last executing test programs: 650.515037ms ago: executing program 1 (id=284): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) io_uring_enter(0xffffffffffffffff, 0x212e, 0xb392, 0x20, &(0x7f0000000540)={[0x5]}, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) 601.641788ms ago: executing program 1 (id=286): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="540000000008010100000000000000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 521.03255ms ago: executing program 2 (id=291): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r2, 0x2285, 0x0) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="aefdda9d240300005a90f57f07703aeff0f64ebbee07022c2277ae11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) 493.90409ms ago: executing program 1 (id=292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="02000000010004000000000004000500a9930000100000000000000020"], 0x24, 0x0) 419.972932ms ago: executing program 3 (id=294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) add_key(&(0x7f0000000280)='rxrpc\x00', 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630b00c145f94cd977", 0x18, 0xffffffffffffffff) 419.613942ms ago: executing program 4 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xe3}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x4, './file0/file1\x00'}}) 419.386252ms ago: executing program 1 (id=296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 409.346762ms ago: executing program 2 (id=297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) 351.360823ms ago: executing program 3 (id=299): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x7606, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, 0x0}) 351.046823ms ago: executing program 4 (id=300): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001c00), 0x2, 0x0) write$selinux_access(r2, &(0x7f0000001c40)=ANY=[@ANYBLOB='system_u:object_r:dhcpc_state_t:s0 unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 0'], 0x66) 350.822773ms ago: executing program 3 (id=301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r2, &(0x7f0000000600)="6d12483bb95dab4da2bccb9a5c51f7769b4aa2ed6f00bcfff2058843f7de72fa8f9dd7572991db9f2968c67d150dbd80321f91c14a7705c3d6e2292f74d074e24cdfdc28da61b60db4ac67a81c04430dd72555dcebe8193594b8fe29718d5781fe3f418379dab48089b86edc4facdbc388e30fdfabe867722b348dcfbff8f7745bb98584b3384eb1b1c541d05427c4e5c33b3692ebf599d4a179bcd27271d55e4a38ac7be3cae3e85eddbdcf574ac462df22b6b2242245f32d5826de908a96ea66331cad4d0ff094f552e118ee643f2f12f854c32d4e548bd82a69c4102bc516a41a52436f6dfd80133de801fdc8e75276c631f041d86269f2ba0791e8119868816c1fe9c78654919d6dcce67a5f32b77575867f43f76e99108bf9ee3fd550cc18f8bee8505da7ea8fe0a3a9e40c01be1d39435821c5f52cf39a7d5558f278b01be298e5460d3ebf011345ed0030603f767fe44876fdf1cb172a4cbfb2f7784ac61c4786a147b6d446eaf46d5b26c6b85580ba4913fc12a443d8dcf05d08513ae01a7f489826fdc8bff83c1708ebbc060aa72d25e6ce21521799bd37c34fdad973fd7e17070b7783bf341fc079c6b0c9811388430c84540d8d544d1887b73e3a9d2625358be4b09128ee7f8d2dacf2d9704b9143c0341568d1e39429e1d442d21878c87271e66651e12d077b8dd49c0bf285097e261a5116b91036368265c1c5b74353bb42ff4936e27a20c48dea290685b09c2e5baa29dbeb790969f793692fb112c973329236f30bd29c39ee6104e1e0ccd1f855e5837d156c83834661a2aa8929ad78c025413179d880ee905d0b1ee1c9c3eacb63ac807a6ce73d492502ce52beba9ea5214a9387e2c5a810a96e14956809b6865e46a9d9ce2deb4cce2155562dd7e3daef9b3c0c0a55f1fe1a89835971dbc9c09ee9d4abe827b0e87dcd08e5e7cf08869cdcd6fe7f42d93c075db2fec9d96aff21410c3cbd5d904ed147af08c297011ec105dec6fb319cc5637ac71dac05d01ef356dcc6b6bd3f8625204d92f6d0447c0ee5c72d13b4e951a5ba060d4e0ab4680bba08ca9e0079ed6332e6449e01ec480903b0f377e08e8146c8a1e86df678dd88f3768e0958b04f24d58f39a15ee93e4b3e1e2dcd91f8cd36c37b2806d5f7c1871d0e1d7496ac64b377a8fb32104166536597bbfd6d814b2eb41970ba1aef50238e34ec8069690029c58c8a01b28b711ff44aed4652629c7cdc7843d83efe9514bb5b1f80d1047e6075870c53505a142e48d6897d7811f84d8c3e8f9985f9a9d01c8fd68960aee376caa465f25622d7ff5deae8f0d628e048bc4387ca3046067768f3014a3ef4d1b55123ce45507ab1b6f587f6302bb9b715899d2fc20cabfd306549b6a2ec8ea5169e5be19cf59ef71cbb16d402cdc62a422b2bf5c01bb6139e60fd61ea4b77382c7e2e038c6511bfe08f7a3cea5e793f9e2cb4facce20e719d179104418f6745bf8065c70da3815c8e1a1b650d96865c41fd45dbcae51e1d54b41002c2f673cd1008dbf3f17847dd28d8fe3c24ef238000be692e05b0365cb7691fa8f134efe70df46b5cc4765def995971ae0c45f653292f4a3c26300e359afbe0c4f7b049f505ab8e8a0d4c7090cc07c62dbcb9bf6682425553de4ca63f98ac5d420d01bf729bf815683d11451eea0295675778f00bef94ac6e29dd2285847fd857cf2d204de3170e024169d568500befd5c6f34e9d3fcae78bd8fcd6d8f85fcf56241c7787d86bdfca06a6e69b996d72530c94eaa82e99f8ccbd66b53ce0f066fffcb3b643f84a1112c4c8a153ef745f7da3c4887f95de7df8dcf6653200eccb389a7aad4a874d347791cd00cf767bdd8d36de55cbc0879e11cddec175b36be0d1224d1dab7d8f8f3bab0f622d031be123b6ab48188716162afea5e0529830a39c3c9edc86b3e6020830f2f94060685d96887fb536afaedcd9523c53e5e210e87a07bc941b29b968ec9b0f6e5a74b929ad56ef7e80b981d39460040df8aedb253bc4681e72de2b3e886320b2f9a52f675bb08e4dee27b468d0822d6269ad1eee16d1c1781ad17b1fae21b44e427ace6d1fa932ca9c295c5ae74140ffea23ac2b70a6ca71af12c6d63adc32110521cee84dce3514c51417fa794fff4fb7b72844fbb3ba786173d3ffea23e03eb49acbd957d52494ffff3cd2dc420ace19bbe375aabb97953dd1b8adc24856a81b2888e2fb635332c2d4257cf6833ccb3135c0327f79c4846b691b693b066cd5de30ca40e29fe8775fd6a8844f566223008d017ccb6f2ee47496b61aa2900f64c1e2136c8dfbb6dd7ab368e0cfeb3e639657f16d9f26f0c575b61476ea7cd499e2fffe75f6118d19d6186e9433d1b92dc30e84bceba4c9bd8e889575c50da8e236d0ad184a2ae7e91e31485a44389a7c6a63c4d7588fa0755ae292102c46df1cfcc21eccfa5bc815a2491cb845de2feae93d5a9365cff327d048b7e66733b1d1cbf1eadae7296631f3f1681ab5878272a9b17e11f64e8ea8afbd297f388b951e39b94d909c74a4c667f6204128c84566c2347222a984f67177160e3f144518721f25aab93c9d0a34d407b84485bf1f2fa07af7de0617dbda0b2eb3ef839d6ad8649fa7133e14646cb30462e827a1bba8b6cf97c93c95552c70aae8ba4918f8b51275ed7e1f90f7ae7a5313aff699f54265adad4b0608a90165c8e7df729ceb0eda12357ea37e7bbb86fc542544c93d494d4edfd098432e389666a8a93f4333e630deefa87397ece144a59fbf736aeefb7b66744954e8076e9d0534508a3631dbdcd2c15b5fd844d62409bf6c63699ac5ff0cab98d4b7f0e33e5cb20853554c895ea26607e9554d74e1511c4c476c41aa7fa717259e5048d80f1f30f07dd5397c17d818dac1849b7ccf6425fa0265edfecb58a763615dedbe98e215ce63dd1688e191a191ccdb4e939bd370f68054440296cb511b5f070fb9479bdef321b7d124506f6345ac3c2ca0ef22292d3f83ec21908de3a3c7f98cc5e086034d0b08df704382a8ee9f6129542cac7dc5fd54e71270f5ea9739b625347f3200d6f74d41106aed8fa8af5a3a6cd58a44de62af681d449a44b5", 0x898, 0x6, 0x0) mq_timedreceive(r2, &(0x7f000001d600)=""/102376, 0x18fe8, 0x0, 0x0) 334.870034ms ago: executing program 4 (id=302): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) splice(r1, 0x0, r0, 0x0, 0x25a5, 0x0) 333.017703ms ago: executing program 0 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) rt_sigqueueinfo(0x0, 0x21, 0x0) 319.178934ms ago: executing program 1 (id=304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 263.407495ms ago: executing program 3 (id=305): bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000a00000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) kexec_load(0x3e00, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 263.112655ms ago: executing program 4 (id=306): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 262.849025ms ago: executing program 0 (id=307): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r0, 0x0, 0x1034}, 0x18) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x30, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 254.451515ms ago: executing program 1 (id=308): r0 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="5902070705e3b22ccf7f"], 0xa) 245.325885ms ago: executing program 2 (id=309): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain={'key_or_keyring:', r1}) keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0) 167.332917ms ago: executing program 4 (id=310): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x11, &(0x7f0000001a80)={[{@orlov}, {@norecovery}, {@inlinecrypt}, {@resuid}]}, 0x8, 0x617, &(0x7f0000001100)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 166.850797ms ago: executing program 0 (id=311): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xfffffffeffffffff, 0x120741) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r1}, 0x18) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000780)=ANY=[]) 166.521717ms ago: executing program 3 (id=312): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x3, 0x101142) read(r2, 0x0, 0x0) 163.447646ms ago: executing program 2 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000300)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) 141.751347ms ago: executing program 0 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18) r2 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 55.357179ms ago: executing program 0 (id=315): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r1, 0x0, 0xfffffffffffffff4}, 0x18) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x5, 0x0) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x0) 55.062419ms ago: executing program 3 (id=316): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000004d00000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000380)) io_uring_enter(r1, 0x6b4d, 0x0, 0x0, 0x0, 0x0) 54.783929ms ago: executing program 2 (id=317): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 54.473359ms ago: executing program 0 (id=318): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) sync() 11.43679ms ago: executing program 2 (id=319): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400000bb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r2) 0s ago: executing program 4 (id=320): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) bind$can_raw(r1, &(0x7f0000000080), 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 34.078801][ T29] audit: type=1400 audit(1759755300.225:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.102116][ T29] audit: type=1400 audit(1759755300.245:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.103122][ T3291] cgroup: Unknown subsys name 'net' [ 34.130266][ T29] audit: type=1400 audit(1759755300.275:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.267992][ T3291] cgroup: Unknown subsys name 'cpuset' [ 34.274354][ T3291] cgroup: Unknown subsys name 'rlimit' [ 34.366135][ T29] audit: type=1400 audit(1759755300.505:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.390525][ T29] audit: type=1400 audit(1759755300.505:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.411587][ T29] audit: type=1400 audit(1759755300.505:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.432067][ T29] audit: type=1400 audit(1759755300.505:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.452406][ T29] audit: type=1400 audit(1759755300.505:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.461533][ T3293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 34.477302][ T29] audit: type=1400 audit(1759755300.505:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 34.509253][ T29] audit: type=1400 audit(1759755300.635:71): avc: denied { relabelto } for pid=3293 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 34.544974][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.304709][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 36.351924][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 36.387385][ T3306] chnl_net:caif_netlink_parms(): no params data found [ 36.427626][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.434704][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.442027][ T3302] bridge_slave_0: entered allmulticast mode [ 36.448545][ T3302] bridge_slave_0: entered promiscuous mode [ 36.473162][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.480298][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.487660][ T3302] bridge_slave_1: entered allmulticast mode [ 36.494054][ T3302] bridge_slave_1: entered promiscuous mode [ 36.507135][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 36.549650][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.556738][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.563917][ T3301] bridge_slave_0: entered allmulticast mode [ 36.570747][ T3301] bridge_slave_0: entered promiscuous mode [ 36.592783][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.601956][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.609136][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.616251][ T3306] bridge_slave_0: entered allmulticast mode [ 36.622640][ T3306] bridge_slave_0: entered promiscuous mode [ 36.629089][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 36.638684][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.645749][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.653005][ T3301] bridge_slave_1: entered allmulticast mode [ 36.659472][ T3301] bridge_slave_1: entered promiscuous mode [ 36.671117][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.680331][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.687498][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.694643][ T3306] bridge_slave_1: entered allmulticast mode [ 36.700966][ T3306] bridge_slave_1: entered promiscuous mode [ 36.750938][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.765463][ T3302] team0: Port device team_slave_0 added [ 36.772312][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.782287][ T3302] team0: Port device team_slave_1 added [ 36.789040][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.809581][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.852234][ T3301] team0: Port device team_slave_0 added [ 36.867276][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.874378][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.881659][ T3308] bridge_slave_0: entered allmulticast mode [ 36.888133][ T3308] bridge_slave_0: entered promiscuous mode [ 36.894869][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.901914][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.927838][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.939234][ T3301] team0: Port device team_slave_1 added [ 36.945197][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.952252][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.978242][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.994818][ T3306] team0: Port device team_slave_0 added [ 37.000801][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.007908][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.015118][ T3308] bridge_slave_1: entered allmulticast mode [ 37.021568][ T3308] bridge_slave_1: entered promiscuous mode [ 37.040910][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.048113][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.055284][ T3310] bridge_slave_0: entered allmulticast mode [ 37.061873][ T3310] bridge_slave_0: entered promiscuous mode [ 37.069094][ T3306] team0: Port device team_slave_1 added [ 37.074842][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.082003][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.089280][ T3310] bridge_slave_1: entered allmulticast mode [ 37.095801][ T3310] bridge_slave_1: entered promiscuous mode [ 37.113475][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.120503][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.146409][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.169349][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.180480][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.189989][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.196931][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.222950][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.260281][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.267302][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.293394][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.305251][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.314789][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.321774][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.347793][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.366399][ T3302] hsr_slave_0: entered promiscuous mode [ 37.372430][ T3302] hsr_slave_1: entered promiscuous mode [ 37.379550][ T3308] team0: Port device team_slave_0 added [ 37.386387][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.414729][ T3308] team0: Port device team_slave_1 added [ 37.439918][ T3301] hsr_slave_0: entered promiscuous mode [ 37.445951][ T3301] hsr_slave_1: entered promiscuous mode [ 37.451902][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 37.457726][ T3301] Cannot create hsr debugfs directory [ 37.469132][ T3310] team0: Port device team_slave_0 added [ 37.486987][ T3306] hsr_slave_0: entered promiscuous mode [ 37.493075][ T3306] hsr_slave_1: entered promiscuous mode [ 37.498965][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 37.504793][ T3306] Cannot create hsr debugfs directory [ 37.515866][ T3310] team0: Port device team_slave_1 added [ 37.527877][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.534930][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.560894][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.572136][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.579145][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.605615][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.649531][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.656507][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.682492][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.695918][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.702913][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.728829][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.795825][ T3308] hsr_slave_0: entered promiscuous mode [ 37.801878][ T3308] hsr_slave_1: entered promiscuous mode [ 37.807828][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 37.813558][ T3308] Cannot create hsr debugfs directory [ 37.838062][ T3310] hsr_slave_0: entered promiscuous mode [ 37.844050][ T3310] hsr_slave_1: entered promiscuous mode [ 37.850152][ T3310] debugfs: 'hsr0' already exists in 'hsr' [ 37.855889][ T3310] Cannot create hsr debugfs directory [ 37.953029][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.962341][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.977928][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.999240][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.044498][ T3306] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.059008][ T3306] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.071123][ T3306] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.080891][ T3306] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.103014][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.112539][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.121590][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.131322][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.168904][ T3310] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.196737][ T3310] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.205931][ T3310] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.215296][ T3310] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.240112][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.263388][ T3308] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.272334][ T3308] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.281199][ T3308] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.292796][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.305396][ T3308] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.320667][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.327783][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.336493][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.343619][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.356080][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.378464][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.392008][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.412192][ T2640] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.419456][ T2640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.442008][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.450156][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.457257][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.482071][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.489552][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.498574][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.505819][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.550185][ T3306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.588691][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.601347][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.613415][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.631935][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.645547][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.652713][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.670375][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.677534][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.701680][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.711751][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.728854][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.735951][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.748720][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.755813][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.802607][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.826224][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.929780][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.942106][ T3302] veth0_vlan: entered promiscuous mode [ 38.950650][ T3302] veth1_vlan: entered promiscuous mode [ 38.979935][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.010732][ T3301] veth0_vlan: entered promiscuous mode [ 39.027971][ T3306] veth0_vlan: entered promiscuous mode [ 39.040596][ T3301] veth1_vlan: entered promiscuous mode [ 39.049056][ T3306] veth1_vlan: entered promiscuous mode [ 39.069720][ T3302] veth0_macvtap: entered promiscuous mode [ 39.084084][ T3302] veth1_macvtap: entered promiscuous mode [ 39.098401][ T3306] veth0_macvtap: entered promiscuous mode [ 39.106814][ T3301] veth0_macvtap: entered promiscuous mode [ 39.117099][ T3301] veth1_macvtap: entered promiscuous mode [ 39.125957][ T3306] veth1_macvtap: entered promiscuous mode [ 39.142909][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.158613][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.165969][ T3308] veth0_vlan: entered promiscuous mode [ 39.181970][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.193541][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.200979][ T31] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.210387][ T31] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.223244][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.231721][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.240118][ T3310] veth0_vlan: entered promiscuous mode [ 39.246048][ T3308] veth1_vlan: entered promiscuous mode [ 39.252384][ T31] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.261838][ T31] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.289491][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 39.289508][ T29] audit: type=1400 audit(1759755305.435:81): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.3Bbth4/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.292454][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.295624][ T29] audit: type=1400 audit(1759755305.435:82): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.329878][ T3308] veth0_macvtap: entered promiscuous mode [ 39.351088][ T29] audit: type=1400 audit(1759755305.435:83): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.3Bbth4/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.381906][ T29] audit: type=1400 audit(1759755305.435:84): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.406556][ T29] audit: type=1400 audit(1759755305.435:85): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.3Bbth4/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.433225][ T29] audit: type=1400 audit(1759755305.435:86): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.3Bbth4/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4588 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.460593][ T29] audit: type=1400 audit(1759755305.435:87): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.480612][ T29] audit: type=1400 audit(1759755305.555:88): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.482315][ T3310] veth1_vlan: entered promiscuous mode [ 39.503411][ T29] audit: type=1400 audit(1759755305.555:89): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="gadgetfs" ino=4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.521063][ T3308] veth1_macvtap: entered promiscuous mode [ 39.538738][ T154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.547651][ T154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556544][ T154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.569718][ T154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.578417][ T3302] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.579337][ T154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.609302][ T154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.624584][ T29] audit: type=1400 audit(1759755305.755:90): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.633689][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.671106][ T154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.680935][ T3310] veth0_macvtap: entered promiscuous mode [ 39.696338][ T3310] veth1_macvtap: entered promiscuous mode [ 39.710112][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.733402][ T3440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.760242][ T3440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.781337][ T3440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.790494][ T3440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.811132][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.849055][ T3482] unsupported nla_type 52263 [ 39.857180][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.896067][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.916871][ T3486] loop4: detected capacity change from 0 to 512 [ 39.935680][ T3486] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.953461][ T3490] loop3: detected capacity change from 0 to 128 [ 39.961152][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.972145][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.996717][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.027838][ T3486] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 40.039308][ T3486] EXT4-fs (loop4): orphan cleanup on readonly fs [ 40.046605][ T3490] FAT-fs (loop3): error, corrupted file size (i_pos 548, 512) [ 40.054218][ T3490] FAT-fs (loop3): Filesystem has been set read-only [ 40.073750][ T3490] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 40.080902][ T3486] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #16: comm syz.4.9: corrupted inode contents [ 40.082038][ T3490] FAT-fs (loop3): Filesystem has been set read-only [ 40.126643][ T3486] EXT4-fs (loop4): Remounting filesystem read-only [ 40.156505][ T3486] EXT4-fs (loop4): 1 truncate cleaned up [ 40.162449][ T154] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.173033][ T154] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 40.186026][ T154] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 40.198046][ T3486] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 40.243366][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.254188][ T3508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 40.278162][ T3509] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 40.284750][ T3509] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 40.292299][ T3509] vhci_hcd vhci_hcd.0: Device attached [ 40.297533][ T3515] syz.2.19 uses obsolete (PF_INET,SOCK_PACKET) [ 40.316182][ T3512] vhci_hcd: connection closed [ 40.317046][ T31] vhci_hcd: stop threads [ 40.326145][ T31] vhci_hcd: release socket [ 40.330611][ T31] vhci_hcd: disconnect device [ 40.414160][ T3525] geneve0: entered allmulticast mode [ 40.514525][ T3534] loop0: detected capacity change from 0 to 4096 [ 40.531961][ T3540] ======================================================= [ 40.531961][ T3540] WARNING: The mand mount option has been deprecated and [ 40.531961][ T3540] and is ignored by this kernel. Remove the mand [ 40.531961][ T3540] option from the mount to silence this warning. [ 40.531961][ T3540] ======================================================= [ 40.546692][ T3534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.596752][ T3542] loop1: detected capacity change from 0 to 1024 [ 40.601539][ T3534] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.28: corrupted inode contents [ 40.606214][ T3542] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.632508][ T3534] EXT4-fs error (device loop0): ext4_dirty_inode:6509: inode #15: comm syz.0.28: mark_inode_dirty error [ 40.644466][ T3534] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.28: corrupted inode contents [ 40.644968][ T3542] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 40.664837][ T3542] System zones: 0-1, 3-36 [ 40.668066][ T3534] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.28: mark_inode_dirty error [ 40.679402][ T3542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.681201][ T3534] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.28: corrupted inode contents [ 40.705167][ T3534] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #15: comm syz.0.28: mark_inode_dirty error [ 40.718579][ T3534] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.28: corrupted inode contents [ 40.730616][ T3534] EXT4-fs error (device loop0): ext4_truncate:4637: inode #15: comm syz.0.28: mark_inode_dirty error [ 40.743422][ T3534] EXT4-fs error (device loop0) in ext4_setattr:6042: Corrupt filesystem [ 40.761655][ T3546] EXT4-fs error (device loop0): ext4_do_update_inode:5624: inode #15: comm syz.0.28: corrupted inode contents [ 40.773982][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.812449][ T3306] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 40.827988][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.839879][ T3550] loop1: detected capacity change from 0 to 164 [ 40.868439][ T3550] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 40.906391][ T3550] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 40.925349][ T3550] Symlink component flag not implemented [ 40.931108][ T3550] Symlink component flag not implemented [ 40.938092][ T3550] Symlink component flag not implemented (7) [ 40.944256][ T3550] Symlink component flag not implemented (116) [ 41.034636][ T3564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38'. [ 41.055931][ T3568] sd 0:0:1:0: device reset [ 41.080039][ T3564] netlink: 16 bytes leftover after parsing attributes in process `syz.3.38'. [ 41.214314][ T3588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.48'. [ 41.223228][ T3588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.235693][ T3588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.300207][ T3596] loop3: detected capacity change from 0 to 512 [ 41.307187][ T3596] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 41.318925][ T3596] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.332352][ T3596] EXT4-fs (loop3): 1 truncate cleaned up [ 41.338593][ T3596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.373393][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.396840][ T3601] sg_write: data in/out 8156/120 bytes for SCSI command 0x0-- guessing data in; [ 41.396840][ T3601] program syz.3.54 not setting count and/or reply_len properly [ 41.476627][ T3607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.485791][ T3607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.511906][ T3469] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 41.520496][ T3469] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 41.684385][ T3621] loop3: detected capacity change from 0 to 128 [ 41.693806][ T3621] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 41.718533][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.779726][ T3630] loop3: detected capacity change from 0 to 128 [ 41.794036][ T3630] FAT-fs (loop3): Directory bread(block 32) failed [ 41.802254][ T3630] FAT-fs (loop3): Directory bread(block 33) failed [ 41.809613][ T3630] FAT-fs (loop3): Directory bread(block 34) failed [ 41.824680][ T3630] FAT-fs (loop3): Directory bread(block 35) failed [ 41.831550][ T3630] FAT-fs (loop3): Directory bread(block 36) failed [ 41.831575][ T3630] FAT-fs (loop3): Directory bread(block 37) failed [ 41.831606][ T3630] FAT-fs (loop3): Directory bread(block 38) failed [ 41.831625][ T3630] FAT-fs (loop3): Directory bread(block 39) failed [ 41.831646][ T3630] FAT-fs (loop3): Directory bread(block 40) failed [ 41.831697][ T3630] FAT-fs (loop3): Directory bread(block 41) failed [ 41.864288][ T3630] syz.3.67: attempt to access beyond end of device [ 41.864288][ T3630] loop3: rw=0, sector=4108, nr_sectors = 4 limit=128 [ 42.151626][ T3669] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.78' sets config #1 [ 42.242308][ T3686] SELinux: policydb version 1334177339 does not match my version range 15-35 [ 42.256180][ T3686] SELinux: failed to load policy [ 42.263489][ T31] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 42.307123][ T3695] netdevsim netdevsim3: Direct firmware load for ./bus failed with error -2 [ 42.347984][ T3699] Invalid ELF header magic: != ELF [ 42.388024][ T3703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.413693][ T3703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.454144][ T3710] loop3: detected capacity change from 0 to 512 [ 42.477969][ T3710] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 42.486025][ T3710] EXT4-fs (loop3): orphan cleanup on readonly fs [ 42.492775][ T3710] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 42.507838][ T3710] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 42.515071][ T3710] EXT4-fs (loop3): 1 truncate cleaned up [ 42.521251][ T3710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.549380][ T3407] IPVS: starting estimator thread 0... [ 42.564107][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.621089][ T3723] 9pnet: p9_errstr2errno: server reported unknown error @cƒF S+žing [ 42.687296][ T154] IPVS: stop unused estimator thread 0... [ 42.733949][ T3730] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 42.966024][ T3743] netlink: 96 bytes leftover after parsing attributes in process `syz.4.107'. [ 43.083287][ T3754] loop4: detected capacity change from 0 to 512 [ 43.099209][ T3754] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 43.116319][ T3754] EXT4-fs (loop4): orphan cleanup on readonly fs [ 43.126414][ T3754] EXT4-fs warning (device loop4): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.148222][ T3754] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 43.156665][ T3754] EXT4-fs (loop4): 1 truncate cleaned up [ 43.176446][ T3754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 43.214696][ T3749] syz.2.110 (3749) used greatest stack depth: 10616 bytes left [ 43.276957][ T23] IPVS: starting estimator thread 0... [ 43.311922][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.387564][ T3768] IPVS: using max 2352 ests per chain, 117600 per kthread [ 43.509114][ T3440] IPVS: stop unused estimator thread 0... [ 43.516803][ T3780] netlink: 40 bytes leftover after parsing attributes in process `syz.4.122'. [ 43.635980][ T3792] loop2: detected capacity change from 0 to 512 [ 43.642859][ T3792] EXT4-fs: Ignoring removed nobh option [ 43.662339][ T3792] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.683525][ T3792] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 43.701520][ T3792] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.127: invalid indirect mapped block 256 (level 1) [ 43.735096][ T3799] sd 0:0:1:0: device reset [ 43.739900][ T3792] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.127: invalid indirect mapped block 2683928664 (level 1) [ 43.772850][ T3792] EXT4-fs (loop2): 1 truncate cleaned up [ 43.779763][ T3792] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.794604][ T3792] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.127: Invalid block bitmap block 3 in block_group 0 [ 43.809279][ T3792] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 43.819884][ T3792] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.127: invalid indirect mapped block 480848489 (level 1) [ 43.845259][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.928051][ T3812] loop2: detected capacity change from 0 to 128 [ 43.952407][ T3812] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 43.967461][ T3812] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 44.002242][ T3310] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 44.113409][ T3824] loop2: detected capacity change from 0 to 1024 [ 44.140628][ T3829] Driver unsupported XDP return value 0 on prog (id 101) dev N/A, expect packet loss! [ 44.159229][ T3824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.220724][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.222886][ T3760] syz.1.114 (3760) used greatest stack depth: 7224 bytes left [ 44.252576][ T3835] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 44.260440][ T3835] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 44.362997][ T3855] loop2: detected capacity change from 0 to 1024 [ 44.387096][ T3853] SELinux: ebitmap: truncated map [ 44.389310][ T3857] loop3: detected capacity change from 0 to 1024 [ 44.395475][ T3853] SELinux: failed to load policy [ 44.416126][ T3855] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.429514][ T3855] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.438282][ T3857] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.462444][ T29] kauditd_printk_skb: 227 callbacks suppressed [ 44.462461][ T29] audit: type=1326 audit(1759755310.595:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3863 comm="syz.1.159" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f601faeeec9 code=0x0 [ 44.501766][ T3866] loop4: detected capacity change from 0 to 512 [ 44.519885][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.519945][ T3866] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.160: bad orphan inode 11862016 [ 44.541733][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.541762][ T3866] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 44.541914][ T3866] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.584778][ T3866] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #19: comm syz.4.160: corrupted inode contents [ 44.587471][ T29] audit: type=1400 audit(1759755310.725:311): avc: denied { read write open } for pid=3865 comm="syz.4.160" path="/34/file1/file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.620027][ T29] audit: type=1400 audit(1759755310.725:312): avc: denied { setattr } for pid=3865 comm="syz.4.160" path="/34/file1/file1" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.642876][ T29] audit: type=1400 audit(1759755310.725:313): avc: denied { ioctl } for pid=3865 comm="syz.4.160" path="/34/file1/file1" dev="loop4" ino=18 ioctlcmd=0x6609 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 44.673222][ T29] audit: type=1326 audit(1759755310.765:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3871 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00bfbeec9 code=0x7ffc0000 [ 44.674164][ T3866] EXT4-fs error (device loop4): ext4_dirty_inode:6509: inode #19: comm syz.4.160: mark_inode_dirty error [ 44.696628][ T29] audit: type=1326 audit(1759755310.765:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3871 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7ff00bfbeec9 code=0x7ffc0000 [ 44.696665][ T29] audit: type=1326 audit(1759755310.765:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3871 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00bfbeec9 code=0x7ffc0000 [ 44.696695][ T29] audit: type=1326 audit(1759755310.775:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3873 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7ff00bff1785 code=0x7ffc0000 [ 44.767130][ T3866] EXT4-fs error (device loop4): ext4_do_update_inode:5624: inode #19: comm syz.4.160: corrupted inode contents [ 44.778329][ T29] audit: type=1326 audit(1759755310.775:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3871 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff00bfbeec9 code=0x7ffc0000 [ 44.813373][ T29] audit: type=1326 audit(1759755310.775:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3871 comm="syz.2.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7ff00bfbeec9 code=0x7ffc0000 [ 44.814772][ T3866] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2996: inode #19: comm syz.4.160: mark_inode_dirty error [ 44.853072][ T3866] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2999: inode #19: comm syz.4.160: mark inode dirty (error -117) [ 44.867057][ T3866] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 44.901780][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 44.983806][ T3895] SELinux: failed to load policy [ 45.034898][ T3902] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.175' sets config #0 [ 45.175392][ T3918] sd 0:0:1:0: device reset [ 45.188725][ T3920] @0Ų: renamed from bond_slave_1 (while UP) [ 45.226925][ T3924] sd 0:0:1:0: device reset [ 45.259132][ T3926] IPv6: Can't replace route, no match found [ 45.352771][ T3936] loop4: detected capacity change from 0 to 256 [ 45.366737][ T3936] FAT-fs (loop4): Directory bread(block 259) failed [ 45.384674][ T3936] FAT-fs (loop4): Directory bread(block 259) failed [ 45.399281][ T3936] FAT-fs (loop4): Directory bread(block 259) failed [ 45.407865][ T3936] FAT-fs (loop4): Directory bread(block 259) failed [ 45.632985][ T3961] loop4: detected capacity change from 0 to 4096 [ 45.640539][ T3961] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.653444][ T3961] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.693201][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.718663][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.726147][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.733635][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.741564][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.749297][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.756775][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.764259][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.771701][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.779293][ T3383] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.789836][ T3383] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [sy] on syz0 [ 45.832914][ T3966] fido_id[3966]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.908411][ T3970] loop4: detected capacity change from 0 to 8192 [ 46.029257][ T3976] loop4: detected capacity change from 0 to 1024 [ 46.036119][ T3976] EXT4-fs: inline encryption not supported [ 46.048683][ T3976] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.076023][ T3976] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.208: Allocating blocks 497-513 which overlap fs metadata [ 46.090514][ T3976] EXT4-fs (loop4): Remounting filesystem read-only [ 46.097935][ T3976] EXT4-fs (loop4): pa ffff88810722a540: logic 624, phys. 113, len 25 [ 46.119810][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.180635][ T3984] netlink: 48 bytes leftover after parsing attributes in process `syz.4.211'. [ 46.189572][ T3984] netlink: 48 bytes leftover after parsing attributes in process `syz.4.211'. [ 46.254565][ T3990] process 'syz.4.214' launched '/dev/fd/6' with NULL argv: empty string added [ 46.272134][ T3947] syz.0.196 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 46.286386][ T3947] CPU: 0 UID: 0 PID: 3947 Comm: syz.0.196 Not tainted syzkaller #0 PREEMPT(voluntary) [ 46.286421][ T3947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 46.286442][ T3947] Call Trace: [ 46.286449][ T3947] [ 46.286455][ T3947] __dump_stack+0x1d/0x30 [ 46.286490][ T3947] dump_stack_lvl+0xe8/0x140 [ 46.286577][ T3947] dump_stack+0x15/0x1b [ 46.286617][ T3947] dump_header+0x81/0x220 [ 46.286712][ T3947] oom_kill_process+0x342/0x400 [ 46.286763][ T3947] out_of_memory+0x979/0xb80 [ 46.286871][ T3947] try_charge_memcg+0x5e6/0x9e0 [ 46.286910][ T3947] obj_cgroup_charge_pages+0xa6/0x150 [ 46.286955][ T3947] __memcg_kmem_charge_page+0x9f/0x170 [ 46.287047][ T3947] __alloc_frozen_pages_noprof+0x188/0x360 [ 46.287100][ T3947] alloc_pages_mpol+0xb3/0x260 [ 46.287147][ T3947] alloc_pages_noprof+0x90/0x130 [ 46.287220][ T3947] __vmalloc_node_range_noprof+0x7a5/0xed0 [ 46.287264][ T3947] __kvmalloc_node_noprof+0x483/0x670 [ 46.287359][ T3947] ? ip_set_alloc+0x24/0x30 [ 46.287399][ T3947] ? ip_set_alloc+0x24/0x30 [ 46.287451][ T3947] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 46.287487][ T3947] ip_set_alloc+0x24/0x30 [ 46.287522][ T3947] hash_netiface_create+0x282/0x740 [ 46.287638][ T3947] ? __pfx_hash_netiface_create+0x10/0x10 [ 46.287708][ T3947] ip_set_create+0x3cc/0x970 [ 46.287742][ T3947] ? __nla_parse+0x40/0x60 [ 46.287766][ T3947] nfnetlink_rcv_msg+0x4c3/0x590 [ 46.287842][ T3947] netlink_rcv_skb+0x123/0x220 [ 46.287868][ T3947] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 46.287917][ T3947] nfnetlink_rcv+0x167/0x16c0 [ 46.287952][ T3947] ? kmem_cache_free+0xe4/0x3d0 [ 46.288040][ T3947] ? __kfree_skb+0x109/0x150 [ 46.288093][ T3947] ? nlmon_xmit+0x4f/0x60 [ 46.288136][ T3947] ? consume_skb+0x49/0x150 [ 46.288198][ T3947] ? nlmon_xmit+0x4f/0x60 [ 46.288235][ T3947] ? dev_hard_start_xmit+0x3b0/0x3e0 [ 46.288261][ T3947] ? __dev_queue_xmit+0x1200/0x2000 [ 46.288285][ T3947] ? __dev_queue_xmit+0x182/0x2000 [ 46.288355][ T3947] ? merge_sched_in+0x605/0xa30 [ 46.288393][ T3947] ? ref_tracker_free+0x37d/0x3e0 [ 46.288493][ T3947] ? __netlink_deliver_tap+0x4dc/0x500 [ 46.288565][ T3947] netlink_unicast+0x5c0/0x690 [ 46.288610][ T3947] netlink_sendmsg+0x58b/0x6b0 [ 46.288633][ T3947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 46.288654][ T3947] __sock_sendmsg+0x142/0x180 [ 46.288758][ T3947] ____sys_sendmsg+0x31e/0x4e0 [ 46.288781][ T3947] ___sys_sendmsg+0x17b/0x1d0 [ 46.288864][ T3947] __x64_sys_sendmsg+0xd4/0x160 [ 46.288888][ T3947] x64_sys_call+0x191e/0x3000 [ 46.288913][ T3947] do_syscall_64+0xd2/0x200 [ 46.288978][ T3947] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 46.289070][ T3947] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 46.289104][ T3947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.289130][ T3947] RIP: 0033:0x7f2a7d7deec9 [ 46.289146][ T3947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.289208][ T3947] RSP: 002b:00007f2a7c247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 46.289303][ T3947] RAX: ffffffffffffffda RBX: 00007f2a7da35fa0 RCX: 00007f2a7d7deec9 [ 46.289317][ T3947] RDX: 0000000000000800 RSI: 0000200000000040 RDI: 0000000000000004 [ 46.289331][ T3947] RBP: 00007f2a7d861f91 R08: 0000000000000000 R09: 0000000000000000 [ 46.289344][ T3947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.289358][ T3947] R13: 00007f2a7da36038 R14: 00007f2a7da35fa0 R15: 00007ffe7efd50b8 [ 46.289419][ T3947] [ 46.633318][ T3947] memory: usage 307200kB, limit 307200kB, failcnt 163 [ 46.640161][ T3947] memory+swap: usage 307376kB, limit 9007199254740988kB, failcnt 0 [ 46.648277][ T3947] kmem: usage 307192kB, limit 9007199254740988kB, failcnt 0 [ 46.655776][ T3947] Memory cgroup stats for /syz0: [ 46.661145][ T3947] cache 0 [ 46.669394][ T3947] rss 4096 [ 46.672435][ T3947] shmem 0 [ 46.675379][ T3947] mapped_file 0 [ 46.678887][ T3947] dirty 0 [ 46.681891][ T3947] writeback 0 [ 46.685191][ T3947] workingset_refault_anon 1 [ 46.689763][ T3947] workingset_refault_file 129 [ 46.694529][ T3947] swap 180224 [ 46.698079][ T3947] swapcached 8192 [ 46.701856][ T3947] pgpgin 1884 [ 46.705154][ T3947] pgpgout 1882 [ 46.708564][ T3947] pgfault 2625 [ 46.711952][ T3947] pgmajfault 6 [ 46.715344][ T3947] inactive_anon 8192 [ 46.719324][ T3947] active_anon 0 [ 46.722800][ T3947] inactive_file 0 [ 46.726456][ T3947] active_file 0 [ 46.729975][ T3947] unevictable 0 [ 46.733534][ T3947] hierarchical_memory_limit 314572800 [ 46.738967][ T3947] hierarchical_memsw_limit 9223372036854771712 [ 46.745220][ T3947] total_cache 0 [ 46.748938][ T3947] total_rss 4096 [ 46.752503][ T3947] total_shmem 0 [ 46.755986][ T3947] total_mapped_file 0 [ 46.756767][ T3996] loop4: detected capacity change from 0 to 128 [ 46.760044][ T3947] total_dirty 0 [ 46.770004][ T3947] total_writeback 0 [ 46.773823][ T3947] total_workingset_refault_anon 1 [ 46.779090][ T3947] total_workingset_refault_file 129 [ 46.784308][ T3947] total_swap 180224 [ 46.788209][ T3947] total_swapcached 8192 [ 46.792470][ T3947] total_pgpgin 1884 [ 46.796294][ T3947] total_pgpgout 1882 [ 46.800448][ T3947] total_pgfault 2625 [ 46.804351][ T3947] total_pgmajfault 6 [ 46.808308][ T3947] total_inactive_anon 8192 [ 46.812892][ T3947] total_active_anon 0 [ 46.816934][ T3947] total_inactive_file 0 [ 46.821221][ T3947] total_active_file 0 [ 46.825227][ T3947] total_unevictable 0 [ 46.829422][ T3947] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.196,pid=3946,uid=0 [ 46.844132][ T3947] Memory cgroup out of memory: Killed process 3946 (syz.0.196) total-vm:93824kB, anon-rss:1132kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 46.905181][ T4002] SELinux: failed to load policy [ 47.049893][ T4014] vhci_hcd: invalid port number 96 [ 47.055079][ T4014] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 47.129037][ T3947] syz.0.196 (3947) used greatest stack depth: 7096 bytes left [ 47.145093][ T4024] netlink: 104 bytes leftover after parsing attributes in process `syz.3.230'. [ 47.299022][ T4053] capability: warning: `syz.0.243' uses deprecated v2 capabilities in a way that may be insecure [ 47.642876][ T4088] tipc: Started in network mode [ 47.647911][ T4088] tipc: Node identity ac141413, cluster identity 4711 [ 47.671457][ T4088] tipc: New replicast peer: 10.1.1.2 [ 47.676970][ T4088] tipc: Enabled bearer , priority 10 [ 47.814368][ T4102] loop2: detected capacity change from 0 to 512 [ 47.860148][ T4102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.883896][ T4102] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 47.898157][ T4102] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.263: corrupted inode contents [ 47.911789][ T4102] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #2: comm syz.2.263: mark_inode_dirty error [ 47.923519][ T4102] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.263: corrupted inode contents [ 47.940655][ T4110] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 47.956890][ T4112] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 47.984161][ T3310] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.015281][ T4116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.022905][ T4116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.041150][ T4120] loop4: detected capacity change from 0 to 128 [ 48.047948][ T4116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.055361][ T4116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.062735][ T4120] syz.4.271: attempt to access beyond end of device [ 48.062735][ T4120] loop4: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 48.105290][ T4120] syz.4.271: attempt to access beyond end of device [ 48.105290][ T4120] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 48.118695][ T4120] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 48.144858][ T4120] syz.4.271: attempt to access beyond end of device [ 48.144858][ T4120] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 48.158274][ T4120] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 48.189600][ T4120] syz.4.271: attempt to access beyond end of device [ 48.189600][ T4120] loop4: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 48.203033][ T4120] Buffer I/O error on dev loop4, logical block 77, lost async page write [ 48.226328][ T4120] syz.4.271: attempt to access beyond end of device [ 48.226328][ T4120] loop4: rw=2049, sector=156, nr_sectors = 2 limit=128 [ 48.239757][ T4120] Buffer I/O error on dev loop4, logical block 78, lost async page write [ 48.260356][ T4120] syz.4.271: attempt to access beyond end of device [ 48.260356][ T4120] loop4: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 48.273832][ T4120] Buffer I/O error on dev loop4, logical block 79, lost async page write [ 48.282730][ T4120] syz.4.271: attempt to access beyond end of device [ 48.282730][ T4120] loop4: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 48.296632][ T4120] Buffer I/O error on dev loop4, logical block 80, lost async page write [ 48.370594][ T4138] mmap: syz.3.276 (4138) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.537776][ T4162] loop3: detected capacity change from 0 to 512 [ 48.561673][ T4162] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 48.577822][ T4162] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.281: bad orphan inode 131083 [ 48.607993][ T4162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.627597][ T4170] netlink: 'syz.1.286': attribute type 1 has an invalid length. [ 48.647528][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.677391][ T3407] tipc: Node number set to 2886997011 [ 48.717474][ T4179] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 48.717474][ T4179] program syz.2.291 not setting count and/or reply_len properly [ 48.767154][ T4187] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 48.778852][ T4189] ref_ctr_offset mismatch. inode: 0x132 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 48.889638][ T4213] netem: change failed [ 48.945388][ T4221] Zero length message leads to an empty skb [ 48.953993][ T4219] netlink: 'syz.3.305': attribute type 10 has an invalid length. [ 48.975901][ T4219] team0: Device dummy0 is up. Set it down before adding it as a team port [ 49.012144][ T4233] loop4: detected capacity change from 0 to 1024 [ 49.035726][ T4233] EXT4-fs: Ignoring removed orlov option [ 49.041486][ T4233] EXT4-fs: inline encryption not supported [ 49.049060][ T154] nci: nci_rsp_packet: unknown rsp opcode 0x902 [ 49.070587][ T4233] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869) [ 49.081294][ T4233] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 49.092645][ T4233] EXT4-fs (loop4): invalid journal inode [ 49.124349][ T4233] EXT4-fs (loop4): can't get journal size [ 49.139679][ T4233] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 49.200902][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.221798][ T2991] ================================================================== [ 49.229954][ T2991] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 49.236557][ T2991] [ 49.239229][ T2991] read-write to 0xffff8881072559c0 of 4 bytes by task 3294 on cpu 0: [ 49.247321][ T2991] dont_mount+0x2a/0x40 [ 49.251504][ T2991] vfs_unlink+0x28f/0x420 [ 49.255843][ T2991] do_unlinkat+0x24e/0x480 [ 49.260291][ T2991] __x64_sys_unlink+0x2e/0x40 [ 49.264996][ T2991] x64_sys_call+0x2dcf/0x3000 [ 49.269680][ T2991] do_syscall_64+0xd2/0x200 [ 49.274199][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.280103][ T2991] [ 49.282434][ T2991] read to 0xffff8881072559c0 of 4 bytes by task 2991 on cpu 1: [ 49.289981][ T2991] lookup_fast+0xf0/0x320 [ 49.294339][ T2991] walk_component+0x3f/0x220 [ 49.298955][ T2991] path_lookupat+0xfe/0x2a0 [ 49.303908][ T2991] filename_lookup+0x147/0x340 [ 49.308691][ T2991] do_readlinkat+0x7d/0x320 [ 49.313197][ T2991] __x64_sys_readlink+0x47/0x60 [ 49.318070][ T2991] x64_sys_call+0x28de/0x3000 [ 49.322754][ T2991] do_syscall_64+0xd2/0x200 [ 49.327274][ T2991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.333185][ T2991] [ 49.335502][ T2991] value changed: 0x00300080 -> 0x00000080 [ 49.341211][ T2991] [ 49.343532][ T2991] Reported by Kernel Concurrency Sanitizer on: [ 49.349700][ T2991] CPU: 1 UID: 0 PID: 2991 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 49.358990][ T2991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 49.369144][ T2991] ==================================================================