4e2d58d564ba425fb961fc491dcfedc4b287624ae7f1e79f058b6c79d35a54e7125c6e9da25d7171e105c9d701b460015c045ec85cf909f5352764d92421a64863714701d9288b197707488f5e077d2c8dbe4c83ae6da43e079ee766fdb210a7fe106d303ec0774e8acd8fe4869b0904b40d15ecaba3fa25424fc55ba0fac82b40c59d5f7f5c5dc960080dfd02cdb947d0bf43cb1420eee5ff7d4a9d57b4c9fbc76b0a62daea83c20dc91ed962c6ba59ae1021bdfa0ca1197a516fd8b2e0bafb7194c2e1658292d27b479bee333e439c3fe8f11da0307ff699b1ebb826e4a540aa27328ff50601ecf8d009a6ad219985404bdff561574d222b2ed6761ded038dc15da48bbac0a5e4fe65c7d0d3ae16c64872bfc8ee84cf1f614e652cf7a63f25328866613438b93ac96f26175b79223ea51f771507cfbdf04a801835c43cb5306a7ec92e3345c04533c021cf317ca85624a927fd6d812e6f5606703adce574e966fc2560a9363dbf9075169bbbbac55080b271bddffee2d66ea24049e43e4d21f70cb14b6fc361b0613632abf585e5b39fd2d9edee4a5036118f5cdca719386f252f246c039eb703d212731a4ceaba943530f0d5645b", 0x982}], 0x2, &(0x7f0000003440)=ANY=[@ANYBLOB="1010"], 0x1010}}], 0x1, 0x800) 1.279952635s ago: executing program 4 (id=1294): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 1.254030307s ago: executing program 1 (id=1295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r4, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) 1.229266878s ago: executing program 4 (id=1296): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x4381, 0x7, 0x8, 0x7fff, 0x3}}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000300), 0x12, 0x538, &(0x7f0000000f80)="$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") syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x2000759, &(0x7f0000000240)={[{@dioread_nolock}, {@data_err_abort}, {@usrquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}, 0x0}, {@dax_inode}, {@nobh}, {@dax_inode}, {@barrier_val={'barrier', 0x3d, 0xfffffffffffffffe}}, {@dax_always}, {@usrjquota}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x724}}, {@usrquota}, {@jqfmt_vfsold}, {@journal_checksum}, {@journal_checksum}], [{@audit}, {@fowner_gt}, {@audit}], 0x2c}, 0x6, 0x50c, &(0x7f0000000a40)="$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") lsetxattr$security_evm(&(0x7f00000001c0)='.\x00', &(0x7f00000003c0), 0x0, 0x0, 0x1) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000300)={@fallback, 0xffffffffffffffff, 0x2f}, 0x20) syz_open_dev$sg(0x0, 0xe6, 0x2602) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$TIOCL_SELLOADLUT(r0, 0x541c, &(0x7f0000000540)={0x5, 0x9bb, 0x1, 0x8000000000000001, 0xfff}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r2 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000380)={@fallback=r0, r2, 0x2f, 0x28, 0x4}, 0x20) select(0x40, &(0x7f0000000240)={0x3, 0x5, 0xb96, 0x1, 0x1, 0x9, 0x6, 0x400}, 0x0, &(0x7f0000000340)={0xa, 0x2536, 0xffffffffffff0001, 0x9, 0x1, 0x29e, 0x10000, 0x8}, 0x0) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x4, 0x14a}}) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r2, &(0x7f0000000400)="a576daa406ebf181493bb654dc3135157ce698bcf7d751a346a7e44efc3412bf0daf47f141d7104036ce2260bf568bf6c30d52f972c61cf324efca0d0e2514ca7486bade791217c937dacf91c193d2fe6cbc97c97c23ca1fdc2a0326f8e972c6f539f1be1eb449b4b5fc59e1214bfad4edfedb780f5e939647363670434cddf510f0f1a0ee1f4a86", &(0x7f0000000080)=@udp6=r4, 0x1}, 0x20) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000000801010000000000000000030000020900010073797a310000000006000240880900001400048006000740000000060800064000000009050003000600db3592a2da91683a607b96ef69bd850000"], 0x44}, 0x1, 0x0, 0x0, 0x20024810}, 0x0) 696.792369ms ago: executing program 0 (id=1304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 696.678059ms ago: executing program 2 (id=1305): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x76, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002240)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002340)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}], 0x1, 0x2090) sendmmsg(r0, 0x0, 0x0, 0x800) 675.03349ms ago: executing program 2 (id=1306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x10, 0x4}, {0x0, 0x9}, {0xf, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 625.338383ms ago: executing program 2 (id=1307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x205, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 594.536875ms ago: executing program 2 (id=1308): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xfff1, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x9}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x9, 0xffe0}, {0xc, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) 541.674458ms ago: executing program 2 (id=1309): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0xa, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000540), 0x2}, 0x1160bb, 0x10000, 0x0, 0x7, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7ffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_io_uring_setup(0x8d6, &(0x7f00000000c0)={0x0, 0x0, 0x400, 0x0, 0x379}, &(0x7f0000000040), &(0x7f0000000080)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 371.636528ms ago: executing program 1 (id=1310): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000140), 0x1, 0x200200) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="3a1052f804969be2197749d8d480aabf2bda8818e3934b5f1accf4e999f05c8c27113069845c5a416b1cb47e621156d8f4ddb239bb4a788b1dd7ae8068cf58b80f24af0cd29ffa144c726400f3fa91b6c7d4439214cfff25a81ba364a41d1fb303ddc6bdf641b109676ce21ccc9c021a01658a1f4cae19327442159365d4d087a9b5608129d26a631c924825a3c95677a0ffd091a4f06ca37d8bbcea8165f79f8fb4759d91e903166decbd3a0254d6d5dfed1b50174fa0aac7a74865bb7e09d185cc5c57ed3933e7949dbe1bcf68c6200eaf116afc3bd8b63f60042d296413", @ANYRES64=0x0], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)}, 0x4080) sendmsg$nl_xfrm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb"], 0xf8}}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 371.415428ms ago: executing program 3 (id=1311): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x8, 0x0, 0x9}]}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x3, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 230.080146ms ago: executing program 4 (id=1312): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={0x0}}, 0x0) 148.024931ms ago: executing program 3 (id=1314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0) 42.598797ms ago: executing program 3 (id=1315): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000100)=0x5, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) recvmmsg(r0, &(0x7f0000002ac0), 0x0, 0x2001, 0x0) 0s ago: executing program 2 (id=1316): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xa0}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) fchown(r2, 0xee00, 0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r5, &(0x7f00000009c0)=[{&(0x7f00000000c0)="f11fc3b86d4d416805a96069888fc278bda9e3b83ab3", 0x16}], 0x1) r6 = epoll_create1(0x80000) r7 = fcntl$dupfd(r3, 0x406, r4) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) r8 = getpid() perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x11000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400037"], 0xb0}}, 0x80) kcmp$KCMP_EPOLL_TFD(r8, r8, 0x7, r6, &(0x7f0000000100)={r6, r7}) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_socket_connect_nvme_tcp() kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 24.874080][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 24.874097][ T28] audit: type=1400 audit(1771200009.452:57): avc: denied { transition } for pid=3288 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.902988][ T28] audit: type=1400 audit(1771200009.452:58): avc: denied { noatsecure } for pid=3288 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.929994][ T28] audit: type=1400 audit(1771200009.452:59): avc: denied { write } for pid=3288 comm="sh" path="pipe:[353]" dev="pipefs" ino=353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 24.952177][ T28] audit: type=1400 audit(1771200009.462:60): avc: denied { rlimitinh } for pid=3288 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.970997][ T28] audit: type=1400 audit(1771200009.462:61): avc: denied { siginh } for pid=3288 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts. [ 33.534464][ T28] audit: type=1400 audit(1771200018.112:62): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.557466][ T28] audit: type=1400 audit(1771200018.132:63): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.559754][ T3301] cgroup: Unknown subsys name 'net' [ 33.585211][ T28] audit: type=1400 audit(1771200018.162:64): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.680522][ T3301] cgroup: Unknown subsys name 'cpuset' [ 33.686751][ T3301] cgroup: Unknown subsys name 'rlimit' [ 33.797882][ T28] audit: type=1400 audit(1771200018.372:65): avc: denied { setattr } for pid=3301 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.821288][ T28] audit: type=1400 audit(1771200018.372:66): avc: denied { create } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.842025][ T28] audit: type=1400 audit(1771200018.372:67): avc: denied { write } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.871307][ T28] audit: type=1400 audit(1771200018.372:68): avc: denied { read } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.892025][ T28] audit: type=1400 audit(1771200018.402:69): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.902960][ T3304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.917504][ T28] audit: type=1400 audit(1771200018.402:70): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.948695][ T28] audit: type=1400 audit(1771200018.432:71): avc: denied { read } for pid=3039 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.972812][ T3301] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.825425][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 35.898040][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.905210][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.912696][ T3315] bridge_slave_0: entered allmulticast mode [ 35.919414][ T3315] bridge_slave_0: entered promiscuous mode [ 35.926884][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.934030][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.941398][ T3315] bridge_slave_1: entered allmulticast mode [ 35.947882][ T3315] bridge_slave_1: entered promiscuous mode [ 35.967675][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 36.001744][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 36.017845][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.043235][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.086894][ T3315] team0: Port device team_slave_0 added [ 36.097747][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.104948][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.112305][ T3313] bridge_slave_0: entered allmulticast mode [ 36.118762][ T3313] bridge_slave_0: entered promiscuous mode [ 36.127880][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.135126][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.142387][ T3313] bridge_slave_1: entered allmulticast mode [ 36.149067][ T3313] bridge_slave_1: entered promiscuous mode [ 36.156250][ T3315] team0: Port device team_slave_1 added [ 36.181873][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 36.195537][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.202644][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.228660][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.245947][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.253075][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.260301][ T3320] bridge_slave_0: entered allmulticast mode [ 36.266727][ T3320] bridge_slave_0: entered promiscuous mode [ 36.280901][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.287877][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.313857][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.324731][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 36.333527][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.340831][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.347955][ T3320] bridge_slave_1: entered allmulticast mode [ 36.354569][ T3320] bridge_slave_1: entered promiscuous mode [ 36.371527][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.400200][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.424212][ T3313] team0: Port device team_slave_0 added [ 36.431245][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.443799][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.458518][ T3313] team0: Port device team_slave_1 added [ 36.502273][ T3320] team0: Port device team_slave_0 added [ 36.512960][ T3315] hsr_slave_0: entered promiscuous mode [ 36.518881][ T3315] hsr_slave_1: entered promiscuous mode [ 36.530076][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.537043][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.563030][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.574677][ T3320] team0: Port device team_slave_1 added [ 36.583444][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.590632][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.597799][ T3318] bridge_slave_0: entered allmulticast mode [ 36.604434][ T3318] bridge_slave_0: entered promiscuous mode [ 36.611249][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.618258][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.644406][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.669283][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.676588][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.683861][ T3318] bridge_slave_1: entered allmulticast mode [ 36.690477][ T3318] bridge_slave_1: entered promiscuous mode [ 36.709182][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.716358][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.723636][ T3317] bridge_slave_0: entered allmulticast mode [ 36.730298][ T3317] bridge_slave_0: entered promiscuous mode [ 36.748328][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.757734][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.764835][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.790879][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.806658][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.813784][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.821024][ T3317] bridge_slave_1: entered allmulticast mode [ 36.827728][ T3317] bridge_slave_1: entered promiscuous mode [ 36.840940][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.850497][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.857433][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.883385][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.907627][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.939629][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.954297][ T3318] team0: Port device team_slave_0 added [ 36.965036][ T3313] hsr_slave_0: entered promiscuous mode [ 36.971397][ T3313] hsr_slave_1: entered promiscuous mode [ 36.977412][ T3313] debugfs: 'hsr0' already exists in 'hsr' [ 36.983186][ T3313] Cannot create hsr debugfs directory [ 36.999684][ T3318] team0: Port device team_slave_1 added [ 37.019672][ T3320] hsr_slave_0: entered promiscuous mode [ 37.025645][ T3320] hsr_slave_1: entered promiscuous mode [ 37.031559][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 37.037298][ T3320] Cannot create hsr debugfs directory [ 37.056256][ T3317] team0: Port device team_slave_0 added [ 37.080567][ T3317] team0: Port device team_slave_1 added [ 37.097927][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.105086][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.131160][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.160894][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.167878][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.193819][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.207642][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.214765][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.240830][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.265508][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.272511][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.298526][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.331843][ T3318] hsr_slave_0: entered promiscuous mode [ 37.337952][ T3318] hsr_slave_1: entered promiscuous mode [ 37.343918][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 37.349723][ T3318] Cannot create hsr debugfs directory [ 37.395738][ T3317] hsr_slave_0: entered promiscuous mode [ 37.401860][ T3317] hsr_slave_1: entered promiscuous mode [ 37.407725][ T3317] debugfs: 'hsr0' already exists in 'hsr' [ 37.413540][ T3317] Cannot create hsr debugfs directory [ 37.505408][ T3315] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.516775][ T3315] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.528020][ T3315] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.539700][ T3315] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.581838][ T3320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.591716][ T3320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.600657][ T3320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.612409][ T3320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.643351][ T3317] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.652578][ T3317] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.662202][ T3317] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.671988][ T3317] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.701091][ T3313] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 37.712203][ T3313] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 37.730182][ T3313] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 37.739087][ T3313] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 37.774088][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.791253][ T3318] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.800532][ T3318] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.814102][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.822869][ T3318] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.841945][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.850652][ T3318] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.862091][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.869197][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.887839][ T30] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.894978][ T30] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.916753][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.944452][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.961890][ T1642] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.968942][ T1642] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.984096][ T1642] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.991159][ T1642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.011634][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.031194][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.046520][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.063775][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.070912][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.080433][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.087531][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.111331][ T3317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.122438][ T3317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.138166][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.145272][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.156220][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.163281][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.189332][ T3320] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.223781][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.244346][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.290438][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.313252][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.320426][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.331102][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.338237][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.358843][ T3318] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.369942][ T3318] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.400941][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.412664][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.424739][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.556805][ T3320] veth0_vlan: entered promiscuous mode [ 38.581610][ T3320] veth1_vlan: entered promiscuous mode [ 38.596775][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.608197][ T3317] veth0_vlan: entered promiscuous mode [ 38.628681][ T3317] veth1_vlan: entered promiscuous mode [ 38.656040][ T3313] veth0_vlan: entered promiscuous mode [ 38.669195][ T3315] veth0_vlan: entered promiscuous mode [ 38.681858][ T3313] veth1_vlan: entered promiscuous mode [ 38.694212][ T3320] veth0_macvtap: entered promiscuous mode [ 38.704907][ T3317] veth0_macvtap: entered promiscuous mode [ 38.722676][ T3320] veth1_macvtap: entered promiscuous mode [ 38.732186][ T3317] veth1_macvtap: entered promiscuous mode [ 38.746369][ T3313] veth0_macvtap: entered promiscuous mode [ 38.753174][ T3315] veth1_vlan: entered promiscuous mode [ 38.761035][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.778161][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.787390][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.798480][ T3313] veth1_macvtap: entered promiscuous mode [ 38.806023][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.824849][ T906] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.833793][ T906] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.851415][ T906] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.860388][ T3318] veth0_vlan: entered promiscuous mode [ 38.874140][ T906] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.883302][ T906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.892225][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 38.892290][ T28] audit: type=1400 audit(1771200023.472:85): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.YcqXgk/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.899840][ T906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.922998][ T28] audit: type=1400 audit(1771200023.472:86): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.937866][ T3318] veth1_vlan: entered promiscuous mode [ 38.958971][ T28] audit: type=1400 audit(1771200023.472:87): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.YcqXgk/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.984227][ T28] audit: type=1400 audit(1771200023.472:88): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.992209][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.016251][ T28] audit: type=1400 audit(1771200023.472:89): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.YcqXgk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.040886][ T906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.044204][ T28] audit: type=1400 audit(1771200023.472:90): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/root/syzkaller.YcqXgk/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.078873][ T906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.079856][ T28] audit: type=1400 audit(1771200023.472:91): avc: denied { unmount } for pid=3317 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.108157][ T28] audit: type=1400 audit(1771200023.542:92): avc: denied { mounton } for pid=3317 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=538 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.133223][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.141790][ T3315] veth0_macvtap: entered promiscuous mode [ 39.150907][ T28] audit: type=1400 audit(1771200023.542:93): avc: denied { mount } for pid=3317 comm="syz-executor" name="/" dev="gadgetfs" ino=3781 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.177388][ T3318] veth0_macvtap: entered promiscuous mode [ 39.186290][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.190841][ T3317] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.199651][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.221740][ T3315] veth1_macvtap: entered promiscuous mode [ 39.235865][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.244788][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.253082][ T28] audit: type=1400 audit(1771200023.812:94): avc: denied { read write } for pid=3317 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.282692][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.296553][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.311877][ T3318] veth1_macvtap: entered promiscuous mode [ 39.318508][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.327659][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.359457][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.371158][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.422077][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.474006][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.523374][ T50] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.559048][ T50] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.571687][ T50] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.580810][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.838720][ T3514] futex_wake_op: syz.4.10 tries to shift op by 32; fix this program [ 39.852661][ T3512] loop1: detected capacity change from 0 to 2048 [ 39.864362][ T3512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.876880][ T3512] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.439936][ T3512] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.597633][ T3529] Zero length message leads to an empty skb [ 40.727580][ T3532] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.520511][ T3552] netlink: 32 bytes leftover after parsing attributes in process `syz.4.26'. [ 41.715721][ T3550] loop2: detected capacity change from 0 to 32768 [ 41.898624][ T3582] x_tables: ip_tables: osf match: only valid for protocol 6 [ 42.600418][ T3607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.618315][ T3607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.382917][ T3632] netlink: 32 bytes leftover after parsing attributes in process `syz.3.59'. [ 43.567488][ T3638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.594922][ T3638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.209193][ T3654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.68'. [ 44.279542][ T28] kauditd_printk_skb: 57 callbacks suppressed [ 44.279560][ T28] audit: type=1400 audit(1771200028.832:152): avc: denied { bind } for pid=3655 comm="syz.0.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 44.365726][ T28] audit: type=1400 audit(1771200028.942:153): avc: denied { connect } for pid=3659 comm="syz.1.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.408319][ T3664] netlink: 'syz.3.72': attribute type 21 has an invalid length. [ 44.426457][ T3664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.72'. [ 44.683165][ T28] audit: type=1400 audit(1771200029.262:154): avc: denied { write } for pid=3682 comm="syz.1.80" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 45.840474][ T3695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 45.864547][ T3697] syz.0.85 uses obsolete (PF_INET,SOCK_PACKET) [ 45.871248][ T3695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 45.881264][ T3695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.84'. [ 45.909662][ T28] audit: type=1400 audit(1771200030.472:155): avc: denied { ioctl } for pid=3696 comm="syz.0.85" path="socket:[6151]" dev="sockfs" ino=6151 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 45.948163][ T3699] netlink: 24 bytes leftover after parsing attributes in process `syz.3.87'. [ 45.961519][ T28] audit: type=1400 audit(1771200030.542:156): avc: denied { write } for pid=3702 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 46.014028][ T28] audit: type=1400 audit(1771200030.542:157): avc: denied { nlmsg_write } for pid=3702 comm="syz.4.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 47.107709][ T3731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.101'. [ 47.177610][ T28] audit: type=1400 audit(1771200031.752:158): avc: denied { mount } for pid=3736 comm="syz.1.103" name="/" dev="ramfs" ino=5434 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 47.311667][ T28] audit: type=1400 audit(1771200031.882:159): avc: denied { execute } for pid=3736 comm="syz.1.103" path="/memory.events.local" dev="ramfs" ino=5435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 47.423006][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 47.439031][ T3753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 47.465395][ T28] audit: type=1400 audit(1771200032.032:160): avc: denied { setopt } for pid=3755 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.495116][ T28] audit: type=1400 audit(1771200032.032:161): avc: denied { bind } for pid=3755 comm="syz.1.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 47.500277][ T3753] netlink: 8 bytes leftover after parsing attributes in process `syz.4.110'. [ 47.514472][ T906] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.532646][ T906] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.543693][ T118] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.559651][ T50] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 47.561876][ T3753] netlink: 12 bytes leftover after parsing attributes in process `syz.4.110'. [ 47.679109][ T3767] loop4: detected capacity change from 0 to 8192 [ 47.714428][ T3767] FAT-fs (loop4): error, clusters badly computed (2 != 1) [ 47.721798][ T3767] FAT-fs (loop4): Filesystem has been set read-only [ 47.831619][ T3780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.841565][ T3780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.858488][ T3782] netlink: 277 bytes leftover after parsing attributes in process `syz.4.123'. [ 47.935477][ T3791] loop4: detected capacity change from 0 to 128 [ 48.342896][ T3811] Illegal XDP return value 4294967274 on prog (id 5) dev syz_tun, expect packet loss! [ 48.393980][ T3815] loop1: detected capacity change from 0 to 128 [ 48.403161][ T3817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.427356][ T3817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.442544][ T3817] netlink: 'syz.2.139': attribute type 1 has an invalid length. [ 48.450965][ T3817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.139'. [ 48.461248][ T3817] tipc: Trying to set illegal importance in message [ 48.505457][ T3824] loop3: detected capacity change from 0 to 128 [ 48.681112][ T3843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.693562][ T3843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.729961][ T3847] netlink: 'syz.0.150': attribute type 4 has an invalid length. [ 48.746366][ T3850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.764125][ T3850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.843647][ T3862] netlink: 'syz.0.160': attribute type 5 has an invalid length. [ 48.942095][ T3871] loop0: detected capacity change from 0 to 128 [ 49.094351][ T3883] loop2: detected capacity change from 0 to 256 [ 49.102157][ T3883] ======================================================= [ 49.102157][ T3883] WARNING: The mand mount option has been deprecated and [ 49.102157][ T3883] and is ignored by this kernel. Remove the mand [ 49.102157][ T3883] option from the mount to silence this warning. [ 49.102157][ T3883] ======================================================= [ 49.270028][ T3886] xt_hashlimit: size too large, truncated to 1048576 [ 49.352084][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 49.352109][ T28] audit: type=1400 audit(1771200033.922:178): avc: denied { create } for pid=3887 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.596054][ T28] audit: type=1400 audit(1771200033.932:179): avc: denied { bind } for pid=3887 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 49.815363][ T28] audit: type=1400 audit(1771200033.932:180): avc: denied { listen } for pid=3887 comm="syz.0.171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.170085][ T28] audit: type=1400 audit(1771200034.732:181): avc: denied { create } for pid=3914 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 50.234461][ T3924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.395660][ T3924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.672485][ T28] audit: type=1400 audit(1771200034.742:182): avc: denied { write } for pid=3914 comm="syz.4.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 51.316672][ T28] audit: type=1400 audit(1771200035.812:183): avc: denied { create } for pid=3951 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.369857][ T28] audit: type=1400 audit(1771200035.812:184): avc: denied { setopt } for pid=3951 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.389443][ T28] audit: type=1400 audit(1771200035.812:185): avc: denied { connect } for pid=3951 comm="syz.2.197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 51.396316][ T3956] loop4: detected capacity change from 0 to 128 [ 51.425302][ T3961] loop2: detected capacity change from 0 to 128 [ 52.091205][ T28] audit: type=1400 audit(1771200035.942:186): avc: denied { bind } for pid=3953 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 52.563564][ T3970] syz.4.199: attempt to access beyond end of device [ 52.563564][ T3970] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 52.672525][ T3970] syz.4.199: attempt to access beyond end of device [ 52.672525][ T3970] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 52.685971][ T3974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.731791][ T3974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.937208][ T3970] syz.4.199: attempt to access beyond end of device [ 52.937208][ T3970] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 53.058862][ T3970] syz.4.199: attempt to access beyond end of device [ 53.058862][ T3970] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 53.129735][ T3970] syz.4.199: attempt to access beyond end of device [ 53.129735][ T3970] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 53.169545][ T3970] syz.4.199: attempt to access beyond end of device [ 53.169545][ T3970] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 53.225771][ T3983] netlink: 16 bytes leftover after parsing attributes in process `syz.2.209'. [ 53.229619][ T28] audit: type=1400 audit(1771200037.802:187): avc: denied { ioctl } for pid=3982 comm="syz.2.209" path="socket:[5955]" dev="sockfs" ino=5955 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 53.269804][ T3970] syz.4.199: attempt to access beyond end of device [ 53.269804][ T3970] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 53.319619][ T3970] syz.4.199: attempt to access beyond end of device [ 53.319619][ T3970] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 53.349607][ T3970] syz.4.199: attempt to access beyond end of device [ 53.349607][ T3970] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 53.379374][ T3970] syz.4.199: attempt to access beyond end of device [ 53.379374][ T3970] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 53.490848][ T3993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 53.501445][ T3993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 53.539769][ T3995] usb usb7: usbfs: process 3995 (syz.1.215) did not claim interface 0 before use [ 53.550773][ T3993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 53.559610][ T118] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.568500][ T118] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.577403][ T3993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.213'. [ 53.605324][ T118] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.684905][ T4001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.700297][ T118] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.729672][ T4001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 54.522411][ T28] audit: type=1400 audit(1771200038.512:188): avc: denied { setopt } for pid=4004 comm="syz.0.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 54.545742][ T4014] loop2: detected capacity change from 0 to 736 [ 54.606750][ T28] audit: type=1400 audit(1771200039.182:189): avc: denied { mount } for pid=4013 comm="syz.2.222" name="/" dev="loop2" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 54.683399][ T28] audit: type=1400 audit(1771200039.232:190): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 54.945943][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 54.989599][ T4034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 55.034670][ T118] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.046750][ T4034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.230'. [ 55.070811][ T118] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.083781][ T4034] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 55.107329][ T118] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.139882][ T118] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 55.227514][ T28] audit: type=1400 audit(1771200039.802:191): avc: denied { read write } for pid=4042 comm="syz.1.234" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 55.944529][ T28] audit: type=1400 audit(1771200039.802:192): avc: denied { open } for pid=4042 comm="syz.1.234" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.023956][ T28] audit: type=1400 audit(1771200040.062:193): avc: denied { mount } for pid=4042 comm="syz.1.234" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 56.161574][ T28] audit: type=1400 audit(1771200040.072:194): avc: denied { ioctl } for pid=4042 comm="syz.1.234" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 56.188332][ T28] audit: type=1400 audit(1771200040.742:195): avc: denied { unmount } for pid=3313 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 56.267681][ T28] audit: type=1400 audit(1771200040.842:196): avc: denied { create } for pid=4059 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.372560][ T28] audit: type=1400 audit(1771200040.842:197): avc: denied { getopt } for pid=4059 comm="syz.1.238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 56.541729][ T4076] syz_tun: entered allmulticast mode [ 56.599271][ T4075] syz_tun: left allmulticast mode [ 56.604615][ T4082] netlink: 'syz.3.249': attribute type 27 has an invalid length. [ 56.646061][ T4084] capability: warning: `syz.2.250' uses deprecated v2 capabilities in a way that may be insecure [ 56.728930][ T4082] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.736263][ T4082] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.999340][ T4082] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.060188][ T4096] loop2: detected capacity change from 0 to 128 [ 57.078597][ T4082] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.040462][ T4105] loop0: detected capacity change from 0 to 4096 [ 58.071056][ T4105] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.129653][ T4105] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.169707][ T50] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.183325][ T50] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.215640][ T50] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.236495][ T50] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 58.275351][ T4117] loop4: detected capacity change from 0 to 128 [ 58.351501][ T4123] bio_check_eod: 24 callbacks suppressed [ 58.351541][ T4123] syz.4.262: attempt to access beyond end of device [ 58.351541][ T4123] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 58.455556][ T4123] syz.4.262: attempt to access beyond end of device [ 58.455556][ T4123] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 58.505498][ T4133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.269'. [ 58.523993][ T4123] syz.4.262: attempt to access beyond end of device [ 58.523993][ T4123] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 58.573200][ T4123] syz.4.262: attempt to access beyond end of device [ 58.573200][ T4123] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 58.629710][ T4123] syz.4.262: attempt to access beyond end of device [ 58.629710][ T4123] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 58.661031][ T4137] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 58.684760][ T4123] syz.4.262: attempt to access beyond end of device [ 58.684760][ T4123] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 58.705402][ T4137] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 58.742170][ T4123] syz.4.262: attempt to access beyond end of device [ 58.742170][ T4123] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 58.800516][ T4123] syz.4.262: attempt to access beyond end of device [ 58.800516][ T4123] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 58.867425][ T4123] syz.4.262: attempt to access beyond end of device [ 58.867425][ T4123] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 58.918212][ T4123] syz.4.262: attempt to access beyond end of device [ 58.918212][ T4123] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 59.213388][ T4168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 59.260435][ T4168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 59.288453][ T4168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.285'. [ 59.313485][ T4168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.285'. [ 60.242149][ T4211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 60.251109][ T4211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.301'. [ 60.263903][ T4211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.301'. [ 60.263914][ T3619] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.263973][ T3619] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.264004][ T3619] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 60.273677][ T4211] netlink: 12 bytes leftover after parsing attributes in process `syz.3.301'. [ 60.283167][ T3619] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.185815][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 61.185880][ T28] audit: type=1400 audit(1771200045.762:207): avc: denied { read write } for pid=4238 comm="syz.3.314" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.257058][ T28] audit: type=1400 audit(1771200045.792:208): avc: denied { open } for pid=4238 comm="syz.3.314" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.322000][ T4239] 9p: Bad value for 'rfdno' [ 61.332212][ T28] audit: type=1400 audit(1771200045.912:209): avc: denied { ioctl } for pid=4238 comm="syz.3.314" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 61.526233][ T4265] netlink: 277 bytes leftover after parsing attributes in process `syz.3.325'. [ 62.743639][ T28] audit: type=1400 audit(1771200047.272:210): avc: denied { listen } for pid=4349 comm="syz.2.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 63.250039][ T28] audit: type=1400 audit(1771200047.832:211): avc: denied { perfmon } for pid=4352 comm="syz.3.366" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.307273][ T28] audit: type=1400 audit(1771200047.862:212): avc: denied { bpf } for pid=4352 comm="syz.3.366" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 64.409586][ T28] audit: type=1400 audit(1771200048.622:213): avc: denied { read } for pid=4361 comm="syz.3.370" name="rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.599656][ T28] audit: type=1400 audit(1771200048.622:214): avc: denied { open } for pid=4361 comm="syz.3.370" path="/dev/rtc0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.684878][ T4382] loop1: detected capacity change from 0 to 736 [ 64.700902][ T28] audit: type=1400 audit(1771200048.722:215): avc: denied { ioctl } for pid=4361 comm="syz.3.370" path="/dev/rtc0" dev="devtmpfs" ino=245 ioctlcmd=0x7003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 64.962327][ T28] audit: type=1400 audit(1771200049.542:216): avc: denied { write } for pid=4396 comm="syz.1.386" name="snmp6" dev="proc" ino=4026532664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 65.051409][ T4403] syz_tun: entered allmulticast mode [ 65.060975][ T4403] dvmrp1: entered allmulticast mode [ 65.067216][ T4402] syz_tun: left allmulticast mode [ 65.098591][ T4408] loop3: detected capacity change from 0 to 128 [ 65.123379][ T4406] __nla_validate_parse: 1 callbacks suppressed [ 65.123397][ T4406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.388'. [ 65.148801][ T4406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.388'. [ 65.157998][ T4406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.388'. [ 65.167125][ T4406] netlink: 36 bytes leftover after parsing attributes in process `syz.2.388'. [ 65.280168][ T4415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.376142][ T4415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.404216][ T4408] bio_check_eod: 31 callbacks suppressed [ 65.404232][ T4408] syz.3.390: attempt to access beyond end of device [ 65.404232][ T4408] loop3: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 65.426677][ T4408] syz.3.390: attempt to access beyond end of device [ 65.426677][ T4408] loop3: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 65.440743][ T4408] syz.3.390: attempt to access beyond end of device [ 65.440743][ T4408] loop3: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 65.454433][ T4408] syz.3.390: attempt to access beyond end of device [ 65.454433][ T4408] loop3: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 65.468118][ T4408] syz.3.390: attempt to access beyond end of device [ 65.468118][ T4408] loop3: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 65.514753][ T4408] syz.3.390: attempt to access beyond end of device [ 65.514753][ T4408] loop3: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 65.531378][ T4408] syz.3.390: attempt to access beyond end of device [ 65.531378][ T4408] loop3: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 65.545469][ T4408] syz.3.390: attempt to access beyond end of device [ 65.545469][ T4408] loop3: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 65.559122][ T4408] syz.3.390: attempt to access beyond end of device [ 65.559122][ T4408] loop3: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 65.574178][ T4408] syz.3.390: attempt to access beyond end of device [ 65.574178][ T4408] loop3: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 65.883178][ T4429] loop4: detected capacity change from 0 to 256 [ 66.111764][ T4444] netlink: 16 bytes leftover after parsing attributes in process `syz.2.406'. [ 66.238489][ T4454] loop2: detected capacity change from 0 to 128 [ 66.376135][ T4457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.411'. [ 66.919718][ T4479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.422'. [ 67.435180][ T4496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.428'. [ 67.874834][ T4525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 68.141614][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 68.141628][ T28] audit: type=1400 audit(1771200052.722:220): avc: denied { create } for pid=4547 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 68.168996][ T28] audit: type=1400 audit(1771200052.742:221): avc: denied { setopt } for pid=4547 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.189071][ T28] audit: type=1400 audit(1771200052.742:222): avc: denied { ioctl } for pid=4547 comm="syz.0.452" path="socket:[8851]" dev="sockfs" ino=8851 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.213595][ T28] audit: type=1400 audit(1771200052.742:223): avc: denied { write } for pid=4547 comm="syz.0.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.288513][ T4552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.453'. [ 69.366687][ T4611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.390323][ T4611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.515011][ T4625] vlan2: entered promiscuous mode [ 69.526461][ T4625] gretap0: entered promiscuous mode [ 70.249718][ T28] audit: type=1400 audit(1771200054.812:224): avc: denied { create } for pid=4648 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.546876][ T28] audit: type=1400 audit(1771200054.812:225): avc: denied { setopt } for pid=4648 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.696916][ T28] audit: type=1400 audit(1771200054.812:226): avc: denied { bind } for pid=4648 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.719524][ T28] audit: type=1400 audit(1771200054.812:227): avc: denied { write } for pid=4648 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.780561][ T28] audit: type=1400 audit(1771200054.812:228): avc: denied { read } for pid=4648 comm="syz.0.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.055640][ T28] audit: type=1400 audit(1771200055.632:229): avc: denied { execute } for pid=4670 comm="syz.1.503" path="/98/file1" dev="tmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.552250][ T4690] __nla_validate_parse: 4 callbacks suppressed [ 71.552271][ T4690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.510'. [ 71.820722][ T4696] loop1: detected capacity change from 0 to 128 [ 72.005878][ T4704] bio_check_eod: 1112 callbacks suppressed [ 72.005897][ T4704] syz.1.512: attempt to access beyond end of device [ 72.005897][ T4704] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 72.255742][ T4712] syz_tun: entered allmulticast mode [ 72.326814][ T4712] dvmrp1: entered allmulticast mode [ 72.338109][ T4704] syz.1.512: attempt to access beyond end of device [ 72.338109][ T4704] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 72.637967][ T4704] syz.1.512: attempt to access beyond end of device [ 72.637967][ T4704] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 72.666146][ T4704] syz.1.512: attempt to access beyond end of device [ 72.666146][ T4704] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 72.688393][ T4704] syz.1.512: attempt to access beyond end of device [ 72.688393][ T4704] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 72.709948][ T4704] syz.1.512: attempt to access beyond end of device [ 72.709948][ T4704] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 72.723725][ T4704] syz.1.512: attempt to access beyond end of device [ 72.723725][ T4704] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 72.737567][ T4704] syz.1.512: attempt to access beyond end of device [ 72.737567][ T4704] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 72.751396][ T4704] syz.1.512: attempt to access beyond end of device [ 72.751396][ T4704] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 72.765622][ T4704] syz.1.512: attempt to access beyond end of device [ 72.765622][ T4704] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 72.915792][ T4729] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 72.958917][ T4731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 72.971561][ T4731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 73.380399][ T4754] loop2: detected capacity change from 0 to 128 [ 74.169451][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 74.194474][ T28] audit: type=1400 audit(1771200058.742:234): avc: denied { write } for pid=4766 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.233257][ T4771] tmpfs: Unknown parameter '00000000000000000000000' [ 74.271125][ T28] audit: type=1400 audit(1771200058.812:235): avc: denied { mounton } for pid=4770 comm="syz.3.541" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 74.375065][ T4779] loop3: detected capacity change from 0 to 512 [ 74.389231][ T4781] loop4: detected capacity change from 0 to 512 [ 74.409552][ T28] audit: type=1400 audit(1771200058.962:236): avc: denied { open } for pid=4768 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 74.519743][ T28] audit: type=1400 audit(1771200058.962:237): avc: denied { kernel } for pid=4768 comm="syz.0.540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 74.622490][ T28] audit: type=1400 audit(1771200059.152:238): avc: denied { mount } for pid=4768 comm="syz.0.540" name="/" dev="rpc_pipefs" ino=9166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 74.696904][ T4779] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 74.745133][ T4779] ext4 filesystem being mounted at /119/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.761877][ T28] audit: type=1400 audit(1771200059.182:239): avc: denied { watch watch_reads } for pid=4786 comm="syz.1.546" path="/103" dev="tmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.866678][ T4779] netlink: 'syz.3.543': attribute type 10 has an invalid length. [ 74.875231][ T4790] No such timeout policy "syz1" [ 74.908243][ T28] audit: type=1400 audit(1771200059.252:240): avc: denied { create } for pid=4786 comm="syz.1.546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 74.940383][ T4779] netlink: 40 bytes leftover after parsing attributes in process `syz.3.543'. [ 74.952084][ T4781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 75.000297][ T4803] netlink: 'syz.3.543': attribute type 7 has an invalid length. [ 75.008405][ T4795] syz.2.547 (4795) used greatest stack depth: 9912 bytes left [ 75.033603][ T4804] loop1: detected capacity change from 0 to 512 [ 75.040113][ T28] audit: type=1400 audit(1771200059.372:241): avc: denied { firmware_load } for pid=4793 comm="syz.2.547" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 75.080830][ T4779] team0: Port device geneve1 added [ 75.086679][ T118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.106958][ T4781] ext4 filesystem being mounted at /113/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.120485][ T118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.159633][ T118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.178756][ T28] audit: type=1400 audit(1771200059.402:242): avc: denied { ioctl } for pid=4786 comm="syz.1.546" path="socket:[9191]" dev="sockfs" ino=9191 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.217757][ T118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.239092][ T4808] loop2: detected capacity change from 0 to 4096 [ 75.271009][ T4808] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.290784][ T4804] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 75.309633][ T28] audit: type=1400 audit(1771200059.402:243): avc: denied { module_request } for pid=4786 comm="syz.1.546" kmod="netdev-syztnl0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 75.360152][ T4804] ext4 filesystem being mounted at /104/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.440984][ T4816] netlink: 'syz.4.544': attribute type 10 has an invalid length. [ 75.448814][ T4816] netlink: 40 bytes leftover after parsing attributes in process `syz.4.544'. [ 75.509323][ T4816] team0: Port device geneve1 added [ 75.525043][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 75.540501][ T4819] netlink: 'syz.1.549': attribute type 10 has an invalid length. [ 75.572909][ T4819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.549'. [ 75.577489][ T4819] team0: Port device geneve1 added [ 75.617846][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.627431][ T4821] loop3: detected capacity change from 0 to 1024 [ 75.627773][ T4821] EXT4-fs: Ignoring removed oldalloc option [ 75.627832][ T4821] EXT4-fs: Ignoring removed bh option [ 75.639415][ T4816] netlink: 'syz.4.544': attribute type 7 has an invalid length. [ 75.663738][ T4821] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.737970][ T4823] loop2: detected capacity change from 0 to 4096 [ 75.764551][ T4823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.817050][ T4821] syzkaller0: entered promiscuous mode [ 75.817071][ T4821] syzkaller0: entered allmulticast mode [ 76.050072][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.099972][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.223010][ C0] hrtimer: interrupt took 58431 ns [ 76.231871][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 76.307301][ T4841] 9p: Bad value for 'dfltuid' [ 76.322252][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 76.331000][ T4841] 9p: Bad value for 'dfltuid' [ 76.507879][ T4841] loop1: detected capacity change from 0 to 128 [ 76.516044][ T4846] loop4: detected capacity change from 0 to 512 [ 76.550621][ T4846] EXT4-fs: Ignoring removed orlov option [ 76.569549][ T4846] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.622037][ T4846] EXT4-fs (loop4): orphan cleanup on readonly fs [ 76.626249][ T4841] FAT-fs (loop1): bogus number of reserved sectors [ 76.652346][ T4846] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.557: bg 0: block 248: padding at end of block bitmap is not set [ 76.660411][ T4841] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 76.700313][ T4846] loop4: lost filesystem error report for type 5 error -117 [ 76.702034][ T4846] EXT4-fs error (device loop4): ext4_acquire_dquot:7003: comm syz.4.557: Failed to acquire dquot type 1 [ 76.720519][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 76.720545][ C1] EXT4-fs (loop4): last error at time 1771200061: ext4_validate_block_bitmap:441 [ 76.729352][ T4841] FAT-fs (loop1): Can't find a valid FAT filesystem [ 76.736269][ T4846] loop4: lost filesystem error report for type 5 error -117 [ 76.752863][ T4846] EXT4-fs (loop4): 1 truncate cleaned up [ 76.810814][ T4846] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.856980][ T4846] EXT4-fs: Ignoring removed orlov option [ 76.884674][ T4846] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 76.918194][ T4846] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 76.951942][ T4846] EXT4-fs error (device loop4): __ext4_remount:6806: comm syz.4.557: Abort forced by user [ 76.972764][ T4846] EXT4-fs (loop4): Remounting filesystem read-only [ 76.979382][ T4846] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 77.022541][ T4846] ext4 filesystem being remounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.142945][ T4851] loop3: detected capacity change from 0 to 512 [ 77.250996][ T4851] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 77.271982][ T4846] syz.4.557 (4846) used greatest stack depth: 9240 bytes left [ 77.319641][ T4851] ext4 filesystem being mounted at /123/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.342803][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.386775][ T4851] netlink: 'syz.3.558': attribute type 10 has an invalid length. [ 77.416645][ T4851] netlink: 40 bytes leftover after parsing attributes in process `syz.3.558'. [ 77.438310][ T4834] kexec: Could not allocate control_code_buffer [ 77.597289][ T906] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.597390][ T906] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.597659][ T906] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.597762][ T906] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.176738][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 78.295272][ T4873] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 78.420867][ T4875] bridge0: port 3(syz_tun) entered blocking state [ 78.439874][ T4875] bridge0: port 3(syz_tun) entered disabled state [ 78.458026][ T4875] syz_tun: entered allmulticast mode [ 78.485033][ T4877] loop2: detected capacity change from 0 to 256 [ 78.500301][ T4875] syz_tun: entered promiscuous mode [ 78.529632][ T4877] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 78.544169][ T4871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.563'. [ 78.569533][ T4877] FAT-fs (loop2): Filesystem has been set read-only [ 78.576546][ T4877] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 78.602429][ T4871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.611281][ T4877] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 78.898115][ T4873] syz.0.564 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 78.919767][ T4873] CPU: 1 UID: 0 PID: 4873 Comm: syz.0.564 Not tainted syzkaller #0 PREEMPT(full) [ 78.919798][ T4873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 78.919818][ T4873] Call Trace: [ 78.919826][ T4873] [ 78.919835][ T4873] __dump_stack+0x1d/0x30 [ 78.919916][ T4873] dump_stack_lvl+0x95/0xd0 [ 78.919939][ T4873] dump_stack+0x15/0x1b [ 78.919963][ T4873] dump_header+0x80/0x240 [ 78.920016][ T4873] oom_kill_process+0x295/0x350 [ 78.920123][ T4873] out_of_memory+0x97d/0xb80 [ 78.920157][ T4873] try_charge_memcg+0x62e/0xa10 [ 78.920198][ T4873] obj_cgroup_charge_pages+0x23/0xc0 [ 78.920224][ T4873] __memcg_kmem_charge_page+0x9e/0x170 [ 78.920272][ T4873] __alloc_frozen_pages_noprof+0x18a/0x360 [ 78.920312][ T4873] alloc_pages_mpol+0xb3/0x260 [ 78.920345][ T4873] alloc_pages_noprof+0x8f/0x130 [ 78.920451][ T4873] __vmalloc_node_range_noprof+0xa46/0x12b0 [ 78.920493][ T4873] __kvmalloc_node_noprof+0x3d4/0x650 [ 78.920523][ T4873] ? ip_set_alloc+0x24/0x30 [ 78.920554][ T4873] ? ip_set_alloc+0x24/0x30 [ 78.920585][ T4873] ? __kmalloc_cache_noprof+0x18a/0x410 [ 78.920652][ T4873] ip_set_alloc+0x24/0x30 [ 78.920676][ T4873] hash_netiface_create+0x282/0x740 [ 78.920713][ T4873] ? __pfx_hash_netiface_create+0x10/0x10 [ 78.920744][ T4873] ip_set_create+0x3cf/0x970 [ 78.920785][ T4873] ? __nla_parse+0x40/0x60 [ 78.920895][ T4873] nfnetlink_rcv_msg+0x509/0x5d0 [ 78.920948][ T4873] netlink_rcv_skb+0x123/0x220 [ 78.920980][ T4873] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 78.921012][ T4873] nfnetlink_rcv+0x167/0x1720 [ 78.921116][ T4873] ? __kfree_skb+0x109/0x150 [ 78.921139][ T4873] ? nlmon_xmit+0x4f/0x60 [ 78.921207][ T4873] ? consume_skb+0x4b/0x160 [ 78.921289][ T4873] ? nlmon_xmit+0x4f/0x60 [ 78.921384][ T4873] ? dev_hard_start_xmit+0x3b9/0x3f0 [ 78.921491][ T4873] ? __dev_queue_xmit+0x1393/0x1f40 [ 78.921521][ T4873] ? __dev_queue_xmit+0x148/0x1f40 [ 78.921553][ T4873] ? visit_groups_merge+0xf7e/0xfd0 [ 78.921577][ T4873] ? ref_tracker_free+0x37d/0x3e0 [ 78.921659][ T4873] ? __netlink_deliver_tap+0x4dc/0x500 [ 78.921764][ T4873] netlink_unicast+0x5c0/0x690 [ 78.921850][ T4873] netlink_sendmsg+0x5c8/0x6f0 [ 78.921880][ T4873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 78.921910][ T4873] ____sys_sendmsg+0x5af/0x600 [ 78.922020][ T4873] ___sys_sendmsg+0x195/0x1e0 [ 78.922070][ T4873] __x64_sys_sendmsg+0xd4/0x160 [ 78.922109][ T4873] x64_sys_call+0x194c/0x3020 [ 78.922286][ T4873] do_syscall_64+0x12c/0x370 [ 78.922368][ T4873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.922396][ T4873] RIP: 0033:0x7f519dd9bf79 [ 78.922416][ T4873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.922483][ T4873] RSP: 002b:00007f519c7f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 78.922504][ T4873] RAX: ffffffffffffffda RBX: 00007f519e015fa0 RCX: 00007f519dd9bf79 [ 78.922518][ T4873] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000009 [ 78.922550][ T4873] RBP: 00007f519de327e0 R08: 0000000000000000 R09: 0000000000000000 [ 78.922565][ T4873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.922581][ T4873] R13: 00007f519e016038 R14: 00007f519e015fa0 R15: 00007ffca5431078 [ 78.922646][ T4873] [ 79.269924][ T4873] memory: usage 225752kB, limit 307200kB, failcnt 108 [ 79.299548][ T4873] memory+swap: usage 178892kB, limit 9007199254740988kB, failcnt 0 [ 79.307577][ T4873] kmem: usage 168096kB, limit 9007199254740988kB, failcnt 0 [ 79.322518][ T4873] Memory cgroup stats for /syz0: [ 79.322850][ T4873] cache 65536 [ 79.331351][ T4873] rss 20480 [ 79.339743][ T4873] shmem 0 [ 79.344829][ T4873] mapped_file 217088 [ 79.348998][ T4873] dirty 0 [ 79.352179][ T4873] writeback 0 [ 79.366064][ T4873] workingset_refault_anon 17 [ 79.384072][ T4873] workingset_refault_file 128 [ 79.394259][ T4873] swap 2248704 [ 79.409237][ T4873] swapcached 2306048 [ 79.429712][ T4873] pgpgin 148599 [ 79.435662][ T4873] pgpgout 148569 [ 79.459633][ T4873] pgfault 51484 [ 79.478315][ T4873] pgmajfault 9 [ 79.493105][ T4891] loop2: detected capacity change from 0 to 256 [ 79.493612][ T4873] inactive_anon 40960 [ 79.509791][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 79.509807][ T28] audit: type=1400 audit(1771200064.092:260): avc: denied { sqpoll } for pid=4885 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.555965][ T4873] active_anon 16384 [ 79.560794][ T4891] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.571385][ T4873] inactive_file 0 [ 79.575036][ T4873] active_file 65536 [ 79.578859][ T4873] unevictable 0 [ 79.588413][ T4873] hierarchical_memory_limit 314572800 [ 79.615324][ T4873] hierarchical_memsw_limit 9223372036854771712 [ 79.642509][ T4873] total_cache 65536 [ 79.669608][ T4873] total_rss 20480 [ 79.673395][ T4873] total_shmem 0 [ 79.676908][ T4873] total_mapped_file 217088 [ 79.681605][ T4873] total_dirty 0 [ 79.689614][ T4873] total_writeback 0 [ 79.695565][ T4873] total_workingset_refault_anon 17 [ 79.708565][ T4873] total_workingset_refault_file 128 [ 79.724211][ T4873] total_swap 2248704 [ 79.728203][ T4873] total_swapcached 2306048 [ 79.732737][ T4873] total_pgpgin 148599 [ 79.736791][ T4873] total_pgpgout 148569 [ 79.741377][ T4873] total_pgfault 51484 [ 79.745462][ T4873] total_pgmajfault 9 [ 79.774009][ T4886] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 79.803471][ T4873] total_inactive_anon 40960 [ 79.808053][ T4873] total_active_anon 16384 [ 79.812685][ T4873] total_inactive_file 0 [ 79.817060][ T4873] total_active_file 65536 [ 79.821669][ T4873] total_unevictable 0 [ 79.825723][ T4873] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.564,pid=4872,uid=0 [ 79.841131][ T4873] Memory cgroup out of memory: Killed process 4873 (syz.0.564) total-vm:96352kB, anon-rss:1332kB, file-rss:22732kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:0 [ 79.874585][ T4873] syz.0.564 (4873) used greatest stack depth: 5816 bytes left [ 79.990041][ T4867] syz.4.562 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 80.040922][ T4867] CPU: 0 UID: 0 PID: 4867 Comm: syz.4.562 Not tainted syzkaller #0 PREEMPT(full) [ 80.040955][ T4867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 80.040971][ T4867] Call Trace: [ 80.041031][ T4867] [ 80.041038][ T4867] __dump_stack+0x1d/0x30 [ 80.041068][ T4867] dump_stack_lvl+0x95/0xd0 [ 80.041096][ T4867] dump_stack+0x15/0x1b [ 80.041145][ T4867] dump_header+0x80/0x240 [ 80.041172][ T4867] oom_kill_process+0x295/0x350 [ 80.041209][ T4867] out_of_memory+0x97d/0xb80 [ 80.041248][ T4867] try_charge_memcg+0x62e/0xa10 [ 80.041354][ T4867] mem_cgroup_swapin_charge_folio+0x103/0x1f0 [ 80.041469][ T4867] __swap_cache_prepare_and_add+0x386/0x530 [ 80.041510][ T4867] swap_cache_alloc_folio+0xa2/0x120 [ 80.041587][ T4867] swap_cluster_readahead+0x26e/0x3d0 [ 80.041647][ T4867] swapin_readahead+0xde/0x840 [ 80.041680][ T4867] ? plist_del+0x1e8/0x200 [ 80.041757][ T4867] ? __rcu_read_unlock+0x4e/0x70 [ 80.041795][ T4867] ? __rcu_read_unlock+0x4e/0x70 [ 80.041818][ T4867] ? swap_cache_get_folio+0x26f/0x280 [ 80.041883][ T4867] do_swap_page+0x309/0x2210 [ 80.041919][ T4867] ? hrtimer_try_to_cancel+0x10b/0x3b0 [ 80.041947][ T4867] ? __rcu_read_lock+0x36/0x50 [ 80.041971][ T4867] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 80.042079][ T4867] handle_mm_fault+0xb40/0x3020 [ 80.042116][ T4867] ? vma_start_read+0x1c7/0x2c0 [ 80.042148][ T4867] do_user_addr_fault+0x62f/0x1050 [ 80.042263][ T4867] ? trace_page_fault_user+0x1f/0xe0 [ 80.042382][ T4867] exc_page_fault+0x62/0xa0 [ 80.042410][ T4867] asm_exc_page_fault+0x26/0x30 [ 80.042494][ T4867] RIP: 0033:0x7fe21e56bf8b [ 80.042513][ T4867] Code: 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 <64> 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 2e 0f 1f [ 80.042535][ T4867] RSP: 002b:00007ffe938b7088 EFLAGS: 00010213 [ 80.042555][ T4867] RAX: 000000000000006e RBX: 00000000000137f1 RCX: ffffffffffffffe8 [ 80.042573][ T4867] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe21e7e609c [ 80.042595][ T4867] RBP: 0000000000000032 R08: 7fffffffffffffff R09: 0000000000000000 [ 80.042611][ T4867] R10: 00007ffe938b7190 R11: 0000000000000246 R12: 00007ffe938b71b0 [ 80.042624][ T4867] R13: 00007fe21e7e609c R14: 0000000000013823 R15: 00007ffe938b7190 [ 80.042643][ T4867] [ 80.048188][ T4867] memory: usage 295756kB, limit 307200kB, failcnt 4619 [ 80.529027][ T4867] memory+swap: usage 29412kB, limit 9007199254740988kB, failcnt 0 [ 80.593881][ T4917] loop1: detected capacity change from 0 to 4096 [ 80.744406][ T4917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.792969][ T4925] loop2: detected capacity change from 0 to 512 [ 80.861364][ T4925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 80.898790][ T4925] ext4 filesystem being mounted at /108/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.925076][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.937497][ T4867] kmem: usage 416kB, limit 9007199254740988kB, failcnt 0 [ 80.953182][ T4867] Memory cgroup stats for /syz4: [ 80.953497][ T4867] cache 524288 [ 80.965867][ T4925] netlink: 'syz.2.581': attribute type 10 has an invalid length. [ 80.974076][ T4925] netlink: 40 bytes leftover after parsing attributes in process `syz.2.581'. [ 80.983309][ T4867] rss 32768 [ 80.986589][ T4867] shmem 0 [ 80.989736][ T4867] mapped_file 65536 [ 80.994023][ T4867] dirty 0 [ 80.997147][ T4867] writeback 0 [ 81.000759][ T4867] workingset_refault_anon 42 [ 81.009535][ T4867] workingset_refault_file 256 [ 81.014235][ T4867] swap 163840 [ 81.017531][ T4867] swapcached 6770688 [ 81.021560][ T4867] pgpgin 141970 [ 81.025028][ T4867] pgpgout 141831 [ 81.028591][ T4867] pgfault 50551 [ 81.032264][ T4867] pgmajfault 44 [ 81.035789][ T4867] inactive_anon 20480 [ 81.039890][ T4867] active_anon 24576 [ 81.043713][ T4867] inactive_file 0 [ 81.047423][ T4867] active_file 524288 [ 81.051444][ T4867] unevictable 0 [ 81.054923][ T4867] hierarchical_memory_limit 314572800 [ 81.060343][ T4867] hierarchical_memsw_limit 9223372036854771712 [ 81.066515][ T4867] total_cache 524288 [ 81.070512][ T4867] total_rss 32768 [ 81.074155][ T4867] total_shmem 0 [ 81.077635][ T4867] total_mapped_file 65536 [ 81.082875][ T4925] team0: Port device geneve1 added [ 81.089081][ T4867] total_dirty 0 [ 81.092631][ T4867] total_writeback 0 [ 81.096454][ T4867] total_workingset_refault_anon 42 [ 81.110928][ T4942] netlink: 24 bytes leftover after parsing attributes in process `syz.0.587'. [ 81.120854][ T4943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.120989][ T4943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.129570][ T28] audit: type=1400 audit(1771200065.702:261): avc: denied { cmd } for pid=4940 comm="syz.1.585" path="socket:[10255]" dev="sockfs" ino=10255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.142788][ T4867] total_workingset_refault_file 256 [ 81.142804][ T4867] total_swap 163840 [ 81.142839][ T4867] total_swapcached 6770688 [ 81.142847][ T4867] total_pgpgin 141970 [ 81.142854][ T4867] total_pgpgout 141831 [ 81.142862][ T4867] total_pgfault 50551 [ 81.142869][ T4867] total_pgmajfault 44 [ 81.142907][ T4867] total_inactive_anon 20480 [ 81.142915][ T4867] total_active_anon 24576 [ 81.142923][ T4867] total_inactive_file 0 [ 81.142930][ T4867] total_active_file 524288 [ 81.143008][ T4867] total_unevictable 0 [ 81.143018][ T4867] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.562,pid=4867,uid=0 [ 81.143098][ T4867] Memory cgroup out of memory: Killed process 4867 (syz.4.562) total-vm:96336kB, anon-rss:1252kB, file-rss:22276kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 81.182818][ T4925] netlink: 'syz.2.581': attribute type 7 has an invalid length. [ 81.468900][ T4959] tmpfs: Unknown parameter '00000000000000000000000' [ 81.540653][ T4972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.598'. [ 81.580542][ T4974] loop4: detected capacity change from 0 to 4096 [ 81.592441][ T4974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.830625][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 81.841839][ T4999] tmpfs: Unknown parameter '00000000000000000000000' [ 81.886206][ T5003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.612'. [ 81.920995][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.984992][ T5015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.994507][ T5015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.240032][ T5033] netlink: 173 bytes leftover after parsing attributes in process `syz.0.624'. [ 82.272580][ T5035] netlink: 'syz.0.625': attribute type 10 has an invalid length. [ 82.280808][ T5035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.625'. [ 82.294991][ T5035] team0: Port device geneve1 added [ 82.353312][ T5036] netlink: 'syz.0.625': attribute type 7 has an invalid length. [ 82.550973][ T5038] loop4: detected capacity change from 0 to 4096 [ 82.563646][ T5038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.632167][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.658055][ T5041] tmpfs: Unknown parameter '00000000000000000000000' [ 82.692422][ T5044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.628'. [ 82.857621][ T5056] netlink: 173 bytes leftover after parsing attributes in process `syz.1.635'. [ 82.972626][ T5065] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.981425][ T5065] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.998075][ T5067] tmpfs: Unknown parameter '00000000000000000000000' [ 83.014212][ T5069] netlink: 24 bytes leftover after parsing attributes in process `syz.2.640'. [ 83.024334][ T5064] loop4: detected capacity change from 0 to 4096 [ 83.053890][ T5064] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.142902][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.169859][ T5085] 9p: Bad value for 'dfltuid' [ 83.174674][ T5085] 9p: Bad value for 'dfltuid' [ 83.550128][ T5099] netlink: 24 bytes leftover after parsing attributes in process `syz.0.652'. [ 83.564686][ T5101] syz_tun: entered allmulticast mode [ 83.588750][ T5101] dvmrp1: entered allmulticast mode [ 83.595432][ T5100] syz_tun: left allmulticast mode [ 83.625311][ T5107] loop1: detected capacity change from 0 to 512 [ 83.647241][ T5107] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 83.660556][ T5107] ext4 filesystem being mounted at /121/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 83.679457][ T5107] netlink: 'syz.1.655': attribute type 10 has an invalid length. [ 83.687542][ T5107] netlink: 40 bytes leftover after parsing attributes in process `syz.1.655'. [ 83.755382][ T5115] netlink: 'syz.1.655': attribute type 7 has an invalid length. [ 83.965107][ T5132] syz_tun: entered allmulticast mode [ 83.984198][ T5132] dvmrp1: entered allmulticast mode [ 83.989854][ T5134] loop3: detected capacity change from 0 to 512 [ 84.005176][ T5131] syz_tun: left allmulticast mode [ 84.034062][ T5134] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 84.052186][ T5140] loop4: detected capacity change from 0 to 128 [ 84.054164][ T5134] ext4 filesystem being mounted at /139/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.085655][ T5134] netlink: 'syz.3.666': attribute type 10 has an invalid length. [ 84.093635][ T5134] netlink: 40 bytes leftover after parsing attributes in process `syz.3.666'. [ 84.104470][ T5134] netlink: 'syz.3.666': attribute type 7 has an invalid length. [ 84.123106][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 84.135779][ T5140] bio_check_eod: 705 callbacks suppressed [ 84.135791][ T5140] syz.4.668: attempt to access beyond end of device [ 84.135791][ T5140] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 84.155229][ T5140] syz.4.668: attempt to access beyond end of device [ 84.155229][ T5140] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 84.168718][ T5140] syz.4.668: attempt to access beyond end of device [ 84.168718][ T5140] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 84.198476][ T5140] syz.4.668: attempt to access beyond end of device [ 84.198476][ T5140] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 84.222519][ T5140] syz.4.668: attempt to access beyond end of device [ 84.222519][ T5140] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 84.236168][ T5140] syz.4.668: attempt to access beyond end of device [ 84.236168][ T5140] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 84.249564][ T5140] syz.4.668: attempt to access beyond end of device [ 84.249564][ T5140] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 84.262989][ T5140] syz.4.668: attempt to access beyond end of device [ 84.262989][ T5140] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 84.276343][ T5140] syz.4.668: attempt to access beyond end of device [ 84.276343][ T5140] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 84.290071][ T5140] syz.4.668: attempt to access beyond end of device [ 84.290071][ T5140] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 84.491686][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 84.522881][ T5160] syz_tun: entered allmulticast mode [ 84.541896][ T5160] dvmrp1: entered allmulticast mode [ 84.570215][ T5159] syz_tun: left allmulticast mode [ 84.623382][ T5171] netlink: 173 bytes leftover after parsing attributes in process `syz.0.682'. [ 84.783432][ T5179] loop1: detected capacity change from 0 to 1024 [ 84.790446][ T5179] EXT4-fs: Ignoring removed oldalloc option [ 84.796472][ T5179] EXT4-fs: Ignoring removed bh option [ 84.817986][ T5179] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.083797][ T5200] tmpfs: Unknown parameter '00000000000000000000000' [ 85.240529][ T5213] netlink: 24 bytes leftover after parsing attributes in process `syz.0.699'. [ 85.447101][ T5225] syz_tun: entered allmulticast mode [ 86.057535][ T5243] netlink: 24 bytes leftover after parsing attributes in process `syz.4.711'. [ 86.152252][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.249060][ T5257] 9p: Bad value for 'dfltuid' [ 86.258734][ T5257] 9p: Bad value for 'dfltuid' [ 86.278134][ T5255] loop3: detected capacity change from 0 to 4096 [ 86.305719][ T5255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.378556][ T5257] loop4: detected capacity change from 0 to 128 [ 86.414252][ T5257] FAT-fs (loop4): bogus number of reserved sectors [ 86.424095][ T5257] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 86.434444][ T5257] FAT-fs (loop4): Can't find a valid FAT filesystem [ 86.454969][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.238851][ T5289] tmpfs: Unknown parameter '00000000000000000000000' [ 87.258709][ T5287] loop2: detected capacity change from 0 to 1024 [ 87.288090][ T5287] EXT4-fs: Ignoring removed oldalloc option [ 87.345748][ T5287] EXT4-fs: Ignoring removed bh option [ 87.358798][ T5292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.378494][ T5292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.414739][ T5287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.742194][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.765304][ T5310] netlink: 92 bytes leftover after parsing attributes in process `syz.1.738'. [ 88.142472][ T5310] loop1: detected capacity change from 0 to 512 [ 88.247635][ T5323] netlink: 24 bytes leftover after parsing attributes in process `syz.2.739'. [ 88.289537][ T5310] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.303921][ T5310] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.524854][ T5336] loop2: detected capacity change from 0 to 128 [ 88.567024][ T28] audit: type=1326 audit(1771200073.142:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a227bf79 code=0x7ffc0000 [ 88.719314][ T28] audit: type=1326 audit(1771200073.202:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f13a227bf79 code=0x7ffc0000 [ 88.766230][ T5343] loop4: detected capacity change from 0 to 1024 [ 88.810100][ T5343] EXT4-fs: Ignoring removed oldalloc option [ 88.845924][ T5343] EXT4-fs: Ignoring removed bh option [ 88.889892][ T28] audit: type=1326 audit(1771200073.202:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a227bf79 code=0x7ffc0000 [ 88.963981][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.994157][ T5343] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.027139][ T28] audit: type=1326 audit(1771200073.232:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f13a227bf79 code=0x7ffc0000 [ 89.152798][ T28] audit: type=1326 audit(1771200073.232:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a227bf79 code=0x7ffc0000 [ 89.181262][ T5354] netlink: 'syz.0.756': attribute type 10 has an invalid length. [ 89.204256][ T28] audit: type=1326 audit(1771200073.252:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f13a227bf79 code=0x7ffc0000 [ 89.224993][ T5354] netlink: 40 bytes leftover after parsing attributes in process `syz.0.756'. [ 89.227650][ T28] audit: type=1326 audit(1771200073.292:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a227bf79 code=0x7ffc0000 [ 89.269111][ T28] audit: type=1326 audit(1771200073.332:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f13a227bf79 code=0x7ffc0000 [ 89.292898][ T28] audit: type=1326 audit(1771200073.332:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f13a227bf79 code=0x7ffc0000 [ 89.316386][ T28] audit: type=1326 audit(1771200073.352:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5307 comm="syz.1.738" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f13a227bf79 code=0x7ffc0000 [ 89.558047][ T5367] tipc: Started in network mode [ 89.575172][ T5367] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 89.606461][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.616298][ T5367] tipc: Enabled bearer , priority 28 [ 89.636396][ T5365] -: renamed from syzkaller0 [ 89.716153][ T5373] loop3: detected capacity change from 0 to 1024 [ 89.729140][ T5374] netlink: 156 bytes leftover after parsing attributes in process `syz.2.763'. [ 89.752058][ T5373] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 89.803370][ T5373] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.385873][ T5391] loop1: detected capacity change from 0 to 4096 [ 90.395344][ T5391] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.512450][ T5389] loop4: detected capacity change from 0 to 512 [ 90.559998][ T5389] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 90.560154][ T5389] ext4 filesystem being mounted at /147/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.635157][ T10] tipc: Node number set to 8432298 [ 90.680508][ T5398] netlink: 'syz.4.768': attribute type 7 has an invalid length. [ 90.683535][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.767829][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 90.802176][ T5401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.802310][ T5401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.052146][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 91.165708][ T5414] 9p: Bad value for 'dfltuid' [ 91.178802][ T5414] 9p: Bad value for 'dfltuid' [ 91.272035][ T5414] loop2: detected capacity change from 0 to 128 [ 91.288968][ T5414] FAT-fs (loop2): bogus number of reserved sectors [ 91.299935][ T5414] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 91.320064][ T5419] netlink: 'syz.0.776': attribute type 10 has an invalid length. [ 91.327930][ T5419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.776'. [ 91.339176][ T5414] FAT-fs (loop2): Can't find a valid FAT filesystem [ 91.391187][ T5420] netlink: 'syz.0.776': attribute type 7 has an invalid length. [ 92.103749][ T5428] netlink: 24 bytes leftover after parsing attributes in process `syz.4.780'. [ 92.146950][ T5432] tmpfs: Unknown parameter '00000000000000000000000' [ 92.160793][ T5434] loop4: detected capacity change from 0 to 128 [ 92.362168][ T5447] bio_check_eod: 365 callbacks suppressed [ 92.362185][ T5447] syz.4.782: attempt to access beyond end of device [ 92.362185][ T5447] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 92.400730][ T5447] syz.4.782: attempt to access beyond end of device [ 92.400730][ T5447] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 92.419171][ T5447] syz.4.782: attempt to access beyond end of device [ 92.419171][ T5447] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 92.468654][ T5447] syz.4.782: attempt to access beyond end of device [ 92.468654][ T5447] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 92.625415][ T5447] syz.4.782: attempt to access beyond end of device [ 92.625415][ T5447] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 92.875375][ T5447] syz.4.782: attempt to access beyond end of device [ 92.875375][ T5447] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 92.940371][ T5459] netlink: 444 bytes leftover after parsing attributes in process `syz.1.792'. [ 93.045882][ T5459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.792'. [ 93.055332][ T5447] syz.4.782: attempt to access beyond end of device [ 93.055332][ T5447] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 93.069129][ T5447] syz.4.782: attempt to access beyond end of device [ 93.069129][ T5447] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 93.082786][ T5447] syz.4.782: attempt to access beyond end of device [ 93.082786][ T5447] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 93.096659][ T5447] syz.4.782: attempt to access beyond end of device [ 93.096659][ T5447] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 93.098215][ T5459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.792'. [ 93.290391][ T5471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.319830][ T5471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.328332][ T5477] tmpfs: Unknown parameter '00000000000000000000000' [ 93.363044][ T5481] 9p: Bad value for 'dfltuid' [ 93.367815][ T5481] 9p: Bad value for 'dfltuid' [ 94.090952][ T5491] loop4: detected capacity change from 0 to 4096 [ 94.122756][ T5491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.351392][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.996571][ T5513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.813'. [ 96.587560][ T5569] vlan2: entered allmulticast mode [ 96.617041][ T5569] macsec0: entered allmulticast mode [ 96.651391][ T5569] veth1_macvtap: entered allmulticast mode [ 97.004598][ T5575] tmpfs: Unknown parameter '00000000000000000000000' [ 97.057665][ T5578] loop3: detected capacity change from 0 to 512 [ 97.216476][ T5578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 97.277612][ T5578] ext4 filesystem being mounted at /163/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.344281][ T5591] loop1: detected capacity change from 0 to 128 [ 97.378607][ T5578] netlink: 'syz.3.839': attribute type 10 has an invalid length. [ 97.386622][ T5578] netlink: 40 bytes leftover after parsing attributes in process `syz.3.839'. [ 97.419914][ T5578] netlink: 'syz.3.839': attribute type 7 has an invalid length. [ 97.521239][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 97.521932][ T5606] netlink: 'syz.0.850': attribute type 7 has an invalid length. [ 97.653725][ T58] bio_check_eod: 52 callbacks suppressed [ 97.653801][ T58] kworker/u8:4: attempt to access beyond end of device [ 97.653801][ T58] loop1: rw=1, sector=145, nr_sectors = 16 limit=128 [ 97.801319][ T58] kworker/u8:4: attempt to access beyond end of device [ 97.801319][ T58] loop1: rw=1, sector=169, nr_sectors = 8 limit=128 [ 97.818310][ T58] kworker/u8:4: attempt to access beyond end of device [ 97.818310][ T58] loop1: rw=1, sector=185, nr_sectors = 8 limit=128 [ 97.831994][ T58] kworker/u8:4: attempt to access beyond end of device [ 97.831994][ T58] loop1: rw=1, sector=201, nr_sectors = 8 limit=128 [ 97.845923][ T58] kworker/u8:4: attempt to access beyond end of device [ 97.845923][ T58] loop1: rw=1, sector=217, nr_sectors = 8 limit=128 [ 97.860103][ T58] kworker/u8:4: attempt to access beyond end of device [ 97.860103][ T58] loop1: rw=1, sector=233, nr_sectors = 8 limit=128 [ 97.941929][ T58] kworker/u8:4: attempt to access beyond end of device [ 97.941929][ T58] loop1: rw=1, sector=249, nr_sectors = 8 limit=128 [ 98.004569][ T58] kworker/u8:4: attempt to access beyond end of device [ 98.004569][ T58] loop1: rw=1, sector=265, nr_sectors = 8 limit=128 [ 98.030479][ T5622] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.038909][ T58] kworker/u8:4: attempt to access beyond end of device [ 98.038909][ T58] loop1: rw=1, sector=281, nr_sectors = 8 limit=128 [ 98.053326][ T5622] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.208376][ T58] kworker/u8:4: attempt to access beyond end of device [ 98.208376][ T58] loop1: rw=1, sector=297, nr_sectors = 8 limit=128 [ 98.385859][ T5631] 9p: Bad value for 'dfltuid' [ 98.396368][ T5631] 9p: Bad value for 'dfltuid' [ 98.475263][ T5635] vlan2: entered allmulticast mode [ 98.484448][ T5631] loop1: detected capacity change from 0 to 128 [ 98.490736][ T5635] macsec0: entered allmulticast mode [ 98.502915][ T5635] veth1_macvtap: entered allmulticast mode [ 98.551620][ T5639] loop4: detected capacity change from 0 to 512 [ 98.575769][ T5631] FAT-fs (loop1): bogus number of reserved sectors [ 98.591140][ T5641] loop2: detected capacity change from 0 to 128 [ 98.604231][ T5631] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 98.610490][ T5639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 98.635544][ T5631] FAT-fs (loop1): Can't find a valid FAT filesystem [ 98.669995][ T5639] ext4 filesystem being mounted at /172/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.705744][ T5639] netlink: 'syz.4.862': attribute type 10 has an invalid length. [ 98.723693][ T5639] netlink: 40 bytes leftover after parsing attributes in process `syz.4.862'. [ 98.760490][ T5639] netlink: 'syz.4.862': attribute type 7 has an invalid length. [ 98.878138][ T5646] vlan2: entered allmulticast mode [ 98.899632][ T5646] macsec0: entered allmulticast mode [ 98.918382][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 99.003091][ T5650] loop4: detected capacity change from 0 to 512 [ 99.036097][ T5650] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 99.072870][ T5650] ext4 filesystem being mounted at /173/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.090235][ T5650] netlink: 'syz.4.865': attribute type 7 has an invalid length. [ 99.150177][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 99.911772][ T5678] loop2: detected capacity change from 0 to 128 [ 99.923725][ T5676] netlink: 'syz.0.875': attribute type 10 has an invalid length. [ 99.981736][ T5676] netlink: 40 bytes leftover after parsing attributes in process `syz.0.875'. [ 100.002406][ T5681] netlink: 'syz.0.875': attribute type 7 has an invalid length. [ 100.264611][ T5686] netlink: 'syz.0.879': attribute type 7 has an invalid length. [ 100.305803][ T5688] 9p: Bad value for 'dfltuid' [ 100.321310][ T5688] 9p: Bad value for 'dfltuid' [ 100.593058][ T5696] loop2: detected capacity change from 0 to 4096 [ 100.632903][ T5688] loop1: detected capacity change from 0 to 128 [ 100.670648][ T5696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.744139][ T5688] FAT-fs (loop1): bogus number of reserved sectors [ 100.959959][ T5688] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 101.006312][ T5688] FAT-fs (loop1): Can't find a valid FAT filesystem [ 101.068541][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.466225][ T5713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.484547][ T5713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.770263][ T5738] netlink: 'syz.1.898': attribute type 4 has an invalid length. [ 102.029841][ T5748] 9p: Bad value for 'dfltuid' [ 102.034784][ T5748] 9p: Bad value for 'dfltuid' [ 102.182157][ T5748] loop1: detected capacity change from 0 to 128 [ 102.216133][ T5750] netlink: 40 bytes leftover after parsing attributes in process `syz.4.903'. [ 102.326205][ T5748] FAT-fs (loop1): bogus number of reserved sectors [ 102.334224][ T5748] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 102.344487][ T5748] FAT-fs (loop1): Can't find a valid FAT filesystem [ 102.553033][ T5763] validate_nla: 1 callbacks suppressed [ 102.553115][ T5763] netlink: 'syz.2.909': attribute type 4 has an invalid length. [ 102.618229][ T5773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.639894][ T5773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.659849][ T5776] netlink: 40 bytes leftover after parsing attributes in process `syz.0.916'. [ 102.722213][ T5784] netlink: 'syz.0.918': attribute type 7 has an invalid length. [ 104.188203][ T5811] netlink: 40 bytes leftover after parsing attributes in process `syz.3.928'. [ 104.327625][ T5813] netlink: 'syz.1.930': attribute type 7 has an invalid length. [ 104.381805][ T5819] 9p: Bad value for 'dfltuid' [ 104.394148][ T5819] 9p: Bad value for 'dfltuid' [ 104.450156][ T5819] loop4: detected capacity change from 0 to 128 [ 104.498468][ T5827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.507055][ T5827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.544590][ T5819] FAT-fs (loop4): bogus number of reserved sectors [ 104.554365][ T5819] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 104.565978][ T5819] FAT-fs (loop4): Can't find a valid FAT filesystem [ 104.780962][ T5842] netlink: 40 bytes leftover after parsing attributes in process `syz.1.942'. [ 105.387348][ T5852] netlink: 'syz.4.946': attribute type 7 has an invalid length. [ 105.818472][ T5865] loop4: detected capacity change from 0 to 128 [ 105.966743][ T5873] loop1: detected capacity change from 0 to 1024 [ 105.984867][ T5875] 9p: Bad value for 'dfltuid' [ 105.990264][ T5875] 9p: Bad value for 'dfltuid' [ 106.000639][ T5876] bio_check_eod: 128 callbacks suppressed [ 106.000653][ T5876] syz.4.953: attempt to access beyond end of device [ 106.000653][ T5876] loop4: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 106.030058][ T5873] EXT4-fs: Ignoring removed oldalloc option [ 106.036162][ T5873] EXT4-fs: Ignoring removed bh option [ 106.058316][ T5876] syz.4.953: attempt to access beyond end of device [ 106.058316][ T5876] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 106.110545][ T5873] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.136704][ T5875] loop3: detected capacity change from 0 to 128 [ 106.139250][ T5876] syz.4.953: attempt to access beyond end of device [ 106.139250][ T5876] loop4: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 106.232797][ T5876] syz.4.953: attempt to access beyond end of device [ 106.232797][ T5876] loop4: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 106.252802][ T5876] syz.4.953: attempt to access beyond end of device [ 106.252802][ T5876] loop4: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 106.266509][ T5875] FAT-fs (loop3): bogus number of reserved sectors [ 106.274110][ T5875] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 106.284075][ T5876] syz.4.953: attempt to access beyond end of device [ 106.284075][ T5876] loop4: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 106.298111][ T5875] FAT-fs (loop3): Can't find a valid FAT filesystem [ 106.312694][ T5885] netlink: 'syz.0.959': attribute type 10 has an invalid length. [ 106.327339][ T5885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.959'. [ 106.346461][ T5876] syz.4.953: attempt to access beyond end of device [ 106.346461][ T5876] loop4: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 106.387022][ T5876] syz.4.953: attempt to access beyond end of device [ 106.387022][ T5876] loop4: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 106.414726][ T5876] syz.4.953: attempt to access beyond end of device [ 106.414726][ T5876] loop4: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 106.429291][ T5886] netlink: 'syz.0.959': attribute type 7 has an invalid length. [ 106.452356][ T5876] syz.4.953: attempt to access beyond end of device [ 106.452356][ T5876] loop4: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 106.756004][ T5890] loop4: detected capacity change from 0 to 4096 [ 106.775282][ T5890] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.835120][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.870217][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.038242][ T5914] loop1: detected capacity change from 0 to 128 [ 107.760238][ T5926] loop4: detected capacity change from 0 to 1024 [ 107.808082][ T5926] EXT4-fs: Ignoring removed oldalloc option [ 107.988848][ T5926] EXT4-fs: Ignoring removed bh option [ 108.083843][ T5934] netlink: 36 bytes leftover after parsing attributes in process `syz.3.977'. [ 108.127150][ T5926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.289784][ T5934] netlink: 16 bytes leftover after parsing attributes in process `syz.3.977'. [ 108.309613][ T5934] netlink: 36 bytes leftover after parsing attributes in process `syz.3.977'. [ 108.327415][ T5934] netlink: 36 bytes leftover after parsing attributes in process `syz.3.977'. [ 108.441563][ T5949] netlink: 'syz.0.984': attribute type 10 has an invalid length. [ 108.449424][ T5949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.984'. [ 108.570002][ T5960] netlink: 'syz.0.984': attribute type 7 has an invalid length. [ 108.630146][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.665018][ T5964] loop1: detected capacity change from 0 to 1024 [ 108.680342][ T5964] EXT4-fs: Ignoring removed oldalloc option [ 108.686445][ T5964] EXT4-fs: Ignoring removed bh option [ 108.706646][ T5964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.797198][ T5974] netlink: 'syz.2.1002': attribute type 7 has an invalid length. [ 108.849189][ T5981] loop2: detected capacity change from 0 to 128 [ 109.300332][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1004'. [ 109.454399][ T6016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.464607][ T6016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.551313][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.592810][ T6022] loop1: detected capacity change from 0 to 512 [ 109.624082][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1016'. [ 109.624799][ T6022] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 109.649551][ T6022] ext4 filesystem being mounted at /188/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.697497][ T6022] netlink: 'syz.1.1014': attribute type 10 has an invalid length. [ 109.705478][ T6022] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1014'. [ 109.804590][ T6038] netlink: 'syz.1.1014': attribute type 7 has an invalid length. [ 109.936981][ T6046] loop4: detected capacity change from 0 to 1024 [ 109.951577][ T6046] EXT4-fs: Ignoring removed oldalloc option [ 109.963236][ T6046] EXT4-fs: Ignoring removed bh option [ 110.043830][ T6046] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.089212][ T6057] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1029'. [ 110.184473][ T6077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.194179][ T6077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.424792][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.632100][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 111.212416][ T6097] loop2: detected capacity change from 0 to 128 [ 111.382149][ T6103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1047'. [ 111.429867][ T6105] loop4: detected capacity change from 0 to 512 [ 111.502124][ T6105] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 111.516512][ T6105] ext4 filesystem being mounted at /203/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.600610][ T6125] netlink: 'syz.4.1049': attribute type 7 has an invalid length. [ 111.668233][ T6137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1060'. [ 111.677410][ T6134] loop1: detected capacity change from 0 to 128 [ 111.739316][ T6143] bio_check_eod: 2284 callbacks suppressed [ 111.739330][ T6143] syz.1.1056: attempt to access beyond end of device [ 111.739330][ T6143] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 111.794491][ T6143] syz.1.1056: attempt to access beyond end of device [ 111.794491][ T6143] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 111.809763][ T6143] syz.1.1056: attempt to access beyond end of device [ 111.809763][ T6143] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 111.834858][ T6143] syz.1.1056: attempt to access beyond end of device [ 111.834858][ T6143] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 111.880830][ T6143] syz.1.1056: attempt to access beyond end of device [ 111.880830][ T6143] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 111.914774][ T6143] syz.1.1056: attempt to access beyond end of device [ 111.914774][ T6143] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 111.961842][ T6143] syz.1.1056: attempt to access beyond end of device [ 111.961842][ T6143] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 111.986864][ T6170] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1075'. [ 111.993260][ T6143] syz.1.1056: attempt to access beyond end of device [ 111.993260][ T6143] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 112.010298][ T6143] syz.1.1056: attempt to access beyond end of device [ 112.010298][ T6143] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 112.028532][ T6173] 9p: Bad value for 'dfltuid' [ 112.036251][ T6173] 9p: Bad value for 'dfltuid' [ 112.049553][ T6143] syz.1.1056: attempt to access beyond end of device [ 112.049553][ T6143] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 112.874012][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 113.734181][ T6225] loop4: detected capacity change from 0 to 256 [ 113.784567][ T6225] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.085317][ T6232] loop3: detected capacity change from 0 to 512 [ 114.187071][ T6232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 114.311442][ T6232] ext4 filesystem being mounted at /205/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.362245][ T6239] loop1: detected capacity change from 0 to 256 [ 114.376852][ T6239] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.408240][ T6239] FAT-fs (loop1): Filesystem has been set read-only [ 114.415409][ T6239] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.428407][ T6239] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 114.494147][ T6218] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 114.503606][ T6232] netlink: 'syz.3.1098': attribute type 7 has an invalid length. [ 114.640080][ T6243] bridge0: port 3(syz_tun) entered blocking state [ 114.649778][ T6243] bridge0: port 3(syz_tun) entered disabled state [ 114.656459][ T6243] syz_tun: entered allmulticast mode [ 114.664777][ T6243] syz_tun: entered promiscuous mode [ 114.670464][ T6243] bridge0: port 3(syz_tun) entered blocking state [ 114.677004][ T6243] bridge0: port 3(syz_tun) entered forwarding state [ 114.687148][ T6243] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1101'. [ 114.709837][ T6243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.724775][ T6243] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.366966][ T6273] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1114'. [ 115.426569][ T6275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.436584][ T6275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.541285][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 115.565563][ T6277] loop3: detected capacity change from 0 to 256 [ 115.610733][ T6277] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 115.621050][ T6277] FAT-fs (loop3): Filesystem has been set read-only [ 115.627809][ T6277] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 115.638422][ T6277] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 115.809403][ T6297] 9p: Bad value for 'dfltuid' [ 115.814235][ T6297] 9p: Bad value for 'dfltuid' [ 115.843125][ T6301] loop4: detected capacity change from 0 to 512 [ 115.875792][ T6301] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 115.888601][ T6301] ext4 filesystem being mounted at /214/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.049488][ T6306] netlink: 'syz.4.1128': attribute type 7 has an invalid length. [ 116.742284][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 117.368684][ T6337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.380031][ T6337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.902139][ T6353] 9p: Bad value for 'dfltuid' [ 117.911509][ T6353] 9p: Bad value for 'dfltuid' [ 118.033830][ T6359] loop3: detected capacity change from 0 to 1024 [ 118.040819][ T6359] EXT4-fs: Ignoring removed oldalloc option [ 118.046806][ T6359] EXT4-fs: Ignoring removed bh option [ 118.319886][ T6359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.524894][ T3317] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.931711][ T6390] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 119.000535][ T6393] loop1: detected capacity change from 0 to 128 [ 119.277728][ T6399] 9p: Bad value for 'dfltuid' [ 119.293962][ T6399] 9p: Bad value for 'dfltuid' [ 119.582795][ T6406] loop1: detected capacity change from 0 to 1024 [ 119.591693][ T6406] EXT4-fs: Ignoring removed oldalloc option [ 119.597774][ T6406] EXT4-fs: Ignoring removed bh option [ 119.642508][ T6406] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.554287][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.800052][ T6445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.846670][ T6445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.046028][ T6449] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 121.078220][ T6453] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1185'. [ 121.197150][ T6464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.205833][ T6464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.220715][ T6467] loop2: detected capacity change from 0 to 128 [ 121.254109][ T6469] loop4: detected capacity change from 0 to 128 [ 121.395593][ T6482] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1198'. [ 121.488211][ T6490] 9p: Bad value for 'dfltuid' [ 121.493174][ T6490] 9p: Bad value for 'dfltuid' [ 121.767703][ T6499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1205'. [ 122.196907][ T6520] loop4: detected capacity change from 0 to 128 [ 122.290473][ T6525] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1216'. [ 122.410112][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.435240][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.460808][ T6531] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1219'. [ 122.531048][ T6535] netlink: 'syz.0.1221': attribute type 10 has an invalid length. [ 122.539094][ T6535] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1221'. [ 122.619187][ T6539] loop4: detected capacity change from 0 to 1024 [ 122.627579][ T6540] netlink: 'syz.0.1221': attribute type 7 has an invalid length. [ 122.628475][ T6539] EXT4-fs: Ignoring removed oldalloc option [ 122.641842][ T6539] EXT4-fs: Ignoring removed bh option [ 122.660822][ T6539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.741216][ T6550] loop3: detected capacity change from 0 to 128 [ 123.181152][ T6556] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1228'. [ 123.217523][ T6560] 9p: Bad value for 'dfltuid' [ 123.222648][ T6560] 9p: Bad value for 'dfltuid' [ 123.305484][ T6561] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1229'. [ 123.593646][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.860079][ T6577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.880337][ T6577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.049346][ T6589] loop2: detected capacity change from 0 to 1024 [ 124.140144][ T6589] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 124.157834][ T6589] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.254471][ T6605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.271469][ T6605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.456870][ T6624] 9p: Bad value for 'dfltuid' [ 124.456887][ T6624] 9p: Bad value for 'dfltuid' [ 124.868957][ T6627] loop4: detected capacity change from 0 to 1024 [ 124.871411][ T6627] EXT4-fs: Ignoring removed oldalloc option [ 124.904390][ T6627] EXT4-fs: Ignoring removed bh option [ 124.994222][ T6627] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.028218][ T6413] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 125.109821][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 125.175199][ T6645] loop2: detected capacity change from 0 to 256 [ 125.184640][ T6647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.201137][ T6647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.280229][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.318286][ T6657] loop4: detected capacity change from 0 to 512 [ 125.363231][ T6657] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 125.378688][ T6657] ext4 filesystem being mounted at /232/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.398191][ T6657] netlink: 'syz.4.1268': attribute type 10 has an invalid length. [ 125.406754][ T6663] netlink: 'syz.2.1269': attribute type 7 has an invalid length. [ 125.467638][ T6657] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1268'. [ 125.478034][ T6668] loop2: detected capacity change from 0 to 128 [ 125.521203][ T6657] netlink: 'syz.4.1268': attribute type 7 has an invalid length. [ 126.058709][ T6695] 9p: Bad value for 'dfltuid' [ 126.063919][ T6695] 9p: Bad value for 'dfltuid' [ 126.212634][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.249431][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.533480][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 126.609282][ T6705] netlink: 444 bytes leftover after parsing attributes in process `syz.0.1286'. [ 126.618993][ T6705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'. [ 126.641158][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1286'. [ 126.828692][ T6728] loop4: detected capacity change from 0 to 512 [ 126.856646][ T6728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 126.910715][ T6728] ext4 filesystem being mounted at /236/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.964656][ T6728] netlink: 'syz.4.1296': attribute type 10 has an invalid length. [ 126.984874][ T6728] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1296'. [ 127.065411][ T6734] netlink: 'syz.4.1296': attribute type 7 has an invalid length. [ 127.485850][ T6760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1308'. [ 127.587322][ T6763] netlink: 277 bytes leftover after parsing attributes in process `syz.0.1304'. [ 127.829799][ T3315] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 128.053935][ T3000] ================================================================== [ 128.062061][ T3000] BUG: KCSAN: data-race in set_nlink / set_nlink [ 128.068418][ T3000] [ 128.070771][ T3000] read to 0xffff888107952518 of 4 bytes by task 4387 on cpu 0: [ 128.078345][ T3000] set_nlink+0x29/0xb0 [ 128.082448][ T3000] kernfs_iop_permission+0x1e2/0x220 [ 128.087811][ T3000] inode_permission+0x31f/0x3b0 [ 128.092701][ T3000] link_path_walk+0x779/0xe30 [ 128.097412][ T3000] path_openat+0x1c6/0x2050 [ 128.101938][ T3000] do_file_open+0x16c/0x290 [ 128.106564][ T3000] do_sys_openat2+0x94/0x130 [ 128.111291][ T3000] __x64_sys_openat+0xf2/0x120 [ 128.116135][ T3000] x64_sys_call+0x1e39/0x3020 [ 128.120853][ T3000] do_syscall_64+0x12c/0x370 [ 128.125475][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.131388][ T3000] [ 128.133734][ T3000] write to 0xffff888107952518 of 4 bytes by task 3000 on cpu 1: [ 128.141381][ T3000] set_nlink+0x99/0xb0 [ 128.145464][ T3000] kernfs_iop_permission+0x1e2/0x220 [ 128.150763][ T3000] inode_permission+0x31f/0x3b0 [ 128.155643][ T3000] link_path_walk+0x779/0xe30 [ 128.160344][ T3000] path_lookupat+0x8c/0x500 [ 128.164865][ T3000] filename_lookup+0x190/0x390 [ 128.169649][ T3000] vfs_statx+0x96/0x170 [ 128.173831][ T3000] vfs_fstatat+0x118/0x170 [ 128.178347][ T3000] __se_sys_newfstatat+0x55/0x3e0 [ 128.183390][ T3000] __x64_sys_newfstatat+0x55/0x70 [ 128.188438][ T3000] x64_sys_call+0x2c64/0x3020 [ 128.193143][ T3000] do_syscall_64+0x12c/0x370 [ 128.197767][ T3000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.203764][ T3000] [ 128.206107][ T3000] value changed: 0x00000009 -> 0x00000008 [ 128.211831][ T3000] [ 128.214163][ T3000] Reported by Kernel Concurrency Sanitizer on: [ 128.220426][ T3000] CPU: 1 UID: 0 PID: 3000 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 128.229385][ T3000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 128.239487][ T3000] ================================================================== [ 128.326390][ T6776] SELinux: Context ømMAh`ix: is not valid (left unmapped). [ 128.335217][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 128.335231][ T28] audit: type=1400 audit(1771200112.902:288): avc: denied { mac_admin } for pid=6774 comm="syz.2.1316" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1