last executing test programs: 4.873678976s ago: executing program 4 (id=748): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet(0x2, 0x801, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0xe803, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xf, 0x0, &(0x7f0000000380)="25d32c1445a4b4c7a7711b211a172a", 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x8, 0x0, @perf_config_ext={0x1, 0xa}, 0x1184c, 0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) msgsnd(0x0, 0x0, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="8b332abd70000000478d15000000080099"], 0x30}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r4, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x64, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x79}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x48050) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendto$inet(r0, &(0x7f00000001c0), 0xfffffffffffffe58, 0x2000c094, 0x0, 0xffffffe6) 4.642428041s ago: executing program 4 (id=753): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x14, 0x1d, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}}, 0x0) 4.596434291s ago: executing program 4 (id=754): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100", @ANYBLOB], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00') r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000085100048a30cb479e4e30006", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000200000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r11 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r11], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_genetlink_get_family_id$ieee802154(0x0, r9) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, 0x0, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12}, 0x18) r13 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r13, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r13, &(0x7f00000034c0)=""/4074, 0xfea) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r14}, 0x18) 4.441092855s ago: executing program 4 (id=756): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() r6 = inotify_init() inotify_rm_watch(r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) 4.405116116s ago: executing program 4 (id=757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x20, 0x1d, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}}, 0x0) 4.340106476s ago: executing program 4 (id=758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00ffff000500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_user(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a617574685f63616368655f742095a167c867d8f91b"], 0x27) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0xc044) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, 0x0, 0x1, 0x0) statx(r4, &(0x7f00000001c0)='./cgroup/../file0\x00', 0x0, 0x8, &(0x7f0000000340)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r7, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0xfffd, 0x13, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 1.302350635s ago: executing program 3 (id=794): socket$tipc(0x1e, 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x20010814) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, 0x0, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffff1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000880)=""/142) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 1.239733836s ago: executing program 2 (id=797): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff00", 0x5, 0x0, 0x0, 0x2}]) 1.099343989s ago: executing program 1 (id=804): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf21, 0x100}, 0x48) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0xce23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)}, 0x80001) sendmmsg$inet6(r0, &(0x7f0000003240)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, '\x00', 0xd}, 0x4}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="9e", 0x1}], 0x1}}], 0x1, 0x881) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000340)={r2, 0x3}, 0x8) 1.098915929s ago: executing program 0 (id=805): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000c00)=[{0x0}, {0x0}], 0x2}, 0x9a2b}], 0x2, 0x600181a2, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000540)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "000000000000001e"}, 0x10}}, 0x4040) 1.080848479s ago: executing program 2 (id=806): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1900000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x73) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r0, &(0x7f0000000140), 0x0}, 0x20) 1.03268384s ago: executing program 2 (id=807): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 1.031954871s ago: executing program 2 (id=808): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000020008000) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) mount(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380)='devtmpfs\x00', 0x4000, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200890, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r9, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000900)=@delchain={0x30, 0x2e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xfff2, 0xffff}, {0x0, 0xd}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001740)=ANY=[@ANYBLOB="bc0200001300000125bd7000fddbdf2520010000000000000000000000000002000000000000000000000000000000004e2100004e2204000a0080203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="06000000edaa0000000000005600000000000000060000000000000000100000000000000500000000000000ff0700000000000005002f08bc9e9b000000000000030000000000000001040000000000000500000000000000070000000000000000000080b56b6e0000010303000000000a000000000000000000000028001a0000000000000000000000000000000001ff0200000000000000000000000000010a00048108001800c0225993112b173b414bdc26b4ccac819f00000008001e00a3320000e4000600ff020000000000000000000000000001fe88000000000000000000000000000100000000", @ANYRES32=r9, @ANYRES32, @ANYBLOB="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"/388], 0x2bc}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000100)={0x4, 0xe, 0x0, 0x4, 0x4}) 486.596191ms ago: executing program 3 (id=809): pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000cc0)="aac84dd7bfeccc2fcdc1", 0xa}], 0x1, 0x6) r0 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8000, 0x0) 430.364182ms ago: executing program 3 (id=810): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100", @ANYBLOB], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000085100048a30cb479e4e30006", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000200000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r12 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r12], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_genetlink_get_family_id$ieee802154(0x0, r10) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r13}, 0x18) r14 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r14, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r14, &(0x7f00000034c0)=""/4074, 0xfea) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r15}, 0x18) 429.149932ms ago: executing program 3 (id=811): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd7f, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) utimes(&(0x7f0000000340)='./file0\x00', 0x0) 414.546102ms ago: executing program 3 (id=812): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0xffff) fallocate(r0, 0x3, 0x2000000, 0x8000c62) getsockname$packet(r0, 0x0, &(0x7f0000000400)) 397.820143ms ago: executing program 3 (id=813): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0xf, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x24, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xadc0}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x3}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x101}, @TCA_FQ_CODEL_QUANTUM={0x8, 0x6, 0x2}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 243.175916ms ago: executing program 0 (id=814): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000004000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 242.738176ms ago: executing program 1 (id=815): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x902) writev(r0, &(0x7f00000002c0)=[{0x0}], 0x1) 208.824337ms ago: executing program 1 (id=816): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20040001}, 0x20000000) 208.289616ms ago: executing program 1 (id=817): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r2, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 204.023716ms ago: executing program 0 (id=818): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 184.450167ms ago: executing program 1 (id=819): bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x164) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) syz_pidfd_open(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$eJzs289vFFUcAPDvzLZFKNiK+IOCWkVj44+WFlQOXjSaeNDERA94rG0hlYUaWhMhjVZj8GhIvBuPJv4FnvRi1JOJV70bEmJ6AT2tmd2ZdrvdLW3ZdtH9fJKB92be5n2/O/N238zrBtC1hrN/koj9EfF7RAzUqmsbDNf+u7m8OPX38uJUEpXKW38l1XY3lheniqbF6/rzykgakX6WxJEm/c5funxuslyeuZjXxxbOvz82f+nys7PnJ8/OnJ25MHHq1MkT4y88P/FcW/LMYrox9NHc0cOvvXP1janTV9/9+dukyL8hjzYZ3ujgE5VKm7vrrAN15aSng4GwJaWIyE5Xb3X8D0QpVk/eQLz6aUeDA3ZUpVKp9Lc+vFQB/seS6HQEQGcUX/TZ/W+x7dLU445w/aXaDVCW9818qx3piTRv09twf9tOwxFxeumfr7ItduY5BADAGt9n859nms3/0ri/rt3d+drQYETcExEHI+LeiDgUEfdFVNs+EBEPbrH/xkWS9fOf9Nq2EtukbP73Yr62tXb+V8z+YrCU1w5U8+9NzsyWZ47n78lI9O7J6uMb9PHDK7990epY/fwv27L+i7lgHse1nj1rXzM9uTB5OznXu/5JxFBPs/yTlZWAJCIOR8TQNvuYfeqbo62O3Tr/DbRhnanydcSTtfO/FA35F5KN1yfH7oryzPGx4qpY75dfr7zZqv/byr8NsvO/r+n1v5L/YFK/Xju/9T6u/PF5y3ua7V7/fcnb1XJfvu/DyYWFi+MRfcnrtaDr90+svraoF+2z/EeONR//B2P1nTgSEdlF/FBEPBwRj+SxPxoRj0XEsQ3y/+nlx9/bfv47K8t/ekvnf7XQF417mhdK5378bk2ng1vJPzv/J6ulkXzPZj7/NhPX9q5mAAAA+O9JI2J/JOnoSjlNR0drfy9/KPal5bn5hafPzH1wYbr2G4HB6E2LJ10Ddc9Dx/Pb+qI+0VA/kT83/rK0t1ofnZorT3c6eehy/S3Gf+bPUqejA3ac32tB9zL+oXsZ/9C9jH/oXk3G/95OxAHsvmbf/x93IA5g9zWMf8t+0EXc/0P3Mv6hexn/0JXm98atfySvoLCuEOkdEYbCDhU6/ckEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQHv8GAAD//5LX5s8=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r2, 0x3, 0x2000000, 0x8000c62) 140.703708ms ago: executing program 0 (id=820): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000940)="2e00000010008188e6b62aa73772cc9f1ba1f8482e0000005e140602000000000e000a001000000002800000128c", 0x2e}], 0x1}, 0x0) 139.876638ms ago: executing program 2 (id=821): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100", @ANYBLOB], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r5}}) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xe}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000085100048a30cb479e4e30006", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000200000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r12 = gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010028bd7000ffdbdf2514000000080001000100000008001c00", @ANYRES32=r12], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) syz_genetlink_get_family_id$ieee802154(0x0, r10) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r13}, 0x18) r14 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r14, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r14, &(0x7f00000034c0)=""/4074, 0xfea) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r15}, 0x18) 82.290539ms ago: executing program 0 (id=822): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd7f, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) utimes(&(0x7f0000000340)='./file0\x00', 0x0) 58.201329ms ago: executing program 0 (id=823): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x7, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) memfd_create(0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x120, r2, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSCATLST={0xb4, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x200b6e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30c64757}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x401}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c0a1653}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4a4bb8c2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5a145c00}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2663bc2c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x254084e6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19286a1b}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3af7f6a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6fa4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x24dc9b00}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3bbd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x928a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe644}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7655}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2470}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x43c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe2b7}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSLVLLST={0x48, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x93}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x57fb781c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe1}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x461}]}]}]}, 0x120}}, 0x20000040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) mbind(&(0x7f00004fa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000000)=0x1ff, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4000, 0x0, 0x4, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd2a, 0x8000002, {0x0, 0x0, 0x0, 0x0, {0x0, 0x6}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_basic={{0xa}, {0x38, 0x2, [@TCA_BASIC_EMATCHES={0x34, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x24, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x4}, {{0x1, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x2, 0x0, 0x0, {{0x3}, {0xffffffffffffffff, 0x1, 0x8}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) lseek(0xffffffffffffffff, 0x10001, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x81000000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xf, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="950000000000000018140000", @ANYRES32, @ANYBLOB="0000000000000007b4a836fbf19ddecaebb3ae94c226b2888df90a21617fb6aaa88d1c0444282d2745be032e7a919e9c6c79c7b52bfbc4892556116bc8f6c1173509b3ce29360358430d1a213142767c6899b3c38be590b0fdbaa638d2734f4638603e56349675b27c8cbdbe00eaa90d44a7f314d0d5a2a3a74218f5fcf969befaf387f3ec51f32b1c8b576f1e94530660f54046171f29be03cb586a3ad48204ed5f65ac6cc446616f1f400e6d00ac990f3e26eb584987ff54ef93a1"], &(0x7f0000000200)='syzkaller\x00', 0x3, 0x1000, &(0x7f0000002600)=""/4096, 0x0, 0x58, '\x00', 0x0, @cgroup_device=0x6, r1, 0x8, &(0x7f00000002c0)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f0000000340)=[r0, r0, r0], &(0x7f0000000380)=[{0x4, 0x5, 0x3, 0x8}, {0x3, 0x1, 0xf, 0x4}, {0x1, 0x1, 0x1, 0xa}, {0x5, 0x1, 0xa, 0x5}, {0x2, 0x1, 0x1, 0x9}, {0x3, 0x2, 0xe, 0x4}, {0x0, 0x1, 0xa, 0x1}], 0x10, 0x3e48}, 0x94) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x41, &(0x7f0000000880)={[{@nouser_xattr}, {@nodiscard}, {@usrjquota}, {@grpjquota}, {@grpjquota}, {@minixdf}, {@quota}, {@noload}, {@block_validity}]}, 0x64, 0x51c, &(0x7f0000001740)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 14.95126ms ago: executing program 1 (id=824): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0xa, 0x4e21, 0xa0f, @loopback, 0x10}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="14000000000000"], 0x18}, 0x10000800) 0s ago: executing program 2 (id=825): unshare(0x6a040000) r0 = socket(0x10, 0x80002, 0x0) sendmsg(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e", 0x24}], 0x1}, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB], 0x54}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 24.209040][ T29] audit: type=1400 audit(1757626323.122:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.209882][ T3291] cgroup: Unknown subsys name 'net' [ 24.232311][ T29] audit: type=1400 audit(1757626323.122:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.259984][ T29] audit: type=1400 audit(1757626323.152:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.438098][ T3291] cgroup: Unknown subsys name 'cpuset' [ 24.444343][ T3291] cgroup: Unknown subsys name 'rlimit' [ 24.554567][ T29] audit: type=1400 audit(1757626323.462:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.578044][ T29] audit: type=1400 audit(1757626323.462:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.598674][ T29] audit: type=1400 audit(1757626323.462:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.619291][ T29] audit: type=1400 audit(1757626323.462:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.626616][ T3294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.640376][ T29] audit: type=1400 audit(1757626323.492:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.674485][ T29] audit: type=1400 audit(1757626323.492:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.698474][ T29] audit: type=1400 audit(1757626323.572:71): avc: denied { relabelto } for pid=3294 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.734453][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.484443][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 26.513057][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 26.598674][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.605951][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.613328][ T3309] bridge_slave_0: entered allmulticast mode [ 26.620385][ T3309] bridge_slave_0: entered promiscuous mode [ 26.627162][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.634379][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.641663][ T3309] bridge_slave_1: entered allmulticast mode [ 26.648835][ T3309] bridge_slave_1: entered promiscuous mode [ 26.655225][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.662418][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.669858][ T3302] bridge_slave_0: entered allmulticast mode [ 26.676509][ T3302] bridge_slave_0: entered promiscuous mode [ 26.685468][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.692697][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.700097][ T3302] bridge_slave_1: entered allmulticast mode [ 26.706530][ T3302] bridge_slave_1: entered promiscuous mode [ 26.739989][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.756533][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.765944][ T3303] chnl_net:caif_netlink_parms(): no params data found [ 26.778989][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.789298][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.824202][ T3309] team0: Port device team_slave_0 added [ 26.835089][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 26.844534][ T3302] team0: Port device team_slave_0 added [ 26.851293][ T3302] team0: Port device team_slave_1 added [ 26.860361][ T3309] team0: Port device team_slave_1 added [ 26.915378][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.922811][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.949049][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.962334][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.969945][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 26.996421][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.007692][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.014822][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.041712][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.061210][ T3303] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.068759][ T3303] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.075874][ T3303] bridge_slave_0: entered allmulticast mode [ 27.082406][ T3303] bridge_slave_0: entered promiscuous mode [ 27.091281][ T3303] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.098638][ T3303] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.105912][ T3303] bridge_slave_1: entered allmulticast mode [ 27.112269][ T3303] bridge_slave_1: entered promiscuous mode [ 27.119311][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.126264][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.152722][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.166614][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 27.208965][ T3302] hsr_slave_0: entered promiscuous mode [ 27.215030][ T3302] hsr_slave_1: entered promiscuous mode [ 27.222723][ T3303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.233331][ T3303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.255185][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.263278][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.270596][ T3304] bridge_slave_0: entered allmulticast mode [ 27.277565][ T3304] bridge_slave_0: entered promiscuous mode [ 27.298249][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.305660][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.313181][ T3304] bridge_slave_1: entered allmulticast mode [ 27.320043][ T3304] bridge_slave_1: entered promiscuous mode [ 27.338742][ T3303] team0: Port device team_slave_0 added [ 27.351436][ T3309] hsr_slave_0: entered promiscuous mode [ 27.357922][ T3309] hsr_slave_1: entered promiscuous mode [ 27.363741][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 27.370010][ T3309] Cannot create hsr debugfs directory [ 27.381588][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.392424][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.409402][ T3303] team0: Port device team_slave_1 added [ 27.437723][ T3304] team0: Port device team_slave_0 added [ 27.450695][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.457857][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.484755][ T3303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.505464][ T3304] team0: Port device team_slave_1 added [ 27.526525][ T3303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.533519][ T3303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.559971][ T3303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.574306][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.581400][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.588843][ T3308] bridge_slave_0: entered allmulticast mode [ 27.595261][ T3308] bridge_slave_0: entered promiscuous mode [ 27.602607][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.609706][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.617750][ T3308] bridge_slave_1: entered allmulticast mode [ 27.624123][ T3308] bridge_slave_1: entered promiscuous mode [ 27.641876][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.649183][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.675451][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.686818][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.693836][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.719842][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.742823][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.766060][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.783638][ T3303] hsr_slave_0: entered promiscuous mode [ 27.789790][ T3303] hsr_slave_1: entered promiscuous mode [ 27.795609][ T3303] debugfs: 'hsr0' already exists in 'hsr' [ 27.801389][ T3303] Cannot create hsr debugfs directory [ 27.845755][ T3308] team0: Port device team_slave_0 added [ 27.852639][ T3308] team0: Port device team_slave_1 added [ 27.872771][ T3304] hsr_slave_0: entered promiscuous mode [ 27.878792][ T3304] hsr_slave_1: entered promiscuous mode [ 27.884805][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 27.890671][ T3304] Cannot create hsr debugfs directory [ 27.922531][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.929599][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 27.955724][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.969255][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.976326][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.002387][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.077256][ T3308] hsr_slave_0: entered promiscuous mode [ 28.083479][ T3308] hsr_slave_1: entered promiscuous mode [ 28.089443][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 28.095354][ T3308] Cannot create hsr debugfs directory [ 28.113909][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.133381][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.142032][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.164887][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.194011][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.205663][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.229819][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.244006][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.268095][ T3303] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.280258][ T3303] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.289925][ T3303] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.304182][ T3303] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.351925][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.370613][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.380448][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.389373][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.409775][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.424958][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.439033][ T3308] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.450424][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.462629][ T3308] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.474401][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.481875][ T3308] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.491471][ T3308] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.508326][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.515571][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.524126][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.531225][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.540603][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.547664][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.565098][ T3303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.575179][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.582395][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.615044][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.625479][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.664155][ T3303] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.676609][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.690076][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.699783][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.706864][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.716312][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.723417][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.743463][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.773569][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.780688][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.789676][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.796786][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.818493][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.842281][ T3303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.860476][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.871137][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.883811][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.890888][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.909864][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.920413][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.934957][ T1724] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.942115][ T1724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.958387][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.012411][ T3303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.068032][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.119275][ T3302] veth0_vlan: entered promiscuous mode [ 29.127206][ T3302] veth1_vlan: entered promiscuous mode [ 29.155224][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.207074][ T3309] veth0_vlan: entered promiscuous mode [ 29.216546][ T3309] veth1_vlan: entered promiscuous mode [ 29.241959][ T3303] veth0_vlan: entered promiscuous mode [ 29.263411][ T3302] veth0_macvtap: entered promiscuous mode [ 29.274227][ T3309] veth0_macvtap: entered promiscuous mode [ 29.282888][ T3302] veth1_macvtap: entered promiscuous mode [ 29.292091][ T3303] veth1_vlan: entered promiscuous mode [ 29.300194][ T3309] veth1_macvtap: entered promiscuous mode [ 29.327754][ T3308] veth0_vlan: entered promiscuous mode [ 29.339387][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.348082][ T3303] veth0_macvtap: entered promiscuous mode [ 29.355451][ T3303] veth1_macvtap: entered promiscuous mode [ 29.365308][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.375235][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.392788][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.401622][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.415397][ T3308] veth1_vlan: entered promiscuous mode [ 29.423544][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.433178][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.450963][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 29.451048][ T29] audit: type=1400 audit(1757626328.362:84): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.HLK3mS/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 29.456299][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.458777][ T29] audit: type=1400 audit(1757626328.362:85): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 29.490102][ T3308] veth0_macvtap: entered promiscuous mode [ 29.491287][ T3308] veth1_macvtap: entered promiscuous mode [ 29.512437][ T29] audit: type=1400 audit(1757626328.362:86): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.HLK3mS/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.525844][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.549549][ T29] audit: type=1400 audit(1757626328.362:87): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 29.558386][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.578474][ T29] audit: type=1400 audit(1757626328.362:88): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.HLK3mS/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 29.578506][ T29] audit: type=1400 audit(1757626328.362:89): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/root/syzkaller.HLK3mS/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 29.591995][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.613856][ T29] audit: type=1400 audit(1757626328.362:90): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.638562][ T29] audit: type=1400 audit(1757626328.492:91): avc: denied { mounton } for pid=3309 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 29.652832][ T3304] veth0_vlan: entered promiscuous mode [ 29.668606][ T29] audit: type=1400 audit(1757626328.492:92): avc: denied { mount } for pid=3309 comm="syz-executor" name="/" dev="gadgetfs" ino=3660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 29.696076][ T3303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.727902][ T3304] veth1_vlan: entered promiscuous mode [ 29.735774][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.757194][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.770547][ T29] audit: type=1400 audit(1757626328.682:93): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 29.814584][ T3304] veth0_macvtap: entered promiscuous mode [ 29.843745][ T37] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.859309][ T3304] veth1_macvtap: entered promiscuous mode [ 29.866101][ T37] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.914479][ T37] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.934519][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.956366][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.977062][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.015322][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.066038][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.091099][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.111987][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.121996][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.132102][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.148680][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.179073][ T37] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.204077][ T37] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.234683][ T3509] loop0: detected capacity change from 0 to 128 [ 30.245022][ T37] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.273503][ T37] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.590379][ T3524] netlink: 192 bytes leftover after parsing attributes in process `syz.0.15'. [ 31.431871][ T31] kworker/u8:1: attempt to access beyond end of device [ 31.431871][ T31] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 31.591502][ T3537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.23'. [ 31.672329][ T3541] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 31.714240][ T3543] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 31.724840][ T3543] SELinux: failed to load policy [ 32.023923][ T3552] netlink: 'syz.0.28': attribute type 153 has an invalid length. [ 32.449564][ T3559] loop2: detected capacity change from 0 to 512 [ 32.461655][ T3559] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.474926][ T3559] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 32.778939][ T3573] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 32.807848][ T3575] netlink: 'syz.3.39': attribute type 10 has an invalid length. [ 32.826547][ T3575] team0: Device hsr_slave_0 failed to register rx_handler [ 32.848875][ T3575] syz.3.39 (3575) used greatest stack depth: 10704 bytes left [ 32.898066][ T3584] netlink: 'syz.2.40': attribute type 153 has an invalid length. [ 33.397309][ T3598] loop1: detected capacity change from 0 to 512 [ 33.567829][ T3598] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 33.887251][ T3615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.52'. [ 34.028911][ T3617] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 34.340742][ T3619] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 34.373644][ T3619] SELinux: failed to load policy [ 34.467454][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 34.467473][ T29] audit: type=1107 audit(1757626333.352:518): pid=3620 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=':˚S&HHQ9Bc8obRQ,̩J9CVM\LC&Sf^Ҥ[5ˎifkewEtɕ:JcN6})[Wz_wp:'3' [ 34.591791][ T3623] loop0: detected capacity change from 0 to 4096 [ 34.629267][ T3623] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.680700][ T3623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.724819][ T29] audit: type=1400 audit(1757626333.632:519): avc: denied { mount } for pid=3622 comm="syz.0.56" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.778456][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.796317][ T29] audit: type=1400 audit(1757626333.692:520): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.899577][ T29] audit: type=1326 audit(1757626333.812:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f80aeeba9 code=0x7ffc0000 [ 34.948963][ T3643] netlink: 240 bytes leftover after parsing attributes in process `syz.0.65'. [ 34.962014][ T29] audit: type=1326 audit(1757626333.832:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f80aeeba9 code=0x7ffc0000 [ 34.985687][ T29] audit: type=1326 audit(1757626333.832:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f80aeeba9 code=0x7ffc0000 [ 35.009100][ T29] audit: type=1326 audit(1757626333.832:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f80aeeba9 code=0x7ffc0000 [ 35.032740][ T29] audit: type=1326 audit(1757626333.832:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9f80aeeba9 code=0x7ffc0000 [ 35.056268][ T29] audit: type=1326 audit(1757626333.832:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f80aeeba9 code=0x7ffc0000 [ 35.080067][ T29] audit: type=1326 audit(1757626333.832:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3636 comm="syz.0.63" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f80aeeba9 code=0x7ffc0000 [ 35.145792][ T3652] capability: warning: `syz.0.68' uses 32-bit capabilities (legacy support in use) [ 35.463796][ T3654] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 35.593011][ T3673] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 35.627481][ T3673] SELinux: failed to load policy [ 36.264112][ T3695] bridge_slave_0: left allmulticast mode [ 36.269900][ T3695] bridge_slave_0: left promiscuous mode [ 36.275574][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.294153][ T3696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.87'. [ 36.305005][ T3695] bridge_slave_1: left allmulticast mode [ 36.310859][ T3695] bridge_slave_1: left promiscuous mode [ 36.316571][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.347223][ T3695] bond0: (slave bond_slave_0): Releasing backup interface [ 36.361761][ T3695] bond0: (slave bond_slave_1): Releasing backup interface [ 36.377256][ T3695] team0: Port device team_slave_0 removed [ 36.391443][ T3695] team0: Port device team_slave_1 removed [ 36.399930][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 36.407581][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 36.416584][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 36.424280][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 36.550087][ T3707] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 36.565138][ T3707] SELinux: failed to load policy [ 36.619091][ T3711] netlink: 'syz.3.93': attribute type 10 has an invalid length. [ 36.638371][ T3711] team0: Device hsr_slave_0 failed to register rx_handler [ 36.814518][ T3724] loop3: detected capacity change from 0 to 256 [ 37.430616][ T3724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.439574][ T3724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.659507][ T3729] SELinux: policydb magic number 0x1a does not match expected magic number 0xf97cff8c [ 37.689094][ T3729] SELinux: failed to load policy [ 37.834739][ T3752] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 37.844732][ T3752] SELinux: failed to load policy [ 37.961333][ T3762] bridge_slave_0: left allmulticast mode [ 37.967183][ T3762] bridge_slave_0: left promiscuous mode [ 37.973032][ T3762] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.982177][ T3762] bridge_slave_1: left allmulticast mode [ 37.987878][ T3762] bridge_slave_1: left promiscuous mode [ 37.993576][ T3762] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.000880][ T3763] netlink: 24 bytes leftover after parsing attributes in process `syz.1.113'. [ 38.012125][ T3762] bond0: (slave bond_slave_0): Releasing backup interface [ 38.022088][ T3762] bond0: (slave bond_slave_1): Releasing backup interface [ 38.033823][ T3762] team0: Port device team_slave_0 removed [ 38.042441][ T3762] team0: Port device team_slave_1 removed [ 38.049575][ T3762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 38.057073][ T3762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 38.066705][ T3762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 38.074274][ T3762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 38.596199][ T3770] netlink: 56 bytes leftover after parsing attributes in process `syz.0.116'. [ 38.740326][ T3783] loop0: detected capacity change from 0 to 512 [ 38.752757][ T3783] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 38.770973][ T3785] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 38.792603][ T3785] SELinux: failed to load policy [ 39.100906][ T3817] netlink: 24 bytes leftover after parsing attributes in process `syz.2.134'. [ 39.486930][ T29] kauditd_printk_skb: 779 callbacks suppressed [ 39.487014][ T29] audit: type=1326 audit(1757626338.392:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd8b105b67 code=0x7ffc0000 [ 39.519411][ T29] audit: type=1326 audit(1757626338.432:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd8b0aada9 code=0x7ffc0000 [ 39.543397][ T29] audit: type=1326 audit(1757626338.432:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd8b105b67 code=0x7ffc0000 [ 39.567244][ T29] audit: type=1326 audit(1757626338.432:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd8b0aada9 code=0x7ffc0000 [ 39.590664][ T29] audit: type=1326 audit(1757626338.432:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fbd8b10eba9 code=0x7ffc0000 [ 39.614524][ T29] audit: type=1326 audit(1757626338.512:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd8b105b67 code=0x7ffc0000 [ 39.638424][ T29] audit: type=1326 audit(1757626338.512:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd8b0aada9 code=0x7ffc0000 [ 39.662273][ T29] audit: type=1326 audit(1757626338.512:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fbd8b10eba9 code=0x7ffc0000 [ 39.686105][ T29] audit: type=1326 audit(1757626338.512:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd8b105b67 code=0x7ffc0000 [ 39.709422][ T29] audit: type=1326 audit(1757626338.512:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3815 comm="syz.1.136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd8b0aada9 code=0x7ffc0000 [ 39.823130][ T3821] SELinux: failed to load policy [ 39.839154][ T3825] netlink: 28 bytes leftover after parsing attributes in process `syz.3.140'. [ 39.905717][ T3832] Zero length message leads to an empty skb [ 40.096513][ T3846] loop3: detected capacity change from 0 to 256 [ 40.142511][ T3846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.151152][ T3846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.031186][ T3832] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.121574][ T3857] SELinux: failed to load policy [ 41.315245][ T3866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 41.509265][ T3882] SELinux: failed to load policy [ 41.530277][ T3884] loop0: detected capacity change from 0 to 128 [ 41.761485][ T3886] netlink: 192 bytes leftover after parsing attributes in process `syz.0.165'. [ 42.265800][ T3893] loop2: detected capacity change from 0 to 1024 [ 42.272958][ T3893] EXT4-fs: Ignoring removed bh option [ 42.278549][ T3893] EXT4-fs: inline encryption not supported [ 42.285601][ T3893] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.296637][ T3893] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 42.306429][ T3893] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.167: lblock 2 mapped to illegal pblock 2 (length 1) [ 42.320664][ T3893] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.167: lblock 0 mapped to illegal pblock 48 (length 1) [ 42.335391][ T3893] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.167: Failed to acquire dquot type 0 [ 42.347066][ T3893] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 42.356843][ T3893] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.167: mark_inode_dirty error [ 42.384362][ T3893] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 42.395867][ T3893] EXT4-fs (loop2): 1 orphan inode deleted [ 42.402475][ T3893] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.415617][ T292] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 42.417096][ T31] kworker/u8:1: attempt to access beyond end of device [ 42.417096][ T31] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 42.444873][ T292] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 42.520882][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.532572][ T3309] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 42.546716][ T3309] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 42.558922][ T3309] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 42.793473][ T3922] SELinux: failed to load policy [ 43.034144][ T3938] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 43.160149][ T3944] bridge_slave_0: left allmulticast mode [ 43.165850][ T3944] bridge_slave_0: left promiscuous mode [ 43.171593][ T3944] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.181325][ T3951] netlink: 24 bytes leftover after parsing attributes in process `syz.4.188'. [ 43.227268][ T3944] bridge_slave_1: left allmulticast mode [ 43.233368][ T3944] bridge_slave_1: left promiscuous mode [ 43.239352][ T3944] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.263056][ T3950] SELinux: failed to load policy [ 43.272644][ T3958] netlink: 'syz.0.195': attribute type 10 has an invalid length. [ 43.298613][ T3944] bond0: (slave bond_slave_0): Releasing backup interface [ 43.345281][ T3944] bond0: (slave bond_slave_1): Releasing backup interface [ 43.390578][ T3944] team0: Port device team_slave_0 removed [ 43.411650][ T3944] team0: Port device team_slave_1 removed [ 43.481235][ T3968] loop3: detected capacity change from 0 to 256 [ 43.584718][ T3968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.593470][ T3968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.976604][ T3944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 43.984203][ T3944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.009821][ T3944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.017342][ T3944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.052130][ T3958] team0: Device hsr_slave_0 failed to register rx_handler [ 44.283300][ T3986] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 44.293438][ T3986] SELinux: failed to load policy [ 44.404546][ T3989] loop2: detected capacity change from 0 to 512 [ 44.411623][ T3989] EXT4-fs: test_dummy_encryption option not supported [ 45.141103][ T29] kauditd_printk_skb: 429 callbacks suppressed [ 45.141118][ T29] audit: type=1400 audit(1757626344.052:1743): avc: denied { audit_write } for pid=3990 comm="syz.1.206" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.168948][ T29] audit: type=1107 audit(1757626344.052:1744): pid=3990 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=':˚S&HHQ9Bc8obRQ,̩J9CVM\LC&Sf^Ҥ[5ˎifkewEtɕ:JcN6})[Wz_wp:'3' [ 45.273646][ T29] audit: type=1400 audit(1757626344.182:1745): avc: denied { append } for pid=3998 comm="syz.4.209" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 45.398539][ T29] audit: type=1400 audit(1757626344.312:1746): avc: denied { name_bind } for pid=4003 comm="syz.4.211" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 45.419960][ T29] audit: type=1400 audit(1757626344.312:1747): avc: denied { node_bind } for pid=4003 comm="syz.4.211" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 45.712879][ T29] audit: type=1400 audit(1757626344.622:1748): avc: denied { module_request } for pid=3996 comm="syz.0.208" kmod="crypto-ecb(cipher_null)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 45.819838][ T4025] netlink: 'syz.2.217': attribute type 10 has an invalid length. [ 45.834705][ T4025] team0: Device hsr_slave_0 failed to register rx_handler [ 45.854975][ T4025] syz.2.217 (4025) used greatest stack depth: 10656 bytes left [ 46.041215][ T4027] netlink: 28 bytes leftover after parsing attributes in process `syz.1.218'. [ 46.053997][ T4036] loop2: detected capacity change from 0 to 128 [ 46.057323][ T29] audit: type=1400 audit(1757626344.962:1749): avc: denied { create } for pid=4026 comm="syz.1.218" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 46.205415][ T29] audit: type=1107 audit(1757626345.112:1750): pid=4038 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg=':˚S&HHQ9Bc8obRQ,̩J9CVM\LC&Sf^Ҥ[5ˎifkewEtɕ:JcN6})[Wz_wp:'3' [ 46.315474][ T4040] netlink: 192 bytes leftover after parsing attributes in process `syz.2.222'. [ 46.453978][ T4042] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 46.539918][ T4042] SELinux: failed to load policy [ 46.619834][ T29] audit: type=1400 audit(1757626345.532:1751): avc: denied { create } for pid=4049 comm="syz.4.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 46.764171][ T29] audit: type=1326 audit(1757626345.672:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4058 comm="syz.0.230" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f80aeeba9 code=0x0 [ 46.880287][ T4063] loop3: detected capacity change from 0 to 512 [ 46.887168][ T4063] EXT4-fs: test_dummy_encryption option not supported [ 46.974870][ T12] kworker/u8:0: attempt to access beyond end of device [ 46.974870][ T12] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 47.408877][ T4071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 47.490692][ T4073] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 48.627156][ T4079] loop0: detected capacity change from 0 to 256 [ 48.665189][ T4079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 48.674048][ T4079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 48.850655][ T4060] loop1: detected capacity change from 0 to 1024 [ 48.924069][ T4060] EXT4-fs: Ignoring removed bh option [ 48.965543][ T4060] EXT4-fs: inline encryption not supported [ 48.991835][ T4060] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 49.026383][ T4060] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 49.037973][ T4060] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.231: lblock 2 mapped to illegal pblock 2 (length 1) [ 49.053970][ T4060] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.231: lblock 0 mapped to illegal pblock 48 (length 1) [ 49.073030][ T4060] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.231: Failed to acquire dquot type 0 [ 49.085014][ T4060] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 49.096893][ T4060] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.231: mark_inode_dirty error [ 49.110414][ T4060] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 49.121548][ T4060] EXT4-fs (loop1): 1 orphan inode deleted [ 49.129811][ T4060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 49.277450][ T52] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 49.293099][ T52] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 49.305790][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.315778][ T4071] syz.2.235 (4071) used greatest stack depth: 10432 bytes left [ 49.318049][ T3303] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 49.337566][ T3303] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 49.348375][ T3303] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 49.715697][ T4128] loop2: detected capacity change from 0 to 512 [ 49.750166][ T4132] tipc: Started in network mode [ 49.755278][ T4132] tipc: Node identity ac1414aa, cluster identity 4711 [ 49.765590][ T4128] EXT4-fs: test_dummy_encryption option not supported [ 49.795728][ T4132] tipc: Enabled bearer , priority 10 [ 50.396770][ T29] kauditd_printk_skb: 70 callbacks suppressed [ 50.396787][ T29] audit: type=1400 audit(1757626349.302:1820): avc: denied { create } for pid=4116 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.456440][ T29] audit: type=1400 audit(1757626349.342:1821): avc: denied { write } for pid=4116 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.475983][ T29] audit: type=1400 audit(1757626349.342:1822): avc: denied { read } for pid=4116 comm="syz.1.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.666262][ T29] audit: type=1400 audit(1757626349.572:1823): avc: denied { unmount } for pid=3308 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 50.748227][ T29] audit: type=1400 audit(1757626349.652:1824): avc: denied { allowed } for pid=4142 comm="syz.4.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 50.767764][ T29] audit: type=1400 audit(1757626349.652:1825): avc: denied { create } for pid=4142 comm="syz.4.262" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.789271][ T29] audit: type=1400 audit(1757626349.652:1826): avc: denied { map } for pid=4142 comm="syz.4.262" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6015 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.813498][ T29] audit: type=1400 audit(1757626349.652:1827): avc: denied { read write } for pid=4142 comm="syz.4.262" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=6015 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.868986][ T29] audit: type=1400 audit(1757626349.782:1828): avc: denied { bind } for pid=4147 comm="syz.4.264" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 50.889377][ T29] audit: type=1400 audit(1757626349.782:1829): avc: denied { node_bind } for pid=4147 comm="syz.4.264" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 50.911635][ T36] tipc: Node number set to 2886997162 [ 50.973987][ T4153] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 50.995040][ T4153] SELinux: failed to load policy [ 51.129157][ C1] hrtimer: interrupt took 27616 ns [ 51.263548][ T4163] netlink: 28 bytes leftover after parsing attributes in process `syz.1.271'. [ 51.531537][ T4167] loop4: detected capacity change from 0 to 1024 [ 51.561246][ T4167] EXT4-fs: Ignoring removed bh option [ 51.573697][ T4167] EXT4-fs: inline encryption not supported [ 51.591229][ T4167] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 51.619889][ T4167] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 51.645140][ T4167] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.272: lblock 2 mapped to illegal pblock 2 (length 1) [ 51.677515][ T4167] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.272: lblock 0 mapped to illegal pblock 48 (length 1) [ 51.693412][ T4167] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.272: Failed to acquire dquot type 0 [ 51.707784][ T4167] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 51.727998][ T4167] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.272: mark_inode_dirty error [ 51.747775][ T4167] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 51.768519][ T4167] EXT4-fs (loop4): 1 orphan inode deleted [ 51.774836][ T4167] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.798563][ T3971] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 51.840744][ T3971] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 51.992804][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.010321][ T3304] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 52.039966][ T3304] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 52.060741][ T3304] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 54.435469][ T4257] netlink: 28 bytes leftover after parsing attributes in process `syz.4.307'. [ 54.632293][ T4261] netlink: 'syz.3.309': attribute type 1 has an invalid length. [ 54.678676][ T4261] bond1: entered promiscuous mode [ 54.689630][ T4261] 8021q: adding VLAN 0 to HW filter on device bond1 [ 55.407104][ T29] kauditd_printk_skb: 369 callbacks suppressed [ 55.407203][ T29] audit: type=1326 audit(1757626354.312:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef43485b67 code=0x7ffc0000 [ 55.499448][ T29] audit: type=1326 audit(1757626354.352:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef4342ada9 code=0x7ffc0000 [ 55.522775][ T29] audit: type=1326 audit(1757626354.352:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef43485b67 code=0x7ffc0000 [ 55.546233][ T29] audit: type=1326 audit(1757626354.352:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef4342ada9 code=0x7ffc0000 [ 55.569610][ T29] audit: type=1326 audit(1757626354.352:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fef4348eba9 code=0x7ffc0000 [ 55.593189][ T29] audit: type=1326 audit(1757626354.372:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef43485b67 code=0x7ffc0000 [ 55.617132][ T29] audit: type=1326 audit(1757626354.372:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef4342ada9 code=0x7ffc0000 [ 55.640562][ T29] audit: type=1326 audit(1757626354.372:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fef4348eba9 code=0x7ffc0000 [ 55.664501][ T29] audit: type=1326 audit(1757626354.372:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fef43485b67 code=0x7ffc0000 [ 55.687952][ T29] audit: type=1326 audit(1757626354.372:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4268 comm="syz.4.312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fef4342ada9 code=0x7ffc0000 [ 56.583790][ T4319] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 56.789249][ T4325] netlink: 24 bytes leftover after parsing attributes in process `syz.2.333'. [ 59.830790][ T4393] netlink: 64 bytes leftover after parsing attributes in process `syz.2.360'. [ 60.029680][ T4388] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 60.133913][ T4407] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 60.144062][ T4407] SELinux: failed to load policy [ 60.167855][ T4409] netlink: 'syz.3.367': attribute type 1 has an invalid length. [ 60.933554][ T4409] bond2: entered promiscuous mode [ 60.939090][ T4409] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.984364][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 60.984381][ T29] audit: type=1400 audit(1757626359.042:2319): avc: denied { load_policy } for pid=4406 comm="syz.3.366" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 61.101126][ T29] audit: type=1400 audit(1757626360.012:2320): avc: denied { create } for pid=4420 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 61.140052][ T29] audit: type=1400 audit(1757626360.052:2321): avc: denied { module_request } for pid=4420 comm="syz.4.371" kmod="netdev-veth0_vlan" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 61.193138][ T4429] netlink: 4 bytes leftover after parsing attributes in process `syz.4.371'. [ 61.211109][ T29] audit: type=1400 audit(1757626360.112:2322): avc: denied { read } for pid=4428 comm="syz.2.373" dev="nsfs" ino=4026532495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.232632][ T29] audit: type=1400 audit(1757626360.112:2323): avc: denied { open } for pid=4428 comm="syz.2.373" path="net:[4026532495]" dev="nsfs" ino=4026532495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 61.252937][ T4430] SELinux: failed to load policy [ 61.256157][ T29] audit: type=1400 audit(1757626360.112:2324): avc: denied { create } for pid=4428 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.280626][ T29] audit: type=1400 audit(1757626360.122:2325): avc: denied { bind } for pid=4428 comm="syz.2.373" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.300382][ T29] audit: type=1400 audit(1757626360.122:2326): avc: denied { sys_module } for pid=4420 comm="syz.4.371" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 61.325262][ T29] audit: type=1400 audit(1757626360.202:2327): avc: denied { setcurrent } for pid=4420 comm="syz.4.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 61.345322][ T29] audit: type=1401 audit(1757626360.202:2328): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 61.355963][ T4436] netlink: 'syz.1.375': attribute type 10 has an invalid length. [ 61.375152][ T4436] team0: Device hsr_slave_0 failed to register rx_handler [ 61.398034][ T4440] loop2: detected capacity change from 0 to 128 [ 61.656738][ T4449] netlink: 192 bytes leftover after parsing attributes in process `syz.2.377'. [ 62.341172][ T4458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.385'. [ 62.354169][ T4458] hsr0: entered promiscuous mode [ 62.359701][ T4458] macsec1: entered promiscuous mode [ 62.449699][ T292] kworker/u8:5: attempt to access beyond end of device [ 62.449699][ T292] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 63.207110][ T4492] netlink: 'syz.0.398': attribute type 10 has an invalid length. [ 63.244197][ T4492] team0: Device hsr_slave_0 failed to register rx_handler [ 63.354958][ T4494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.399'. [ 63.791027][ T4525] netlink: 'syz.1.412': attribute type 10 has an invalid length. [ 63.820614][ T4525] team0: Device hsr_slave_0 failed to register rx_handler [ 63.846528][ T4530] netlink: 240 bytes leftover after parsing attributes in process `syz.3.415'. [ 63.876587][ T4534] loop1: detected capacity change from 0 to 128 [ 64.016009][ T4541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 64.043890][ T4541] hsr0: entered promiscuous mode [ 64.049753][ T4541] macsec1: entered promiscuous mode [ 64.136619][ T4549] netlink: 192 bytes leftover after parsing attributes in process `syz.1.417'. [ 64.541492][ T4553] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 64.565848][ T4560] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 64.594220][ T4560] SELinux: failed to load policy [ 64.668918][ T4568] SELinux: failed to load policy [ 64.821197][ T4581] netlink: 28 bytes leftover after parsing attributes in process `syz.0.431'. [ 64.860128][ T1724] kworker/u8:6: attempt to access beyond end of device [ 64.860128][ T1724] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 65.171489][ T4590] netlink: 'syz.0.436': attribute type 1 has an invalid length. [ 65.186585][ T4590] bond1: entered promiscuous mode [ 65.192396][ T4590] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.378851][ T4600] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 65.388778][ T4600] SELinux: failed to load policy [ 65.394215][ T4595] loop1: detected capacity change from 0 to 1024 [ 65.404426][ T4595] EXT4-fs: Ignoring removed bh option [ 65.410145][ T4595] EXT4-fs: inline encryption not supported [ 65.423118][ T4595] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 65.438299][ T4595] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 65.448323][ T4595] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.438: lblock 2 mapped to illegal pblock 2 (length 1) [ 65.462702][ T4595] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.438: lblock 0 mapped to illegal pblock 48 (length 1) [ 65.478360][ T4595] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.438: Failed to acquire dquot type 0 [ 65.490362][ T4595] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 65.500893][ T4595] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.438: mark_inode_dirty error [ 65.530800][ T4595] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 65.541932][ T4595] EXT4-fs (loop1): 1 orphan inode deleted [ 65.548301][ T4595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.569106][ T292] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 65.578120][ T4607] SELinux: failed to load policy [ 65.599083][ T292] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 65.616766][ T4602] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 65.666137][ T4611] netlink: 'syz.3.443': attribute type 10 has an invalid length. [ 65.674769][ T4611] team0: Device hsr_slave_0 failed to register rx_handler [ 65.700530][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.711721][ T3303] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 65.727688][ T3303] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 65.749912][ T3303] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 65.774615][ T4619] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4619 comm=syz.3.448 [ 65.874476][ T4623] netlink: 28 bytes leftover after parsing attributes in process `syz.1.446'. [ 66.012165][ T4627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.451'. [ 66.030534][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 66.030550][ T29] audit: type=1400 audit(1757626364.942:2435): avc: denied { nlmsg_write } for pid=4626 comm="syz.1.451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 66.059239][ T29] audit: type=1400 audit(1757626364.942:2436): avc: denied { ioctl } for pid=4626 comm="syz.1.451" path="socket:[8908]" dev="sockfs" ino=8908 ioctlcmd=0x5820 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 66.083998][ T29] audit: type=1400 audit(1757626364.972:2437): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 66.105354][ T29] audit: type=1400 audit(1757626365.002:2438): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 66.129334][ T29] audit: type=1400 audit(1757626365.042:2439): avc: denied { read } for pid=4628 comm="syz.1.452" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.153885][ T29] audit: type=1400 audit(1757626365.042:2440): avc: denied { open } for pid=4628 comm="syz.1.452" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.178063][ T29] audit: type=1400 audit(1757626365.042:2441): avc: denied { execmem } for pid=4628 comm="syz.1.452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 66.342168][ T29] audit: type=1400 audit(1757626365.252:2442): avc: denied { ioctl } for pid=4628 comm="syz.1.452" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 66.567384][ T29] audit: type=1400 audit(1757626365.472:2443): avc: denied { read } for pid=4632 comm="syz.2.453" dev="nsfs" ino=4026532495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.589340][ T29] audit: type=1400 audit(1757626365.472:2444): avc: denied { open } for pid=4632 comm="syz.2.453" path="net:[4026532495]" dev="nsfs" ino=4026532495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 66.665057][ T4635] SELinux: failed to load policy [ 66.743449][ T4643] netlink: 'syz.2.458': attribute type 10 has an invalid length. [ 66.782156][ T4643] team0: Device hsr_slave_0 failed to register rx_handler [ 66.803960][ T4647] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=4647 comm=syz.3.460 [ 66.918433][ T4658] SELinux: syz.0.465 (4658) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 67.436926][ T4668] SELinux: failed to load policy [ 67.473257][ T4670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.468'. [ 67.485172][ T4675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 67.505296][ T4675] hsr0: entered promiscuous mode [ 67.510612][ T4639] loop4: detected capacity change from 0 to 1024 [ 67.516025][ T4675] macsec1: entered promiscuous mode [ 67.519375][ T4639] EXT4-fs: Ignoring removed bh option [ 67.529182][ T4639] EXT4-fs: inline encryption not supported [ 67.542718][ T4639] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 67.553802][ T4639] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 67.571614][ T4639] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.456: lblock 2 mapped to illegal pblock 2 (length 1) [ 67.604568][ T4639] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.456: lblock 0 mapped to illegal pblock 48 (length 1) [ 67.619708][ T4639] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.456: Failed to acquire dquot type 0 [ 67.631417][ T4639] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 67.641600][ T4639] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.456: mark_inode_dirty error [ 67.666540][ T4639] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 67.670962][ T4680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.471'. [ 67.678614][ T4639] EXT4-fs (loop4): 1 orphan inode deleted [ 67.693629][ T4639] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.707724][ T31] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 67.732943][ T31] EXT4-fs error (device loop4): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 67.805771][ T4684] netlink: 'syz.3.473': attribute type 10 has an invalid length. [ 67.813899][ T4684] team0: Device hsr_slave_0 failed to register rx_handler [ 67.920764][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.930204][ T3304] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 67.944963][ T3304] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 67.954750][ T3304] EXT4-fs error (device loop4): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 68.094097][ T4703] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 68.716953][ T4709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.483'. [ 68.781508][ T4715] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 69.193404][ T4709] syz.3.483 (4709) used greatest stack depth: 10368 bytes left [ 69.259832][ T4727] SELinux: policydb magic number 0x1a does not match expected magic number 0xf97cff8c [ 69.302997][ T4727] SELinux: failed to load policy [ 70.159765][ T4752] netlink: 28 bytes leftover after parsing attributes in process `syz.4.498'. [ 70.314705][ T4764] netlink: 'syz.4.504': attribute type 10 has an invalid length. [ 70.330584][ T4764] team0: Device hsr_slave_0 failed to register rx_handler [ 70.400932][ T4775] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 70.419203][ T4775] SELinux: failed to load policy [ 70.449531][ T4781] netlink: 36 bytes leftover after parsing attributes in process `syz.3.512'. [ 70.526359][ T4785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.514'. [ 70.554290][ T4787] tipc: Started in network mode [ 70.559331][ T4787] tipc: Node identity e6c96e8050b7, cluster identity 4711 [ 70.566664][ T4787] tipc: Enabled bearer , priority 0 [ 70.578906][ T4787] tipc: Resetting bearer [ 70.585969][ T4795] netlink: 'syz.4.519': attribute type 10 has an invalid length. [ 70.595099][ T4786] tipc: Disabling bearer [ 70.608815][ T4795] team0: Device hsr_slave_0 failed to register rx_handler [ 70.674056][ T4803] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 70.684394][ T4803] SELinux: failed to load policy [ 70.949652][ T4829] kernel profiling enabled (shift: 17) [ 71.112481][ T4831] loop1: detected capacity change from 0 to 1024 [ 71.121638][ T4831] EXT4-fs: Ignoring removed bh option [ 71.128499][ T4831] EXT4-fs: inline encryption not supported [ 71.135317][ T4831] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 71.151030][ T4831] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 71.160829][ T4831] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.534: lblock 2 mapped to illegal pblock 2 (length 1) [ 71.175181][ T4831] __quota_error: 130 callbacks suppressed [ 71.175253][ T4831] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 71.190466][ T4831] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.534: lblock 0 mapped to illegal pblock 48 (length 1) [ 71.205436][ T4831] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 71.214598][ T4831] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.534: Failed to acquire dquot type 0 [ 71.228198][ T4831] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 71.239255][ T4831] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.534: mark_inode_dirty error [ 71.251194][ T4831] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 71.262587][ T4831] EXT4-fs (loop1): 1 orphan inode deleted [ 71.269202][ T4831] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.282424][ T12] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 71.297984][ T12] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 71.306552][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 71.320252][ T29] audit: type=1400 audit(1757626370.232:2572): avc: denied { mount } for pid=4827 comm="syz.1.534" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.369629][ T29] audit: type=1400 audit(1757626370.272:2573): avc: denied { read } for pid=4821 comm="syz.4.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 71.436751][ T29] audit: type=1400 audit(1757626370.342:2574): avc: denied { unmount } for pid=3303 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 71.468709][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.487886][ T3303] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 71.515240][ T3303] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 71.527752][ T3303] EXT4-fs error (device loop1): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 71.551974][ T29] audit: type=1400 audit(1757626370.462:2575): avc: denied { read write } for pid=3303 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.576374][ T29] audit: type=1400 audit(1757626370.462:2576): avc: denied { open } for pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.724518][ T29] audit: type=1400 audit(1757626370.522:2577): avc: denied { ioctl } for pid=3303 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.751457][ T29] audit: type=1400 audit(1757626370.532:2578): avc: denied { create } for pid=4834 comm="syz.1.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 71.780561][ T4845] __nla_validate_parse: 2 callbacks suppressed [ 71.780579][ T4845] netlink: 36 bytes leftover after parsing attributes in process `syz.3.540'. [ 71.940507][ T4857] netlink: 24 bytes leftover after parsing attributes in process `syz.1.545'. [ 72.018529][ T4858] loop3: detected capacity change from 0 to 512 [ 72.025280][ T4858] EXT4-fs: test_dummy_encryption option not supported [ 72.065223][ T4868] netlink: 28 bytes leftover after parsing attributes in process `syz.0.551'. [ 72.752854][ T4883] netlink: 36 bytes leftover after parsing attributes in process `syz.3.557'. [ 73.075244][ T4906] loop0: detected capacity change from 0 to 512 [ 73.082193][ T4906] EXT4-fs: test_dummy_encryption option not supported [ 73.591582][ T4911] netlink: 36 bytes leftover after parsing attributes in process `syz.1.569'. [ 74.278549][ T4913] Set syz1 is full, maxelem 65536 reached [ 74.816650][ T4955] SELinux: syz.0.587 (4955) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 75.305389][ T4972] netlink: 'syz.4.594': attribute type 10 has an invalid length. [ 75.314479][ T4972] team0: Device hsr_slave_0 failed to register rx_handler [ 75.537097][ T4988] loop4: detected capacity change from 0 to 512 [ 75.543824][ T4988] EXT4-fs: test_dummy_encryption option not supported [ 75.631696][ T5003] netlink: 'syz.2.608': attribute type 10 has an invalid length. [ 75.640482][ T5003] team0: Device hsr_slave_0 failed to register rx_handler [ 75.751904][ T5009] netlink: 28 bytes leftover after parsing attributes in process `syz.2.611'. [ 76.342669][ T5027] netlink: 'syz.4.620': attribute type 10 has an invalid length. [ 76.351375][ T5027] team0: Device hsr_slave_0 failed to register rx_handler [ 76.410226][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 76.410244][ T29] audit: type=1400 audit(1757626375.322:2923): avc: denied { read } for pid=5033 comm="syz.3.623" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.435876][ T5034] SELinux: failed to load policy [ 76.438500][ T29] audit: type=1400 audit(1757626375.322:2924): avc: denied { open } for pid=5033 comm="syz.3.623" path="net:[4026532384]" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 76.470285][ T29] audit: type=1400 audit(1757626375.322:2925): avc: denied { create } for pid=5033 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 76.484107][ T5037] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.490508][ T29] audit: type=1400 audit(1757626375.322:2926): avc: denied { bind } for pid=5033 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 76.506914][ T5037] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.518408][ T29] audit: type=1400 audit(1757626375.342:2927): avc: denied { load_policy } for pid=5033 comm="syz.3.623" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 76.552144][ T29] audit: type=1400 audit(1757626375.392:2928): avc: denied { read write } for pid=5036 comm="syz.3.624" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.575905][ T29] audit: type=1400 audit(1757626375.392:2929): avc: denied { open } for pid=5036 comm="syz.3.624" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.599629][ T29] audit: type=1400 audit(1757626375.392:2930): avc: denied { ioctl } for pid=5036 comm="syz.3.624" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 76.816435][ T5043] loop2: detected capacity change from 0 to 512 [ 76.823361][ T5043] EXT4-fs: test_dummy_encryption option not supported [ 77.146101][ T5046] bridge_slave_0: left allmulticast mode [ 77.151915][ T5046] bridge_slave_0: left promiscuous mode [ 77.157720][ T5046] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.169495][ T5046] bridge_slave_1: left allmulticast mode [ 77.175204][ T5046] bridge_slave_1: left promiscuous mode [ 77.180985][ T5046] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.190621][ T5051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.627'. [ 77.208221][ T5046] bond0: (slave bond_slave_0): Releasing backup interface [ 77.219292][ T5046] bond0: (slave bond_slave_1): Releasing backup interface [ 77.231337][ T5046] team0: Port device team_slave_0 removed [ 77.241388][ T5046] team0: Port device team_slave_1 removed [ 77.248709][ T5046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.256333][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.265450][ T5046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.273214][ T5046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.450937][ T29] audit: type=1400 audit(1757626376.362:2931): avc: denied { read } for pid=5068 comm="syz.4.636" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.475681][ T29] audit: type=1400 audit(1757626376.362:2932): avc: denied { open } for pid=5068 comm="syz.4.636" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 77.561438][ T5071] loop4: detected capacity change from 0 to 512 [ 77.580257][ T5071] EXT4-fs (loop4): blocks per group (95) and clusters per group (32768) inconsistent [ 77.703035][ T5075] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 77.713053][ T5075] SELinux: failed to load policy [ 77.906022][ T5046] syz.3.627 (5046) used greatest stack depth: 10352 bytes left [ 77.927894][ T5082] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 78.296109][ T5100] loop3: detected capacity change from 0 to 1024 [ 78.318620][ T5100] EXT4-fs: Ignoring removed bh option [ 78.324949][ T5100] EXT4-fs: inline encryption not supported [ 78.336289][ T5100] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 78.349709][ T5100] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 78.359914][ T5100] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.648: lblock 2 mapped to illegal pblock 2 (length 1) [ 78.376486][ T5100] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.648: lblock 0 mapped to illegal pblock 48 (length 1) [ 78.392472][ T5100] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.648: Failed to acquire dquot type 0 [ 78.405317][ T5100] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 78.416521][ T5100] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.648: mark_inode_dirty error [ 78.430291][ T5100] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 78.443295][ T5100] EXT4-fs (loop3): 1 orphan inode deleted [ 78.450695][ T5100] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.464308][ T1724] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 78.480750][ T1724] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 78.564258][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.574207][ T3302] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 78.588846][ T3302] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 78.599054][ T3302] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 78.629914][ T5104] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 78.640337][ T5104] SELinux: failed to load policy [ 79.355426][ T5128] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 79.365266][ T5128] SELinux: failed to load policy [ 79.911327][ T5144] netlink: 'syz.0.668': attribute type 1 has an invalid length. [ 79.925601][ T5144] bond2: entered promiscuous mode [ 79.931031][ T5144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.159892][ T5151] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 80.268128][ T5167] SELinux: syz.2.677 (5167) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 80.653480][ T5181] SELinux: failed to load policy [ 81.284631][ T5199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.692'. [ 81.298657][ T5199] syzkaller1: entered promiscuous mode [ 81.304183][ T5199] syzkaller1: entered allmulticast mode [ 81.409275][ T5205] netlink: 'syz.1.695': attribute type 10 has an invalid length. [ 81.424232][ T5205] team0: Device hsr_slave_0 failed to register rx_handler [ 81.460954][ T29] kauditd_printk_skb: 626 callbacks suppressed [ 81.460972][ T29] audit: type=1400 audit(1757626380.372:3556): avc: denied { allowed } for pid=5210 comm="syz.1.698" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 81.501191][ T29] audit: type=1400 audit(1757626380.382:3557): avc: denied { create } for pid=5210 comm="syz.1.698" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.522759][ T29] audit: type=1400 audit(1757626380.382:3558): avc: denied { map } for pid=5210 comm="syz.1.698" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.531215][ T5209] SELinux: failed to load policy [ 81.552793][ T29] audit: type=1400 audit(1757626380.382:3559): avc: denied { read write } for pid=5210 comm="syz.1.698" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=10116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 81.633003][ T5220] loop4: detected capacity change from 0 to 128 [ 81.651824][ T29] audit: type=1400 audit(1757626380.562:3560): avc: denied { mounton } for pid=5219 comm="syz.4.702" path="/166/file1" dev="tmpfs" ino=869 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 81.682312][ T29] audit: type=1400 audit(1757626380.592:3561): avc: denied { mount } for pid=5219 comm="syz.4.702" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 81.706924][ T29] audit: type=1400 audit(1757626380.602:3562): avc: denied { name_bind } for pid=5224 comm="syz.0.703" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 81.873796][ T5225] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 81.972569][ T5236] netlink: 192 bytes leftover after parsing attributes in process `syz.4.702'. [ 82.269138][ T29] audit: type=1400 audit(1757626381.182:3563): avc: denied { read } for pid=5238 comm="syz.0.710" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 82.293627][ T29] audit: type=1400 audit(1757626381.182:3564): avc: denied { open } for pid=5238 comm="syz.0.710" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 82.459720][ T5248] SELinux: failed to load policy [ 82.517833][ T29] audit: type=1400 audit(1757626381.432:3565): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 82.541924][ T31] kworker/u8:1: attempt to access beyond end of device [ 82.541924][ T31] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 84.766848][ T5299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.787088][ T5299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.183420][ T5321] netlink: 28 bytes leftover after parsing attributes in process `syz.4.744'. [ 85.198103][ T5321] syzkaller1: entered promiscuous mode [ 85.204147][ T5321] syzkaller1: entered allmulticast mode [ 85.515991][ T5330] loop3: detected capacity change from 0 to 1024 [ 85.567767][ T5330] EXT4-fs: Ignoring removed bh option [ 85.582728][ T5330] EXT4-fs: inline encryption not supported [ 85.609868][ T5330] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 85.641992][ T5330] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 85.657911][ T5330] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.746: lblock 2 mapped to illegal pblock 2 (length 1) [ 85.709892][ T5330] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.746: lblock 0 mapped to illegal pblock 48 (length 1) [ 85.744335][ T5330] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.746: Failed to acquire dquot type 0 [ 85.757126][ T5347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.752'. [ 85.811648][ T5330] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 85.839184][ T5330] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.746: mark_inode_dirty error [ 85.851316][ T5330] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 85.863883][ T5330] EXT4-fs (loop3): 1 orphan inode deleted [ 85.872904][ T5330] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.886268][ T51] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 85.918828][ T51] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 85.996638][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.009989][ T3302] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 86.024008][ T3302] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 86.035015][ T3302] EXT4-fs error (device loop3): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 86.076490][ T5358] SELinux: syz.4.758 (5358) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 86.485635][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 86.485649][ T29] audit: type=1400 audit(1757626385.392:3606): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.542741][ T5364] netlink: 16 bytes leftover after parsing attributes in process `syz.2.760'. [ 86.551759][ T5364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.760'. [ 86.562379][ T29] audit: type=1400 audit(1757626385.432:3607): avc: denied { unmount } for pid=3309 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 86.583042][ T29] audit: type=1400 audit(1757626385.432:3608): avc: denied { read } for pid=5361 comm="syz.3.759" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 86.605308][ T29] audit: type=1400 audit(1757626385.432:3609): avc: denied { open } for pid=5361 comm="syz.3.759" path="net:[4026532384]" dev="nsfs" ino=4026532384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 86.629736][ T29] audit: type=1400 audit(1757626385.432:3610): avc: denied { create } for pid=5361 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.650023][ T29] audit: type=1400 audit(1757626385.442:3611): avc: denied { bind } for pid=5361 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.670234][ T29] audit: type=1400 audit(1757626385.442:3612): avc: denied { open } for pid=5361 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.689808][ T29] audit: type=1400 audit(1757626385.442:3613): avc: denied { kernel } for pid=5361 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.709879][ T29] audit: type=1400 audit(1757626385.442:3614): avc: denied { tracepoint } for pid=5361 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 86.729945][ T29] audit: type=1400 audit(1757626385.442:3615): avc: denied { setopt } for pid=5361 comm="syz.3.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.011441][ T5377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.761'. [ 87.750424][ T5393] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 88.293560][ T5419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.783'. [ 89.072695][ T5454] 9pnet_fd: Insufficient options for proto=fd [ 89.216788][ T5470] netlink: 'syz.2.807': attribute type 10 has an invalid length. [ 89.225294][ T5470] team0: Device hsr_slave_0 failed to register rx_handler [ 89.329366][ T5475] netlink: 24 bytes leftover after parsing attributes in process `syz.2.808'. [ 89.810087][ T5479] 9pnet_fd: Insufficient options for proto=fd [ 90.020913][ T5464] syz.1.804 (5464) used greatest stack depth: 9520 bytes left [ 90.042477][ T5489] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 90.052827][ T5489] SELinux: failed to load policy [ 90.104601][ T5497] loop1: detected capacity change from 0 to 512 [ 90.112991][ T5497] EXT4-fs: Ignoring removed oldalloc option [ 90.122080][ T5497] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 90.145027][ T5497] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 90.152777][ T5499] netlink: 'syz.0.820': attribute type 10 has an invalid length. [ 90.169298][ T5499] team0: Device hsr_slave_0 failed to register rx_handler [ 90.170425][ T5503] 9pnet_fd: Insufficient options for proto=fd [ 90.184526][ T5497] EXT4-fs (loop1): 1 truncate cleaned up [ 90.191820][ T5497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.261714][ T3303] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.294451][ T3303] ================================================================== [ 90.302572][ T3303] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 90.310153][ T3303] [ 90.312487][ T3303] read-write to 0xffff888237d25ea8 of 1 bytes by task 5507 on cpu 1: [ 90.320773][ T3303] folio_add_lru+0xa5/0x1f0 [ 90.325494][ T3303] shmem_get_folio_gfp+0x7ab/0xd60 [ 90.330755][ T3303] shmem_fault+0xf6/0x250 [ 90.335298][ T3303] __do_fault+0xb9/0x200 [ 90.339871][ T3303] handle_mm_fault+0xf78/0x2c20 [ 90.344928][ T3303] __get_user_pages+0x102e/0x1fa0 [ 90.350054][ T3303] __mm_populate+0x243/0x3a0 [ 90.354764][ T3303] vm_mmap_pgoff+0x232/0x2e0 [ 90.359789][ T3303] ksys_mmap_pgoff+0xc2/0x310 [ 90.364493][ T3303] x64_sys_call+0x14a3/0x2ff0 [ 90.369287][ T3303] do_syscall_64+0xd2/0x200 [ 90.373904][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.379907][ T3303] [ 90.382253][ T3303] read to 0xffff888237d25ea8 of 1 bytes by task 3303 on cpu 0: [ 90.389796][ T3303] __lru_add_drain_all+0x12b/0x3f0 [ 90.394917][ T3303] lru_add_drain_all+0x10/0x20 [ 90.399683][ T3303] invalidate_bdev+0x47/0x70 [ 90.404368][ T3303] ext4_put_super+0x624/0x7d0 [ 90.409055][ T3303] generic_shutdown_super+0xe6/0x210 [ 90.414344][ T3303] kill_block_super+0x2a/0x70 [ 90.419027][ T3303] ext4_kill_sb+0x42/0x80 [ 90.423371][ T3303] deactivate_locked_super+0x72/0x1c0 [ 90.429283][ T3303] deactivate_super+0x97/0xa0 [ 90.434153][ T3303] cleanup_mnt+0x269/0x2e0 [ 90.438673][ T3303] __cleanup_mnt+0x19/0x20 [ 90.443106][ T3303] task_work_run+0x12e/0x1a0 [ 90.447709][ T3303] exit_to_user_mode_loop+0xe4/0x100 [ 90.453004][ T3303] do_syscall_64+0x1d6/0x200 [ 90.457888][ T3303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.463878][ T3303] [ 90.466217][ T3303] value changed: 0x07 -> 0x09 [ 90.471033][ T3303] [ 90.473355][ T3303] Reported by Kernel Concurrency Sanitizer on: [ 90.479684][ T3303] CPU: 0 UID: 0 PID: 3303 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 90.489674][ T3303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 90.499861][ T3303] ================================================================== [ 90.534802][ T5507] loop0: detected capacity change from 0 to 1024 [ 90.558494][ T5507] EXT4-fs: Ignoring removed bh option [ 90.573163][ T5507] EXT4-fs: inline encryption not supported [ 90.586705][ T5507] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 90.598521][ T5507] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 90.607914][ T5507] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.823: lblock 2 mapped to illegal pblock 2 (length 1) [ 90.622135][ T5507] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.823: lblock 0 mapped to illegal pblock 48 (length 1) [ 90.636887][ T5507] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.823: Failed to acquire dquot type 0 [ 90.650102][ T5507] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 90.659959][ T5507] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.823: mark_inode_dirty error [ 90.671523][ T5507] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 90.681973][ T5507] EXT4-fs (loop0): 1 orphan inode deleted [ 90.688275][ T5507] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.703222][ T292] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 90.726244][ T292] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 90.776026][ T3308] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.785611][ T3308] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 90.799057][ T3308] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 90.808618][ T3308] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error