last executing test programs: 11.003155807s ago: executing program 3 (id=195): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair(0x1, 0x80000, 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28031, 0xffffffffffffffff, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$setown(r0, 0x8, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCFLSH(r5, 0x400455c8, 0x0) r6 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)) 8.768778562s ago: executing program 3 (id=200): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 7.594861201s ago: executing program 3 (id=208): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000300)='\x00', 0x1, 0xc091, 0x0, 0xfffffce1) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 7.503478932s ago: executing program 3 (id=211): pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$selinux_access(r1, &(0x7f00000004c0)={'system_u:object_r:init_exec_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x9}, 0x54) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff79, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x75, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000918110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) close(r4) r6 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r6, 0x400, 0x1) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 6.890161292s ago: executing program 0 (id=216): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(r2) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, 0x0, 0x0) sendto$packet(r9, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r11 = fsmount(r3, 0x0, 0x0) fchdir(r11) close_range(r1, 0xffffffffffffffff, 0x0) 5.949046597s ago: executing program 3 (id=220): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x48, 0x101, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0xb}]}, 0x38}}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$BTRFS_IOC_QGROUP_LIMIT(0xffffffffffffffff, 0x8030942b, &(0x7f00000000c0)={0x2, {0x20, 0x6, 0x5, 0x1, 0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x8, 0x1}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x1}, 0x8) unshare(0x22020600) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x18) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) syz_socket_connect_nvme_tcp() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 5.569228153s ago: executing program 0 (id=222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 4.49697382s ago: executing program 0 (id=226): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x200c0800) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_disconnect(r5) syz_usb_ep_read(r5, 0x3, 0xa6, &(0x7f0000000640)=""/166) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r3, 0x0) 4.354124631s ago: executing program 4 (id=228): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(r2) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, 0x0, 0x0) sendto$packet(r9, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 3.21911833s ago: executing program 2 (id=230): bpf$MAP_CREATE(0x0, 0x0, 0x48) openat(0xffffffffffffffff, 0x0, 0x40, 0x0) socket$tipc(0x1e, 0x5, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socket(0x840000000002, 0x3, 0xff) syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 3.21818801s ago: executing program 2 (id=231): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 2.53631654s ago: executing program 4 (id=232): r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044002) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r6, 0x0, 0xbe, 0x57, &(0x7f0000000280)="a8d450069bbb573475432a870ca54ce4e8b32494d9a2e8acf13b9d148acde0ddadb5f5b084107a7a0ba77d997666b68ff4ec2ddb6f6a19a588681d217c9bb3548dcd6b986f032c0bd08a76632125e42120e055f4ce4a75a64c86c3f05033f16d85cda4babcebc4f6aa8ddf572e23deb95c19af9c22e343f32385e8a6d046f6298f099d184943ea83025b75809e721e750851711400e6fdcc8cd6190cf61f167f9bfbb81563405e78636c6f1ba0f90730073a92fe9452b1ad91752521d0be", &(0x7f00000003c0)=""/87, 0x6, 0x0, 0xa1, 0x0, &(0x7f0000000540)="db9e17870dcef4dad21fc56febae5bb03eb7c56d0ebbf17bd37c3cb37a4c9a164993275e0b88dd626ff9c306699c02a45feca58e2917d81dd4dc16a5924d658298ccfe31bff88709aec815f94da0773f7db7e96c43813de116d7d071be2fe861e9622ee574bb6cb34089408a1992df844873c0180e60817c0816c940887edba8ff3ea3e81af1b8e228fa0d2d0660f8655ac57b15f635839fad1d366050fe71f7eb", &(0x7f0000000680), 0x4, 0x0, 0x8}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.472120081s ago: executing program 2 (id=234): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) 2.429784172s ago: executing program 4 (id=235): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 2.429310122s ago: executing program 2 (id=236): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 2.401466662s ago: executing program 1 (id=238): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fdatasync(r2) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r4, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r9, 0x107, 0xf, 0x0, 0x0) sendto$packet(r9, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x8) close_range(r1, 0xffffffffffffffff, 0x0) 1.675024764s ago: executing program 0 (id=239): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffc}}}}}}, 0x0) 1.413041338s ago: executing program 0 (id=240): gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000005000000090000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) 1.407657908s ago: executing program 4 (id=241): syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000100)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f000046c000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r3, 0x53ef0000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000008020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x28) 1.362543048s ago: executing program 2 (id=242): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = syz_clone(0x48411, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) wait4(r1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r3}, 0x10) setreuid(0xee01, 0x0) ioprio_get$uid(0x3, 0xee01) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0)=r0, 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='kvm_dirty_ring_push\x00', r5, 0x0, 0x4}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.337914129s ago: executing program 3 (id=243): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000040000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000f8ffffffb703000008000000b7040000000000008500003ae7f089000300000095000000d27d6d960ecff1e9f36de8034c1c4591ca92a7a957c4a46f7ef6665fd2e9b5e7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000007c0)='ext4\x00', &(0x7f00000006c0)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f0000000080), &(0x7f0000000700)=r1}, 0x20) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0/file0\x00') setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendfile(r2, r2, 0x0, 0xe3aa6ea) 1.28202093s ago: executing program 1 (id=244): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) getpgid(0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000006c0)={0x70, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback, 0x40}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0x11, 0x1, @l2={'eth', 0x3a, 'ip6_vti0\x00'}}]}]}, 0x70}}, 0x0) 1.213698671s ago: executing program 1 (id=245): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 1.146487932s ago: executing program 1 (id=246): r0 = socket$inet6(0xa, 0x2, 0x0) shutdown(r0, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044002) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r6, 0x0, 0xbe, 0x57, &(0x7f0000000280)="a8d450069bbb573475432a870ca54ce4e8b32494d9a2e8acf13b9d148acde0ddadb5f5b084107a7a0ba77d997666b68ff4ec2ddb6f6a19a588681d217c9bb3548dcd6b986f032c0bd08a76632125e42120e055f4ce4a75a64c86c3f05033f16d85cda4babcebc4f6aa8ddf572e23deb95c19af9c22e343f32385e8a6d046f6298f099d184943ea83025b75809e721e750851711400e6fdcc8cd6190cf61f167f9bfbb81563405e78636c6f1ba0f90730073a92fe9452b1ad91752521d0be", &(0x7f00000003c0)=""/87, 0x6, 0x0, 0xa1, 0x0, &(0x7f0000000540)="db9e17870dcef4dad21fc56febae5bb03eb7c56d0ebbf17bd37c3cb37a4c9a164993275e0b88dd626ff9c306699c02a45feca58e2917d81dd4dc16a5924d658298ccfe31bff88709aec815f94da0773f7db7e96c43813de116d7d071be2fe861e9622ee574bb6cb34089408a1992df844873c0180e60817c0816c940887edba8ff3ea3e81af1b8e228fa0d2d0660f8655ac57b15f635839fad1d366050fe71f7eb", &(0x7f0000000680), 0x4, 0x0, 0x8}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1.070750103s ago: executing program 1 (id=247): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x22004001, 0x0, 0x0) 1.046774743s ago: executing program 1 (id=248): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, &(0x7f00000000c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sendfile(r1, r0, 0x0, 0x7ffff000) 340.431885ms ago: executing program 2 (id=249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, &(0x7f00000000c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000400)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendfile(r3, r2, 0x0, 0x7ffff000) 290.748055ms ago: executing program 0 (id=250): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xa}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x200c0800) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r5 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_disconnect(r5) syz_usb_ep_read(r5, 0x3, 0xa6, &(0x7f0000000640)=""/166) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r3, 0x0) 146.395348ms ago: executing program 4 (id=251): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r1, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0xfffc}}}}}}, 0x0) 0s ago: executing program 4 (id=252): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000300)='\x00', 0x1, 0xc091, 0x0, 0xfffffce1) recvfrom$inet(r0, 0x0, 0x0, 0xc9100120, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 26.520205][ T29] audit: type=1400 audit(1751814218.218:62): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 26.521232][ T3293] cgroup: Unknown subsys name 'net' [ 26.542927][ T29] audit: type=1400 audit(1751814218.218:63): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.570301][ T29] audit: type=1400 audit(1751814218.248:64): avc: denied { unmount } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 26.686777][ T3293] cgroup: Unknown subsys name 'cpuset' [ 26.692937][ T3293] cgroup: Unknown subsys name 'rlimit' [ 26.804074][ T29] audit: type=1400 audit(1751814218.498:65): avc: denied { setattr } for pid=3293 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 26.827358][ T29] audit: type=1400 audit(1751814218.498:66): avc: denied { create } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.847804][ T29] audit: type=1400 audit(1751814218.498:67): avc: denied { write } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.868157][ T29] audit: type=1400 audit(1751814218.498:68): avc: denied { read } for pid=3293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 26.888513][ T29] audit: type=1400 audit(1751814218.508:69): avc: denied { mounton } for pid=3293 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 26.896966][ T3297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 26.913576][ T29] audit: type=1400 audit(1751814218.508:70): avc: denied { mount } for pid=3293 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 26.945489][ T29] audit: type=1400 audit(1751814218.628:71): avc: denied { relabelto } for pid=3297 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.981394][ T3293] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.918070][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 28.948923][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 28.964647][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 29.005512][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 29.023259][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 29.050937][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.058058][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.065291][ T3304] bridge_slave_0: entered allmulticast mode [ 29.071883][ T3304] bridge_slave_0: entered promiscuous mode [ 29.080644][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.087844][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.094913][ T3304] bridge_slave_1: entered allmulticast mode [ 29.101489][ T3304] bridge_slave_1: entered promiscuous mode [ 29.133928][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.141146][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.148298][ T3314] bridge_slave_0: entered allmulticast mode [ 29.154585][ T3314] bridge_slave_0: entered promiscuous mode [ 29.161289][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.168361][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.175511][ T3314] bridge_slave_1: entered allmulticast mode [ 29.181926][ T3314] bridge_slave_1: entered promiscuous mode [ 29.213625][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.232514][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.244727][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.258711][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.265775][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.272985][ T3305] bridge_slave_0: entered allmulticast mode [ 29.279550][ T3305] bridge_slave_0: entered promiscuous mode [ 29.286416][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.293565][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.300709][ T3305] bridge_slave_1: entered allmulticast mode [ 29.307178][ T3305] bridge_slave_1: entered promiscuous mode [ 29.318361][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.349670][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.356745][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.363873][ T3312] bridge_slave_0: entered allmulticast mode [ 29.370295][ T3312] bridge_slave_0: entered promiscuous mode [ 29.381873][ T3314] team0: Port device team_slave_0 added [ 29.397252][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.404331][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.411632][ T3312] bridge_slave_1: entered allmulticast mode [ 29.418110][ T3312] bridge_slave_1: entered promiscuous mode [ 29.424214][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.431287][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.438564][ T3309] bridge_slave_0: entered allmulticast mode [ 29.445469][ T3309] bridge_slave_0: entered promiscuous mode [ 29.452368][ T3314] team0: Port device team_slave_1 added [ 29.459162][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.469287][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.478956][ T3304] team0: Port device team_slave_0 added [ 29.497924][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.504969][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.512171][ T3309] bridge_slave_1: entered allmulticast mode [ 29.518508][ T3309] bridge_slave_1: entered promiscuous mode [ 29.534848][ T3304] team0: Port device team_slave_1 added [ 29.545413][ T3305] team0: Port device team_slave_0 added [ 29.552118][ T3305] team0: Port device team_slave_1 added [ 29.567379][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.574370][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.600297][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.620968][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.640395][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.647378][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.673344][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.684264][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.691317][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.717255][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.729045][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.738413][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.745429][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.771405][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.782492][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.789525][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.815446][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.829964][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.840624][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.852425][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.859478][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.885503][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.924326][ T3312] team0: Port device team_slave_0 added [ 29.937154][ T3305] hsr_slave_0: entered promiscuous mode [ 29.943151][ T3305] hsr_slave_1: entered promiscuous mode [ 29.954796][ T3309] team0: Port device team_slave_0 added [ 29.961560][ T3312] team0: Port device team_slave_1 added [ 29.982039][ T3309] team0: Port device team_slave_1 added [ 29.999016][ T3314] hsr_slave_0: entered promiscuous mode [ 30.004948][ T3314] hsr_slave_1: entered promiscuous mode [ 30.010729][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.018419][ T3314] Cannot create hsr debugfs directory [ 30.025757][ T3304] hsr_slave_0: entered promiscuous mode [ 30.031996][ T3304] hsr_slave_1: entered promiscuous mode [ 30.037913][ T3304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.045460][ T3304] Cannot create hsr debugfs directory [ 30.081019][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.088053][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.114170][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.125235][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.132276][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.158322][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.188283][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.195305][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.221331][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.232261][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.239282][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.265270][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.325769][ T3312] hsr_slave_0: entered promiscuous mode [ 30.331811][ T3312] hsr_slave_1: entered promiscuous mode [ 30.337901][ T3312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.345504][ T3312] Cannot create hsr debugfs directory [ 30.383407][ T3309] hsr_slave_0: entered promiscuous mode [ 30.389497][ T3309] hsr_slave_1: entered promiscuous mode [ 30.395366][ T3309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.403054][ T3309] Cannot create hsr debugfs directory [ 30.483955][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.499102][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.509591][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.522646][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.545891][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.557506][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.566136][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.574928][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.631725][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.645505][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.655883][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.674323][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.685754][ T3312] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.694770][ T3312] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.714478][ T3312] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.723347][ T3312] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.733716][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.754049][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.771263][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.778399][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.795473][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.802590][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.813375][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.829652][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.838678][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.847851][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.863716][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.908803][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.917280][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.950770][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.960259][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.969759][ T394] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.976832][ T394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.985282][ T394] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.992402][ T394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.012269][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.031923][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.040306][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.057588][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.064663][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.073400][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.080466][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.089247][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.096375][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.112113][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.119197][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.132326][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.147578][ T394] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.154684][ T394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.170662][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.182313][ T394] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.189492][ T394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.204207][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.221799][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.251998][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.268191][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.278654][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.375337][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.397080][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.409518][ T3314] veth0_vlan: entered promiscuous mode [ 31.444274][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.456163][ T3314] veth1_vlan: entered promiscuous mode [ 31.473096][ T3304] veth0_vlan: entered promiscuous mode [ 31.496887][ T3314] veth0_macvtap: entered promiscuous mode [ 31.506872][ T3304] veth1_vlan: entered promiscuous mode [ 31.513774][ T3314] veth1_macvtap: entered promiscuous mode [ 31.551526][ T3312] veth0_vlan: entered promiscuous mode [ 31.563842][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.580008][ T3304] veth0_macvtap: entered promiscuous mode [ 31.594213][ T3312] veth1_vlan: entered promiscuous mode [ 31.606584][ T3304] veth1_macvtap: entered promiscuous mode [ 31.616673][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.630668][ T3305] veth0_vlan: entered promiscuous mode [ 31.642806][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.651667][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.660428][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.669163][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.677880][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.693368][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.701887][ T3309] veth0_vlan: entered promiscuous mode [ 31.712050][ T3305] veth1_vlan: entered promiscuous mode [ 31.723053][ T3309] veth1_vlan: entered promiscuous mode [ 31.730482][ T3304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.739328][ T3304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.748112][ T3304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.756965][ T3304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.774438][ T3312] veth0_macvtap: entered promiscuous mode [ 31.776800][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 31.776816][ T29] audit: type=1400 audit(1751814223.478:81): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.Zfz80z/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 31.785267][ T3305] veth0_macvtap: entered promiscuous mode [ 31.793537][ T29] audit: type=1400 audit(1751814223.488:82): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 31.838074][ T29] audit: type=1400 audit(1751814223.488:83): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.Zfz80z/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 31.863399][ T29] audit: type=1400 audit(1751814223.488:84): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 31.885354][ T29] audit: type=1400 audit(1751814223.488:85): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.Zfz80z/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 31.912005][ T29] audit: type=1400 audit(1751814223.488:86): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/root/syzkaller.Zfz80z/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 31.939408][ T29] audit: type=1400 audit(1751814223.488:87): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.960067][ T29] audit: type=1400 audit(1751814223.518:88): avc: denied { mounton } for pid=3314 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.973713][ T3309] veth0_macvtap: entered promiscuous mode [ 31.982824][ T29] audit: type=1400 audit(1751814223.518:89): avc: denied { mount } for pid=3314 comm="syz-executor" name="/" dev="gadgetfs" ino=3727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 31.994489][ T3309] veth1_macvtap: entered promiscuous mode [ 32.020986][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.029950][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.044266][ T3312] veth1_macvtap: entered promiscuous mode [ 32.053466][ T3305] veth1_macvtap: entered promiscuous mode [ 32.063959][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.077285][ T29] audit: type=1400 audit(1751814223.768:90): avc: denied { read write } for pid=3314 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.106270][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.113817][ T3473] loop0: detected capacity change from 0 to 128 [ 32.119968][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.130353][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.136688][ T3473] ======================================================= [ 32.136688][ T3473] WARNING: The mand mount option has been deprecated and [ 32.136688][ T3473] and is ignored by this kernel. Remove the mand [ 32.136688][ T3473] option from the mount to silence this warning. [ 32.136688][ T3473] ======================================================= [ 32.139223][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.182782][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.191621][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.205041][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.212927][ T3305] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.221738][ T3305] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.230542][ T3305] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.239371][ T3305] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.258430][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.283092][ T3312] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.291869][ T3312] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.300612][ T3312] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.309382][ T3312] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.422335][ T3486] loop3: detected capacity change from 0 to 1024 [ 32.480296][ T3486] EXT4-fs: Ignoring removed orlov option [ 32.492019][ T3487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 32.622391][ T3486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.771363][ T3497] loop1: detected capacity change from 0 to 1024 [ 32.778610][ T3497] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.857390][ T3497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.424267][ T3503] loop2: detected capacity change from 0 to 8192 [ 33.516765][ T3513] loop4: detected capacity change from 0 to 1024 [ 33.686357][ T3503] vfat: Unknown parameter 'P' [ 34.375783][ T3513] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 34.385590][ T3513] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 34.395293][ T3513] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 34.409655][ T3513] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.7: unexpected bad inode w/o EXT4_IGET_BAD [ 34.727138][ T3513] EXT4-fs (loop4): no journal found [ 34.732385][ T3513] EXT4-fs (loop4): can't get journal size [ 35.377102][ T3513] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 35.402819][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.765420][ T3500] syz.2.6 (3500) used greatest stack depth: 10872 bytes left [ 35.882884][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.901217][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.930928][ T3527] loop4: detected capacity change from 0 to 1024 [ 35.953059][ T3529] loop3: detected capacity change from 0 to 1024 [ 35.979105][ T3527] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.991737][ T3527] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.000056][ T3534] loop2: detected capacity change from 0 to 1024 [ 36.011077][ T3534] EXT4-fs: Ignoring removed orlov option [ 36.094894][ T3544] loop0: detected capacity change from 0 to 1024 [ 36.112715][ T3534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.138885][ T3544] EXT4-fs: Ignoring removed orlov option [ 36.159783][ T3544] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.171215][ T3529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.195453][ T3529] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.978793][ T12] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 15) [ 37.047624][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 37.060142][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 37.060142][ T12] [ 37.070347][ T37] EXT4-fs error (device loop3): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 15) [ 37.073285][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.097239][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 37.109707][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 37.109707][ T37] [ 37.131004][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.141084][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.170122][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.207518][ T3563] loop4: detected capacity change from 0 to 1024 [ 37.242843][ T3563] EXT4-fs: Ignoring removed orlov option [ 37.265341][ T3565] loop1: detected capacity change from 0 to 2048 [ 37.278237][ T3563] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.326330][ T3565] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.409534][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 37.409550][ T29] audit: type=1400 audit(1751814229.108:131): avc: denied { mounton } for pid=3573 comm="syz.3.19" path="/3/file0" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 37.518487][ T29] audit: type=1400 audit(1751814229.218:132): avc: denied { remove_name } for pid=3564 comm="syz.1.18" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.541032][ T29] audit: type=1400 audit(1751814229.218:133): avc: denied { rename } for pid=3564 comm="syz.1.18" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 37.617527][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.680299][ T3584] loop0: detected capacity change from 0 to 1024 [ 37.727310][ T3584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.739624][ T3587] loop3: detected capacity change from 0 to 1024 [ 37.740071][ T3584] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.765675][ T3587] EXT4-fs: Ignoring removed orlov option [ 37.790677][ T3587] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.464494][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.617987][ T394] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 15) [ 38.673086][ T29] audit: type=1400 audit(1751814230.368:134): avc: denied { checkpoint_restore } for pid=3600 comm="syz.4.25" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 39.166861][ T394] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 39.179407][ T394] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.179407][ T394] [ 39.194050][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.246896][ T29] audit: type=1400 audit(1751814230.948:135): avc: denied { relabelfrom } for pid=3609 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 39.267061][ T29] audit: type=1400 audit(1751814230.948:136): avc: denied { relabelto } for pid=3609 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 39.287959][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.484977][ T29] audit: type=1400 audit(1751814231.178:137): avc: denied { write } for pid=3619 comm="syz.4.32" name="igmp" dev="proc" ino=4026532414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 39.507802][ T3623] loop2: detected capacity change from 0 to 1024 [ 39.534275][ T3623] EXT4-fs: Ignoring removed orlov option [ 39.717607][ T3623] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.399444][ T3635] loop1: detected capacity change from 0 to 1024 [ 40.551907][ T3635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.585335][ T3641] loop4: detected capacity change from 0 to 1024 [ 40.595135][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.605199][ T3635] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.626953][ T3641] EXT4-fs: Ignoring removed orlov option [ 40.660385][ T3641] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.913992][ T3650] loop0: detected capacity change from 0 to 512 [ 40.923089][ T3650] EXT4-fs: Ignoring removed bh option [ 41.202878][ T3650] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.216078][ T3650] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 41.356319][ T37] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 15) [ 41.371625][ T37] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 41.384065][ T3650] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 41.385533][ T3650] EXT4-fs (loop0): 1 truncate cleaned up [ 41.397262][ T37] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.397262][ T37] [ 41.417153][ T3650] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.432072][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.496197][ T29] audit: type=1400 audit(1751814233.178:138): avc: denied { create } for pid=3658 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.516446][ T29] audit: type=1400 audit(1751814233.178:139): avc: denied { write } for pid=3658 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.536677][ T29] audit: type=1400 audit(1751814233.178:140): avc: denied { read } for pid=3658 comm="syz.1.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.603108][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.660558][ T3661] loop4: detected capacity change from 0 to 1024 [ 41.685242][ T3661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.724057][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.734278][ T3661] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.481809][ T29] audit: type=1400 audit(1751814234.178:141): avc: denied { read write } for pid=3658 comm="syz.1.39" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.485225][ T3659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.505119][ T29] audit: type=1400 audit(1751814234.178:142): avc: denied { open } for pid=3658 comm="syz.1.39" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.513669][ T3659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.545162][ T29] audit: type=1400 audit(1751814234.178:143): avc: denied { ioctl } for pid=3658 comm="syz.1.39" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.661922][ T3679] loop3: detected capacity change from 0 to 1024 [ 42.669204][ T3679] EXT4-fs: Ignoring removed nomblk_io_submit option [ 42.680575][ T3670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.690426][ T394] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 15) [ 42.713961][ T3679] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.746476][ T3670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.810685][ T394] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 42.823109][ T394] EXT4-fs (loop4): This should not happen!! Data will be lost [ 42.823109][ T394] [ 42.923809][ T3683] tipc: Started in network mode [ 42.928804][ T3683] tipc: Node identity 7f000001, cluster identity 4711 [ 42.966863][ T3683] tipc: Enabled bearer , priority 10 [ 42.992853][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.251841][ T3685] tipc: Enabled bearer , priority 10 [ 43.542231][ T29] audit: type=1400 audit(1751814235.238:144): avc: denied { create } for pid=3686 comm="syz.4.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 43.561597][ T29] audit: type=1400 audit(1751814235.238:145): avc: denied { execute } for pid=3686 comm="syz.4.44" name="file0" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.885267][ T3691] loop1: detected capacity change from 0 to 1024 [ 43.917289][ T3691] EXT4-fs: Ignoring removed orlov option [ 43.966527][ T3691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.140275][ T3689] process 'syz.4.44' launched './file0' with NULL argv: empty string added [ 44.162900][ T29] audit: type=1400 audit(1751814235.858:146): avc: denied { execute_no_trans } for pid=3686 comm="syz.4.44" path="/8/file0" dev="tmpfs" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.225838][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.312302][ T3698] loop3: detected capacity change from 0 to 1024 [ 44.325132][ T3700] loop4: detected capacity change from 0 to 1024 [ 44.342478][ T3698] EXT4-fs: Ignoring removed orlov option [ 44.372380][ T3700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.391533][ T2959] tipc: Node number set to 2130706433 [ 44.405618][ T3698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.427256][ T3700] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.514070][ T29] audit: type=1400 audit(1751814236.188:147): avc: denied { read } for pid=3692 comm="syz.0.47" dev="nsfs" ino=4026532637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.536075][ T29] audit: type=1400 audit(1751814236.188:148): avc: denied { open } for pid=3692 comm="syz.0.47" path="net:[4026532637]" dev="nsfs" ino=4026532637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.583542][ T3707] loop2: detected capacity change from 0 to 1024 [ 44.714845][ T3707] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.902352][ T3707] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.348025][ T12] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 15) [ 45.621452][ T12] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 45.633893][ T12] EXT4-fs (loop4): This should not happen!! Data will be lost [ 45.633893][ T12] [ 45.689213][ T3695] syz.1.46 (3695) used greatest stack depth: 10784 bytes left [ 45.689970][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.707362][ T3443] EXT4-fs error (device loop2): ext4_map_blocks:816: inode #15: block 1: comm kworker/u8:7: lblock 1 mapped to illegal pblock 1 (length 15) [ 45.729860][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.740842][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.751566][ T3443] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 15 with error 117 [ 45.764103][ T3443] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.764103][ T3443] [ 45.832352][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.854423][ T3720] loop3: detected capacity change from 0 to 1024 [ 45.894273][ T3720] EXT4-fs: Ignoring removed i_version option [ 45.967422][ T3720] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 46.020889][ T3720] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.54: Invalid block bitmap block 0 in block_group 0 [ 46.035925][ T3720] Quota error (device loop3): write_blk: dquota write failed [ 46.043328][ T3720] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 46.055915][ T3720] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.54: Failed to acquire dquot type 0 [ 46.097172][ T3720] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.54: Freeing blocks not in datazone - block = 0, count = 4096 [ 46.121581][ T3720] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.54: Invalid inode bitmap blk 0 in block_group 0 [ 46.139627][ T394] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 46.177271][ T3727] loop2: detected capacity change from 0 to 512 [ 46.184917][ T3727] EXT4-fs: Ignoring removed bh option [ 46.191155][ T3720] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 46.200697][ T3727] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 46.232064][ T3727] EXT4-fs (loop2): 1 truncate cleaned up [ 46.239361][ T3720] EXT4-fs (loop3): 1 orphan inode deleted [ 46.248885][ T3727] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.263783][ T3720] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.324547][ T3720] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.54: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 46.364355][ T3731] loop0: detected capacity change from 0 to 1024 [ 46.371572][ T3731] EXT4-fs: Ignoring removed orlov option [ 46.380654][ T3731] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.990953][ T3720] syz.3.54 (3720) used greatest stack depth: 9336 bytes left [ 47.045662][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.055280][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.065928][ T12] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 47.081189][ T3737] tipc: Started in network mode [ 47.086406][ T3737] tipc: Node identity 7f000001, cluster identity 4711 [ 47.101651][ T3737] tipc: Enabled bearer , priority 10 [ 47.200782][ T3743] tipc: Enabling of bearer rejected, already enabled [ 47.401615][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.419072][ T3746] tipc: Enabled bearer , priority 10 [ 47.554108][ T3756] loop0: detected capacity change from 0 to 1024 [ 47.561056][ T3756] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.588604][ T3756] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.694865][ T3760] netlink: 28 bytes leftover after parsing attributes in process `syz.2.63'. [ 47.731047][ T3739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.743604][ T3739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.465875][ T36] tipc: Node number set to 2130706433 [ 48.927929][ T3767] loop2: detected capacity change from 0 to 1024 [ 48.944690][ T3767] EXT4-fs: Ignoring removed orlov option [ 48.970803][ T3767] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.075005][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 49.075019][ T29] audit: type=1400 audit(1751814240.768:150): avc: denied { firmware_load } for pid=3763 comm="syz.1.65" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 49.188099][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.256058][ T3777] tipc: Started in network mode [ 49.260972][ T3777] tipc: Node identity 7f000001, cluster identity 4711 [ 49.320871][ T3777] tipc: Enabled bearer , priority 10 [ 49.813959][ T3777] tipc: Enabled bearer , priority 10 [ 50.158634][ T3789] loop0: detected capacity change from 0 to 128 [ 50.183951][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.201659][ T29] audit: type=1400 audit(1751814241.898:151): avc: denied { create } for pid=3790 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.230070][ T29] audit: type=1400 audit(1751814241.928:152): avc: denied { write } for pid=3790 comm="syz.1.74" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.327377][ T3791] loop4: detected capacity change from 0 to 512 [ 50.339113][ T3791] EXT4-fs: Ignoring removed bh option [ 50.350225][ T3791] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.420867][ T3791] EXT4-fs (loop4): 1 truncate cleaned up [ 51.006687][ T3791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.044498][ T3805] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 51.174319][ T3394] tipc: Node number set to 2130706433 [ 51.527278][ T3817] loop1: detected capacity change from 0 to 1024 [ 51.579436][ T3817] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 51.589233][ T3817] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 51.598919][ T3817] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 51.612458][ T3817] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #5: comm syz.1.76: unexpected bad inode w/o EXT4_IGET_BAD [ 51.729910][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.739218][ T3817] EXT4-fs (loop1): no journal found [ 51.744420][ T3817] EXT4-fs (loop1): can't get journal size [ 51.752164][ T3817] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 51.930301][ T29] audit: type=1400 audit(1751814243.628:153): avc: denied { ioctl } for pid=3820 comm="syz.2.80" path="socket:[4931]" dev="sockfs" ino=4931 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.249722][ T3823] loop4: detected capacity change from 0 to 1024 [ 52.290023][ T3823] EXT4-fs: Ignoring removed i_version option [ 52.326308][ T3823] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 52.345889][ T29] audit: type=1400 audit(1751814243.658:154): avc: denied { write } for pid=3820 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.365379][ T29] audit: type=1400 audit(1751814243.658:155): avc: denied { bind } for pid=3820 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 52.415868][ T3823] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.79: Invalid block bitmap block 0 in block_group 0 [ 52.431040][ T3824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 52.468652][ T3823] Quota error (device loop4): write_blk: dquota write failed [ 52.476184][ T3823] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 52.540519][ T3823] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.79: Failed to acquire dquot type 0 [ 52.589935][ T3823] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.79: Freeing blocks not in datazone - block = 0, count = 4096 [ 52.662772][ T3823] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.79: Invalid inode bitmap blk 0 in block_group 0 [ 52.696040][ T12] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-7 [ 52.705039][ T12] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 52.729506][ T3823] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 52.773952][ T3823] EXT4-fs (loop4): 1 orphan inode deleted [ 52.790390][ T3823] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.841729][ T3838] loop3: detected capacity change from 0 to 1024 [ 52.862428][ T3823] EXT4-fs error (device loop4): ext4_search_dir:1474: inode #2: block 16: comm syz.4.79: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 52.896032][ T3838] EXT4-fs: Ignoring removed i_version option [ 52.909395][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.937075][ T3838] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 53.085219][ T3846] loop1: detected capacity change from 0 to 1024 [ 53.092315][ T3846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.138414][ T3846] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.173117][ T3838] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.86: Invalid block bitmap block 0 in block_group 0 [ 53.188006][ T3838] Quota error (device loop3): write_blk: dquota write failed [ 53.195533][ T3838] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.86: Failed to acquire dquot type 0 [ 53.208118][ T3838] EXT4-fs error (device loop3): ext4_free_blocks:6587: comm syz.3.86: Freeing blocks not in datazone - block = 0, count = 4096 [ 53.245379][ T3838] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.86: Invalid inode bitmap blk 0 in block_group 0 [ 53.258562][ T37] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 53.298960][ T3838] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 53.322275][ T3838] EXT4-fs (loop3): 1 orphan inode deleted [ 53.387866][ T3838] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.438269][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.458067][ T394] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 53.741890][ T3850] tipc: Started in network mode [ 53.746844][ T3850] tipc: Node identity 7f000001, cluster identity 4711 [ 53.754379][ T3850] tipc: Enabled bearer , priority 10 [ 53.782151][ T3838] EXT4-fs error (device loop3): ext4_search_dir:1474: inode #2: block 16: comm syz.3.86: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 54.059305][ T3854] tipc: Enabled bearer , priority 10 [ 54.565281][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.581234][ T394] __quota_error: 3 callbacks suppressed [ 54.581248][ T394] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-7 [ 54.595810][ T394] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 54.621946][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 54.720164][ T3867] loop0: detected capacity change from 0 to 512 [ 54.746047][ T3867] EXT4-fs: Ignoring removed bh option [ 54.775977][ T3867] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 54.794907][ T3867] EXT4-fs (loop0): 1 truncate cleaned up [ 54.811527][ T3867] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 55.225509][ T1036] tipc: Node number set to 2130706433 [ 55.278017][ T3881] SELinux: syz.3.98 (3881) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 55.279711][ T3882] netlink: 28 bytes leftover after parsing attributes in process `syz.1.97'. [ 55.428239][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.994913][ T3903] tipc: Enabling of bearer rejected, already enabled [ 56.014491][ T3903] tipc: Enabling of bearer rejected, already enabled [ 56.072541][ T29] audit: type=1400 audit(1751814247.768:156): avc: denied { name_bind } for pid=3906 comm="syz.4.108" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 56.406409][ T3915] loop4: detected capacity change from 0 to 512 [ 56.415447][ T3915] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 56.448308][ T29] audit: type=1400 audit(1751814248.148:157): avc: denied { create } for pid=3916 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.487949][ T29] audit: type=1400 audit(1751814248.168:158): avc: denied { bind } for pid=3916 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.507259][ T29] audit: type=1400 audit(1751814248.168:159): avc: denied { listen } for pid=3916 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.526661][ T29] audit: type=1400 audit(1751814248.168:160): avc: denied { connect } for pid=3916 comm="syz.0.112" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 56.546208][ T29] audit: type=1400 audit(1751814248.178:161): avc: denied { create } for pid=3912 comm="syz.4.111" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 56.854108][ T3924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.114'. [ 57.454452][ T3926] loop1: detected capacity change from 0 to 1024 [ 57.662116][ T3926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.674429][ T3926] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 58.006887][ T3929] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 58.215501][ T3956] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 58.483501][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.917239][ T3960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.927058][ T3960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 59.276915][ T3982] loop2: detected capacity change from 0 to 1024 [ 59.283668][ T3982] EXT4-fs: Ignoring removed orlov option [ 59.316975][ T3982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 59.819113][ T3997] veth1_macvtap: left promiscuous mode [ 59.825773][ T3997] macsec0: entered promiscuous mode [ 59.839704][ T29] audit: type=1400 audit(1751814251.518:162): avc: denied { create } for pid=3996 comm="syz.0.138" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 59.968601][ T4000] netlink: 28 bytes leftover after parsing attributes in process `syz.1.135'. [ 60.024655][ T29] audit: type=1400 audit(1751814251.708:163): avc: denied { unlink } for pid=3314 comm="syz-executor" name="file0" dev="tmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 60.432447][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.751459][ T4024] loop0: detected capacity change from 0 to 512 [ 60.812828][ T4024] EXT4-fs (loop0): 1 orphan inode deleted [ 60.819031][ T4024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.832355][ T4024] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.844299][ T12] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 60.854058][ T12] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 1 [ 61.045689][ T4037] veth1_macvtap: left promiscuous mode [ 61.051603][ T4037] macsec0: entered promiscuous mode [ 61.073877][ T4023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.082738][ T4023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.329095][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.510602][ T4055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.157'. [ 62.381022][ T4066] loop0: detected capacity change from 0 to 128 [ 64.135968][ T4087] netlink: 4 bytes leftover after parsing attributes in process `syz.0.161'. [ 64.592860][ T4093] loop2: detected capacity change from 0 to 1024 [ 64.606503][ T4093] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 64.616357][ T4093] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 64.625981][ T4093] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 64.640300][ T4093] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #5: comm syz.2.168: unexpected bad inode w/o EXT4_IGET_BAD [ 64.655286][ T4093] EXT4-fs (loop2): no journal found [ 64.660631][ T4093] EXT4-fs (loop2): can't get journal size [ 64.670001][ T4093] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 64.719512][ T4097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.171'. [ 64.728542][ T4097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.171'. [ 64.741604][ T4092] loop3: detected capacity change from 0 to 512 [ 64.753497][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.774240][ T4092] EXT4-fs (loop3): 1 orphan inode deleted [ 64.780377][ T4092] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.792973][ T3631] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 64.802756][ T3631] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 1 [ 64.804853][ T4092] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.907268][ T4119] loop1: detected capacity change from 0 to 1024 [ 64.914349][ T4086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.922966][ T4086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.931030][ T4119] EXT4-fs: Ignoring removed i_version option [ 64.937926][ T4119] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 64.956592][ T4119] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.173: Invalid block bitmap block 0 in block_group 0 [ 64.977245][ T4123] netlink: 28 bytes leftover after parsing attributes in process `syz.2.172'. [ 64.987661][ T4119] Quota error (device loop1): write_blk: dquota write failed [ 64.995056][ T4119] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 65.033182][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.042722][ T4119] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.173: Failed to acquire dquot type 0 [ 65.067051][ T4119] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.173: Freeing blocks not in datazone - block = 0, count = 4096 [ 65.119521][ T4119] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.173: Invalid inode bitmap blk 0 in block_group 0 [ 65.437034][ T4119] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 65.457705][ T4119] EXT4-fs (loop1): 1 orphan inode deleted [ 65.471156][ T4119] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.496830][ T51] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 65.505865][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 65.545019][ T4119] EXT4-fs error (device loop1): ext4_search_dir:1474: inode #2: block 16: comm syz.1.173: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 65.577908][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.588219][ T51] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 65.597227][ T51] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:3: Failed to release dquot type 0 [ 65.734035][ T4135] veth1_macvtap: left promiscuous mode [ 65.739561][ T4135] macsec0: entered promiscuous mode [ 65.783564][ T4142] tipc: Enabling of bearer rejected, already enabled [ 65.796491][ T4142] tipc: Enabling of bearer rejected, already enabled [ 66.973823][ T4155] netlink: 16 bytes leftover after parsing attributes in process `syz.1.184'. [ 66.982821][ T4155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.184'. [ 67.117935][ T4169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.189'. [ 67.129102][ T4170] veth1_macvtap: left promiscuous mode [ 67.134638][ T4170] macsec0: entered promiscuous mode [ 68.189427][ T29] audit: type=1400 audit(1751814259.188:164): avc: denied { write } for pid=4176 comm="syz.2.194" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 68.518781][ T29] audit: type=1400 audit(1751814260.178:165): avc: denied { create } for pid=4179 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 68.538142][ T29] audit: type=1400 audit(1751814260.178:166): avc: denied { setopt } for pid=4179 comm="syz.3.195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 69.436315][ T4200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.199'. [ 69.445158][ T4200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.199'. [ 69.634389][ T4211] netlink: 28 bytes leftover after parsing attributes in process `syz.1.203'. [ 69.664394][ T4213] veth1_macvtap: left promiscuous mode [ 69.669980][ T4213] macsec0: entered promiscuous mode [ 69.969174][ T29] audit: type=1400 audit(1751814261.648:167): avc: denied { mount } for pid=4206 comm="syz.4.201" name="/" dev="configfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 69.991717][ T29] audit: type=1400 audit(1751814261.648:168): avc: denied { search } for pid=4206 comm="syz.4.201" name="/" dev="configfs" ino=381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.045565][ T4219] loop1: detected capacity change from 0 to 1024 [ 70.091135][ T4219] EXT4-fs: Ignoring removed orlov option [ 70.219994][ T4219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.371476][ T4221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.380171][ T4221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.655732][ T4230] tipc: Enabling of bearer rejected, already enabled [ 70.665268][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.706278][ T4230] tipc: Enabling of bearer rejected, already enabled [ 70.710413][ T4234] loop1: detected capacity change from 0 to 1024 [ 70.761293][ T4234] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.781352][ T4239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.212'. [ 70.790243][ T4239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.212'. [ 70.803023][ T4234] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.840553][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.228874][ T4249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.215'. [ 72.243865][ T4260] tipc: Enabling of bearer rejected, already enabled [ 72.682198][ T4273] loop2: detected capacity change from 0 to 1024 [ 72.707867][ T4273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.720209][ T4273] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.728427][ T31] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 73.761255][ T31] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 319 with max blocks 1 with error 28 [ 73.773673][ T31] EXT4-fs (loop2): This should not happen!! Data will be lost [ 73.773673][ T31] [ 73.783455][ T31] EXT4-fs (loop2): Total free blocks count 0 [ 73.789547][ T31] EXT4-fs (loop2): Free/Dirty block details [ 73.795540][ T31] EXT4-fs (loop2): free_blocks=4293918720 [ 73.801413][ T31] EXT4-fs (loop2): dirty_blocks=16 [ 73.806635][ T31] EXT4-fs (loop2): Block reservation details [ 73.812638][ T31] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 73.827520][ T4290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.225'. [ 73.836359][ T4290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.225'. [ 73.881373][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.618465][ T4289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.627199][ T4289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.738161][ T4313] tipc: Enabling of bearer rejected, already enabled [ 76.859065][ T4332] loop4: detected capacity change from 0 to 1024 [ 76.900775][ T4335] loop3: detected capacity change from 0 to 1024 [ 76.944805][ T4332] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.957811][ T4335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.959993][ T4344] tipc: Enabling of bearer rejected, already enabled [ 76.985771][ T4332] ext4 filesystem being mounted at /50/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.998474][ T4335] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 77.203243][ T4356] loop1: detected capacity change from 0 to 1024 [ 77.210986][ T4356] EXT4-fs: Ignoring removed orlov option [ 77.278266][ T4356] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.052437][ T4363] loop2: detected capacity change from 0 to 1024 [ 78.077832][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.106259][ T4363] EXT4-fs: Ignoring removed orlov option [ 78.140567][ T4363] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.257500][ T4363] ================================================================== [ 78.265618][ T4363] BUG: KCSAN: data-race in __mark_inode_dirty / writeback_single_inode [ 78.273879][ T4363] [ 78.276214][ T4363] write to 0xffff888106bc05f8 of 4 bytes by task 4369 on cpu 0: [ 78.283845][ T4363] writeback_single_inode+0x14a/0x3e0 [ 78.289230][ T4363] sync_inode_metadata+0x5b/0x90 [ 78.294177][ T4363] generic_buffers_fsync_noflush+0xd9/0x120 [ 78.300103][ T4363] ext4_sync_file+0x1ab/0x690 [ 78.304794][ T4363] vfs_fsync_range+0x10d/0x130 [ 78.309595][ T4363] ext4_buffered_write_iter+0x34f/0x3c0 [ 78.315151][ T4363] ext4_file_write_iter+0x383/0xf00 [ 78.320360][ T4363] iter_file_splice_write+0x5f2/0x970 [ 78.325748][ T4363] direct_splice_actor+0x153/0x2a0 [ 78.330884][ T4363] splice_direct_to_actor+0x30f/0x680 [ 78.336275][ T4363] do_splice_direct+0xda/0x150 [ 78.341047][ T4363] do_sendfile+0x380/0x650 [ 78.345473][ T4363] __x64_sys_sendfile64+0x105/0x150 [ 78.350686][ T4363] x64_sys_call+0xb39/0x2fb0 [ 78.355284][ T4363] do_syscall_64+0xd2/0x200 [ 78.359790][ T4363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.365689][ T4363] [ 78.368025][ T4363] read to 0xffff888106bc05f8 of 4 bytes by task 4363 on cpu 1: [ 78.375570][ T4363] __mark_inode_dirty+0x18e/0x760 [ 78.380607][ T4363] file_modified_flags+0x324/0x350 [ 78.385734][ T4363] file_modified+0x17/0x20 [ 78.390160][ T4363] ext4_buffered_write_iter+0x1d0/0x3c0 [ 78.395719][ T4363] ext4_file_write_iter+0x383/0xf00 [ 78.400925][ T4363] iter_file_splice_write+0x5f2/0x970 [ 78.406325][ T4363] direct_splice_actor+0x153/0x2a0 [ 78.411460][ T4363] splice_direct_to_actor+0x30f/0x680 [ 78.416869][ T4363] do_splice_direct+0xda/0x150 [ 78.421646][ T4363] do_sendfile+0x380/0x650 [ 78.426073][ T4363] __x64_sys_sendfile64+0x105/0x150 [ 78.431274][ T4363] x64_sys_call+0xb39/0x2fb0 [ 78.435867][ T4363] do_syscall_64+0xd2/0x200 [ 78.440366][ T4363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.446268][ T4363] [ 78.448588][ T4363] value changed: 0x00000038 -> 0x00000002 [ 78.454299][ T4363] [ 78.456617][ T4363] Reported by Kernel Concurrency Sanitizer on: [ 78.462775][ T4363] CPU: 1 UID: 0 PID: 4363 Comm: syz.2.249 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(voluntary) [ 78.475099][ T4363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 78.485154][ T4363] ================================================================== [ 78.493975][ T4364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.502804][ T4364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.536329][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.912862][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.152805][ T3312] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.