last executing test programs: 9.910517144s ago: executing program 0 (id=1841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b000001351c5105730000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) wait4(r3, &(0x7f0000000300), 0x1, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='f2fs_filemap_fault\x00', r1, 0x0, 0xe17}, 0x78) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000280)='./file0\x00', 0x200000, &(0x7f00000026c0)={[{@check_relaxed}, {@check_strict}, {}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@overriderock}, {@map_normal}, {@check_strict}, {@utf8}, {@mode={'mode', 0x3d, 0x4}}, {@showassoc}]}, 0xff, 0x416, &(0x7f0000000c40)="$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") chroot(&(0x7f0000001080)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fcntl$getown(r4, 0x9) ptrace$peeksig(0x4209, r6, &(0x7f0000000240)={0x6, 0x1, 0x1}, &(0x7f0000000340)=[{}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r5, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 9.334750799s ago: executing program 0 (id=1845): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 5.039716506s ago: executing program 0 (id=1845): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 5.005970948s ago: executing program 0 (id=1885): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0xe, &(0x7f0000000400)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3266}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x0) 4.899617446s ago: executing program 0 (id=1890): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="5fa225bddf60f3a134d9a6a40000"], 0x14}, 0x1, 0x0, 0x0, 0x20008804}, 0x40000a4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, 0x0, 0x138) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) 3.649446714s ago: executing program 0 (id=1901): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000001240), &(0x7f0000001280)='./file0\x00', 0x0, &(0x7f00000012c0), 0x1, 0x1240, &(0x7f0000001300)="$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") sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000ffff27bd700004dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fdb75f0505000200140012800c0001006d616376746170000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x2054) 2.288099501s ago: executing program 4 (id=1914): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = io_uring_setup(0x68f5, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016e}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x10000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x5}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9\xd3F\xaa\xa2fUk@\xeb\xb5~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\x1c~\xcd\xe4\x8e\xed\xd3\xde\x8e{0~\xd5\r\xa2\x80\xad\xe2=\b$\xba\x84\xebO\xaf\x8d\x86s\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7$\r\x1d\xbb\xc5\xb9q\xe0\xc1\xec\xee\x1fu\xa1\x00\xb0\x8d\x9dS\xfa\x18\xaaO\"\xcb#\xc2\xb2\xefrW\x01\x94\xeb\xcf\xf2\xc7\xf6^\x9c\xbe\x1f7\xd6\xac\xd7\x14xk\xa6\x163\xba\xe3\xed\xc8\x04L\x9c\xf0\xe1\tJ5\x9c\xf1\xb6\x9cIm\x85N\xf6(>\xb5q\xdc\xc39\xd1\xae\x14?\xc3\xa2Z\x8e\x88\x9b\\\x90D *)\x92Rz3L\xa7R\x880\x8e\xb9B\xf1` FaJn\'\xe7\x1c\xaa\xc2\x81\x1b\x80\xb5\x89)\x86\xa0K.nM!\xb8)w\xc9\a{l\x80\xf3\xf0)\xef\x8e\x1cL\x00Z=\xd6&_\"\x95,\x14\x0f\x92\xed\xc0\xf6/LL\xbfY\xaa') bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)=@newtfilter={0x154, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {}, {0xe, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x120, 0x2, [@TCA_MATCHALL_ACT={0x11c, 0x2, [@m_sample={0xf4, 0x4, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x7, 0x3, 0x408, 0x1}}, @TCA_SAMPLE_RATE={0x0, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3fa5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x40}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x101}]}, {0x51, 0x6, "ccb78c66676d4fb4e342d7051a76bcd000024c27827a57786aaf04fdf1454980a8e39c662ca0c63ba23b405a9d4847b30da70d175a0e5ada0b76df608edace269abac2d32f47096bb5b6e8c120"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x40, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xd}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 2.157916191s ago: executing program 4 (id=1916): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x1) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup2(r1, r1) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r3, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4040801}, 0x20008840) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, &(0x7f00000001c0)=0x1, 0x4) process_vm_writev(0x0, &(0x7f0000000240)=[{0x0}, {0x0}, {&(0x7f0000000400)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) 2.022978402s ago: executing program 4 (id=1917): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1}}, 0x20) 2.022799991s ago: executing program 4 (id=1918): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$unlink(0x9, r0, 0xfffffffffffffffc) 2.019705242s ago: executing program 2 (id=1919): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x2, &(0x7f0000001500)=[{0x4, 0x4}, {0x6, 0xff, 0x0, 0x7fff0000}]}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x40d, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) getcwd(&(0x7f0000000080)=""/14, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='kfree\x00', r1, 0x0, 0x2144}, 0x18) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r4}, 0x18) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x5, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000bc0], 0x11, 0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"]}, 0x279) sendmsg$TIPC_NL_KEY_SET(r0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r6) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4045}, 0x4000054) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000f303010000000000000000000a00000a14"], 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000", @ANYRES16=r9, @ANYBLOB="0008263d7000ffdbdf253a00000008000300", @ANYRES32=r11], 0xb8}, 0x1, 0x0, 0x0, 0x190}, 0x20000000) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r13}, 0x10) r14 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r14, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000ed", @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf256700000008000300", @ANYRES32=r11, @ANYBLOB="0c009900030000001a0000000800c400000000000800c40035000000"], 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x80) 1.966141926s ago: executing program 4 (id=1920): r0 = epoll_create1(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x28002019}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, &(0x7f0000000240)=0x468, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8d}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x2, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000005e00010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000af06e06f271afedbaf50da00"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4008c00) sched_setaffinity(0x0, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x8, 0x6, 0x1, 0x3b802, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.777280101s ago: executing program 3 (id=1921): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 1.691583008s ago: executing program 3 (id=1922): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 1.505606892s ago: executing program 3 (id=1924): socket(0x2, 0x80805, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x1c, r0, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x0) 1.424299029s ago: executing program 2 (id=1925): fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x7040, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0xb}]}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0xc0000) r4 = dup3(r3, r2, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000000)=0x17) 1.423807319s ago: executing program 3 (id=1926): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20100}, 0x44010) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x1f, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.301172618s ago: executing program 3 (id=1928): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000f0000000000000c00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000009c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a0002007000000000000000"], 0xf0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r6, 0x8983, &(0x7f0000000000)) getsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f0000000800)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000900)=0xe8) quotactl$Q_SETQUOTA(0x80000000c0001400, &(0x7f00000007c0)=@loop={'/dev/loop', 0x0}, r7, &(0x7f0000000940)={0x7f, 0x6, 0xa, 0x8, 0x7ea7, 0xffff, 0x7, 0x93, 0x65}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) fsopen(0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r9}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x1000}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8927, &(0x7f0000000080)) close(r3) 1.28406661s ago: executing program 1 (id=1929): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) 1.122709072s ago: executing program 1 (id=1930): syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000ac0)={[], [{@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fowner_lt}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@euid_eq}, {@subj_type={'subj_type', 0x3d, 'e\xf9A\x13\xcb\x8607&\xe6c\xf7\x18l\xe6\xaf\xff\xff\xff\x98q\x14\xc1\xf9\x8f\xae\xb1\x0e\x9ag\x9c\xd1\x7f\xe0\x19j'}}, {@fscontext={'fscontext', 0x3d, 'system_u'}}, {@subj_type={'subj_type', 0x3d, '\xd8\x90\xa5\x03\xc1X\x00\x0f\xe3i|`8%&\xbf\xa1\x7f<\x9d\xea\xba\xd8|h%\x9c\xbb\xea|\xbd\xcf\xb7\xc3\x83\xdb 0@h\x94\x1d\xa3=\x8cwN\xf1\xcc\x88\xbb\xcd\b\x91z\x17%`\x88\xed\xf6m\x04\xb6I\xf7ig\xa7\x06\xc6\xd0\x7f\xf0\x973\xbb%\xe0f\xf0N\xcf8\xd1l\xb7\xb8\x81\xb2\\\xb3\x05\x05\xb3m@[\xf8!5.\x06'}}, {@hash}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") sched_yield() r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000440)={[{@bsdgroups}, {@jqfmt_vfsv1}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 759.092051ms ago: executing program 1 (id=1931): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kfree\x00', r1, 0x0, 0x4}, 0x18) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0x0, 0x400, 0x0, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x7ff, 0x0, 0x1}) io_uring_enter(r3, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r2, 0x0, 0x0, 0x0, 0x44040001, 0x1}) 412.112108ms ago: executing program 2 (id=1932): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) removexattr(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)=@known='user.incfs.metadata\x00') 404.168869ms ago: executing program 1 (id=1933): sync() r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x40000) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x121041, 0x2) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x353a, 0x1}}, 0x20) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r4, 0x0, 0x3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001c00010429bd7000ffdbdf2507000000", @ANYRES32=r5, @ANYBLOB="e0ff8b0a0a00"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040040) 377.299351ms ago: executing program 2 (id=1934): pipe(&(0x7f0000000080)) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) 361.410572ms ago: executing program 3 (id=1935): syz_open_procfs(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0062ba5d8200"}) r2 = syz_open_pts(r1, 0x20800) dup3(r2, r1, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x44) socket$nl_sock_diag(0x10, 0x3, 0x4) close_range(r0, r0, 0x2) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) 200.487954ms ago: executing program 1 (id=1936): r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xdcb8, 0x10, 0x1, 0x2089}, &(0x7f0000000380)=0x0, &(0x7f0000000200)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mctp_key_release\x00', r2, 0x0, 0x803}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7f, 0x80000001, 0x6, 0x0, r4, 0xe3f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, 0xb}, 0x50) r7 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0xc0185879, &(0x7f0000000000)={@desc={0x1, 0x0, @auto='\x00\x00&\x00'}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x21, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x87, 0x0, 0x0, 0x0, 0x400}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@btf_id={0x18, 0x6, 0x3, 0x0, 0x1}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0x5, 0x1, 0x0, r5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0xffffff00, 0x5d, &(0x7f0000000580)=""/93, 0x40f00, 0x3c, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000000600)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x4, 0x6, 0x1c0, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000800)=[r4], &(0x7f0000000840)=[{0x1, 0x5, 0x10, 0x2}], 0x10, 0xf9a}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000005000000", @ANYRES32=r5, @ANYBLOB], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000010000100ffef0000000000001b00000a5c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000300003801c0000800c00018006000100d10300000c0004400000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, r9, 0xb842) unshare(0x20060400) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r11}, 0x18) sync_file_range(0xffffffffffffffff, 0x10000, 0x8, 0x7) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 161.224077ms ago: executing program 1 (id=1937): faccessat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xc9, 0x0, 0x0, 0x0, 0x0, 0x8, 0x94200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xc}, 0x0, 0x0, 0xfffffffb, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4000}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000000)='cpu&\t\t') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB='\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe2(&(0x7f0000000400), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r2}, 0x6c) openat(0xffffffffffffff9c, 0x0, 0x4040, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x2501, 0x0) ioctl$SNAPSHOT_FREE(r3, 0x3305) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$UHID_CREATE(r4, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000500)=""/18, 0x12, 0x3, 0x4, 0x0, 0x2, 0xc04}}, 0x120) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) 110.824011ms ago: executing program 4 (id=1938): socket$inet6(0xa, 0x3, 0x3c) socket$inet(0xa, 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r3 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rFd', @ANYRESHEX=r3, @ANYBLOB=',wfd', @ANYBLOB=',']) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="380000000314010030bd7000ffdbdf250900020073797a30000000000800410073697700140033007767310000000000f4ffff0600000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="9f00140000000500000002000014488acd06040006b803000000070000000061615f00"/49], 0x0, 0x31, 0x0, 0x1, 0xafe}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x8c, &(0x7f00000007c0)) 109.686672ms ago: executing program 2 (id=1939): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) copy_file_range(r1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) r5 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffb, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f00000000c0)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000080) bpf$MAP_CREATE(0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="0b000000050000000200000002"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000580)=ANY=[@ANYRES16, @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000001880)=[{{0x0, 0x4, &(0x7f00000010c0)=[{&(0x7f00000000c0)="c8", 0x1}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)=',', 0x1}], 0x11}}], 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x118, 0x29, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac0b}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817", @typed={0xc, 0x145, 0x0, 0x0, @u64=0xfffffffffffffffe}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x2004c000}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}, 0x1, 0x0, 0x0, 0x24040800}, 0x40044) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r13, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) 0s ago: executing program 2 (id=1940): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = io_uring_setup(0x68f5, &(0x7f00000002c0)={0x0, 0x48c7, 0x8, 0x0, 0x100016e}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x10000, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x5}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r4, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x1) prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9\xd3F\xaa\xa2fUk@\xeb\xb5~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\x1c~\xcd\xe4\x8e\xed\xd3\xde\x8e{0~\xd5\r\xa2\x80\xad\xe2=\b$\xba\x84\xebO\xaf\x8d\x86s\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7$\r\x1d\xbb\xc5\xb9q\xe0\xc1\xec\xee\x1fu\xa1\x00\xb0\x8d\x9dS\xfa\x18\xaaO\"\xcb#\xc2\xb2\xefrW\x01\x94\xeb\xcf\xf2\xc7\xf6^\x9c\xbe\x1f7\xd6\xac\xd7\x14xk\xa6\x163\xba\xe3\xed\xc8\x04L\x9c\xf0\xe1\tJ5\x9c\xf1\xb6\x9cIm\x85N\xf6(>\xb5q\xdc\xc39\xd1\xae\x14?\xc3\xa2Z\x8e\x88\x9b\\\x90D *)\x92Rz3L\xa7R\x880\x8e\xb9B\xf1` FaJn\'\xe7\x1c\xaa\xc2\x81\x1b\x80\xb5\x89)\x86\xa0K.nM!\xb8)w\xc9\a{l\x80\xf3\xf0)\xef\x8e\x1cL\x00Z=\xd6&_\"\x95,\x14\x0f\x92\xed\xc0\xf6/LL\xbfY\xaa') bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r5}, 0x10) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)=@newtfilter={0x154, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {}, {}, {0xe, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x120, 0x2, [@TCA_MATCHALL_ACT={0x11c, 0x2, [@m_sample={0xf4, 0x4, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x7, 0x3, 0x408, 0x1}}, @TCA_SAMPLE_RATE={0x0, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3fa5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x40}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x101}]}, {0x51, 0x6, "ccb78c66676d4fb4e342d7051a76bcd000024c27827a57786aaf04fdf1454980a8e39c662ca0c63ba23b405a9d4847b30da70d175a0e5ada0b76df608edace269abac2d32f47096bb5b6e8c120"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x40, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xd}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x154}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) kernel console output (not intermixed with test programs): peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 108.485504][T31347] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 108.515121][T31347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.535959][T31347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.687361][T31377] loop3: detected capacity change from 0 to 512 [ 108.704371][T31377] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 108.772737][T31377] loop3: detected capacity change from 0 to 2048 [ 108.810415][T31377] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 108.863736][T31379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1426'. [ 108.880989][T31377] EXT4-fs (loop3): shut down requested (0) [ 108.929179][T31377] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 108.938351][T31377] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 108.947792][T31377] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 108.968411][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 109.098991][T31414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1429'. [ 109.206697][T31443] bridge: RTM_NEWNEIGH with invalid ether address [ 109.512889][T31452] loop4: detected capacity change from 0 to 512 [ 109.525687][T31452] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1439: bg 0: block 248: padding at end of block bitmap is not set [ 109.582656][T31452] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1439: Failed to acquire dquot type 1 [ 109.632996][T31452] EXT4-fs (loop4): 1 truncate cleaned up [ 109.639152][T31490] netlink: 'syz.1.1442': attribute type 3 has an invalid length. [ 109.647735][T31452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.672362][T31491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1440'. [ 109.683050][T31452] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.691145][T31490] netlink: 'syz.1.1442': attribute type 3 has an invalid length. [ 109.695274][T31452] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.828665][T31499] bridge: RTM_NEWNEIGH with invalid ether address [ 109.899976][T31503] --map-set only usable from mangle table [ 110.123605][T31497] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 110.237390][T31497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.261227][T31497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.414992][T31929] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1460'. [ 110.425978][T31929] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 110.468971][T31929] loop3: detected capacity change from 0 to 1024 [ 110.480506][T31930] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1458'. [ 110.501424][T31929] ext4: Unknown parameter 'subj_type' [ 110.563181][T31920] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 110.576943][T31920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.598650][T31920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.706573][T31956] loop3: detected capacity change from 0 to 1024 [ 110.780874][T31962] siw: device registration error -23 [ 110.787806][T31956] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 110.799753][T31960] siw: device registration error -23 [ 110.840750][T31966] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1471'. [ 110.850836][T31956] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 110.891136][T31956] EXT4-fs (loop3): mount failed [ 110.919290][T31976] loop1: detected capacity change from 0 to 512 [ 110.962778][T31976] EXT4-fs (loop1): 1 orphan inode deleted [ 110.972009][T31976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.986167][T31976] ext4 filesystem being mounted at /313/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.030038][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.084220][ T29] kauditd_printk_skb: 928 callbacks suppressed [ 111.084239][ T29] audit: type=1326 audit(1765673215.629:19285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31979 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1989cf749 code=0x7ffc0000 [ 111.134092][ T29] audit: type=1326 audit(1765673215.669:19286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31979 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb1989cf749 code=0x7ffc0000 [ 111.158086][ T29] audit: type=1326 audit(1765673215.669:19287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31979 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1989cf749 code=0x7ffc0000 [ 111.181964][ T29] audit: type=1326 audit(1765673215.669:19288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31979 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fb1989cf749 code=0x7ffc0000 [ 111.206559][ T29] audit: type=1400 audit(1765673215.699:19289): avc: denied { setopt } for pid=31988 comm="syz.1.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.226877][ T29] audit: type=1326 audit(1765673215.699:19290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31979 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb1989cf783 code=0x7ffc0000 [ 111.251140][ T29] audit: type=1326 audit(1765673215.709:19291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31919 comm="syz.2.1457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f077653f749 code=0x7ffc0000 [ 111.252445][T31991] siw: device registration error -23 [ 111.283396][ T29] audit: type=1326 audit(1765673215.769:19292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31979 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb1989ce1ff code=0x7ffc0000 [ 111.310325][ T29] audit: type=1326 audit(1765673215.889:19293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31979 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fb1989cf7d7 code=0x7ffc0000 [ 111.337587][T31995] siw: device registration error -23 [ 111.352647][ T29] audit: type=1326 audit(1765673215.939:19294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31979 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb1989cdf90 code=0x7ffc0000 [ 111.406776][T31999] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1484'. [ 111.422801][T32001] loop3: detected capacity change from 0 to 512 [ 111.459596][T32001] EXT4-fs (loop3): 1 orphan inode deleted [ 111.459638][T32004] loop4: detected capacity change from 0 to 512 [ 111.466197][T32001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.511523][T32001] ext4 filesystem being mounted at /282/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.529414][T32004] EXT4-fs (loop4): 1 orphan inode deleted [ 111.539820][T32004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.553460][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.563548][T32004] ext4 filesystem being mounted at /284/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.641243][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.803785][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.935253][T32039] siw: device registration error -23 [ 112.039468][T32050] capability: warning: `syz.0.1500' uses 32-bit capabilities (legacy support in use) [ 112.052195][T32050] 9p: Bad value for 'source' [ 112.063144][T32052] loop1: detected capacity change from 0 to 512 [ 112.083792][T32052] EXT4-fs (loop1): 1 orphan inode deleted [ 112.090084][T32052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.102607][T32052] ext4 filesystem being mounted at /319/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.297687][T32067] tipc: Trying to set illegal importance in message [ 112.633448][T32075] lo speed is unknown, defaulting to 1000 [ 112.710605][T32076] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.718566][T32076] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.728384][T32076] bridge0: entered allmulticast mode [ 112.757497][T32076] bridge_slave_1: left allmulticast mode [ 112.763806][T32076] bridge_slave_1: left promiscuous mode [ 112.771255][T32076] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.793946][T32076] bridge_slave_0: left allmulticast mode [ 112.802222][T32076] bridge_slave_0: left promiscuous mode [ 112.811548][T32076] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.857678][T32081] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=32081 comm=syz.3.1511 [ 112.896107][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.943960][T32088] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=32088 comm=syz.1.1513 [ 112.965494][T32081] loop3: detected capacity change from 0 to 512 [ 112.972857][T32088] loop1: detected capacity change from 0 to 512 [ 112.979293][T32081] EXT4-fs: Ignoring removed i_version option [ 112.985573][T32081] EXT4-fs: Ignoring removed bh option [ 112.989996][T32088] EXT4-fs: Ignoring removed i_version option [ 112.997296][T32088] EXT4-fs: Ignoring removed bh option [ 113.045631][T32081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.069600][T32081] ext4 filesystem being mounted at /288/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.073287][T32088] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.093442][T32092] loop2: detected capacity change from 0 to 512 [ 113.111933][T32092] ext4: Bad value for 'debug_want_extra_isize' [ 113.118418][T32088] ext4 filesystem being mounted at /320/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.135932][T32092] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1514'. [ 113.171186][T32092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1514'. [ 113.252557][T32101] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 113.253310][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.312684][T32106] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 113.352148][T32106] ext4: Unknown parameter 'subj_type' [ 113.410423][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.423016][T32117] bridge0: port 3(batadv0) entered blocking state [ 113.429739][T32117] bridge0: port 3(batadv0) entered disabled state [ 113.437180][T32117] batadv0: entered allmulticast mode [ 113.443537][T32117] batadv0: entered promiscuous mode [ 113.458388][T32121] random: crng reseeded on system resumption [ 113.468406][T32123] __nla_validate_parse: 2 callbacks suppressed [ 113.468424][T32123] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1525'. [ 113.503420][T32123] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 113.518490][T32123] ext4: Unknown parameter 'subj_type' [ 113.556776][T32121] syzkaller0: entered allmulticast mode [ 113.563016][T32121] syzkaller0: entered promiscuous mode [ 113.570328][T32121] syzkaller0 (unregistering): left allmulticast mode [ 113.577206][T32121] syzkaller0 (unregistering): left promiscuous mode [ 113.603177][T32132] FAULT_INJECTION: forcing a failure. [ 113.603177][T32132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.616964][T32132] CPU: 1 UID: 0 PID: 32132 Comm: syz.1.1527 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 113.617069][T32132] Tainted: [W]=WARN [ 113.617075][T32132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.617086][T32132] Call Trace: [ 113.617093][T32132] [ 113.617101][T32132] __dump_stack+0x1d/0x30 [ 113.617129][T32132] dump_stack_lvl+0xe8/0x140 [ 113.617190][T32132] dump_stack+0x15/0x1b [ 113.617212][T32132] should_fail_ex+0x265/0x280 [ 113.617258][T32132] should_fail+0xb/0x20 [ 113.617276][T32132] should_fail_usercopy+0x1a/0x20 [ 113.617384][T32132] _copy_from_user+0x1c/0xb0 [ 113.617416][T32132] do_ipv6_setsockopt+0x124/0x2160 [ 113.617484][T32132] ? kstrtoull+0x111/0x140 [ 113.617502][T32132] ? avc_has_perm_noaudit+0xab/0x130 [ 113.617522][T32132] ? selinux_netlbl_socket_setsockopt+0x1f9/0x2d0 [ 113.617589][T32132] ipv6_setsockopt+0x59/0x130 [ 113.617611][T32132] udpv6_setsockopt+0x99/0xb0 [ 113.617643][T32132] sock_common_setsockopt+0x69/0x80 [ 113.617667][T32132] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 113.617734][T32132] __sys_setsockopt+0x184/0x200 [ 113.617762][T32132] __x64_sys_setsockopt+0x64/0x80 [ 113.617827][T32132] x64_sys_call+0x21d5/0x3000 [ 113.617850][T32132] do_syscall_64+0xd8/0x2a0 [ 113.617926][T32132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.617950][T32132] RIP: 0033:0x7ff8a4f9f749 [ 113.617966][T32132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.617983][T32132] RSP: 002b:00007ff8a3a07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.618020][T32132] RAX: ffffffffffffffda RBX: 00007ff8a51f5fa0 RCX: 00007ff8a4f9f749 [ 113.618034][T32132] RDX: 000000000000002e RSI: 0000000000000029 RDI: 0000000000000003 [ 113.618047][T32132] RBP: 00007ff8a3a07090 R08: 0000000000000108 R09: 0000000000000000 [ 113.618059][T32132] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 113.618151][T32132] R13: 00007ff8a51f6038 R14: 00007ff8a51f5fa0 R15: 00007ffd3ced0308 [ 113.618169][T32132] [ 113.619138][T32130] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=32130 comm=syz.2.1528 [ 113.795383][T32119] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1524: bg 0: block 248: padding at end of block bitmap is not set [ 113.861415][T32130] EXT4-fs: Ignoring removed i_version option [ 113.867620][T32130] EXT4-fs: Ignoring removed bh option [ 113.881051][ T3518] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.887629][ T3557] Bluetooth: hci0: command 0x1003 tx timeout [ 113.895424][T32119] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1524: Failed to acquire dquot type 1 [ 113.901450][T32033] FAULT_INJECTION: forcing a failure. [ 113.901450][T32033] name failslab, interval 1, probability 0, space 0, times 0 [ 113.919904][T32033] CPU: 1 UID: 0 PID: 32033 Comm: syz.4.1494 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 113.919915][ T3661] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 113.919941][T32033] Tainted: [W]=WARN [ 113.919958][T32033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 113.919970][T32033] Call Trace: [ 113.919976][T32033] [ 113.919984][T32033] __dump_stack+0x1d/0x30 [ 113.920010][T32033] dump_stack_lvl+0xe8/0x140 [ 113.920032][T32033] dump_stack+0x15/0x1b [ 113.920052][T32033] should_fail_ex+0x265/0x280 [ 113.920132][T32033] should_failslab+0x8c/0xb0 [ 113.920154][T32033] kmem_cache_alloc_noprof+0x69/0x4b0 [ 113.920177][T32033] ? skb_clone+0x151/0x1f0 [ 113.920205][T32033] skb_clone+0x151/0x1f0 [ 113.920365][T32033] netlink_broadcast_filtered+0x561/0xd10 [ 113.920398][T32033] netlink_broadcast+0x37/0x50 [ 113.920425][T32033] kobject_uevent_net_broadcast+0x2a1/0x410 [ 113.920487][T32033] kobject_uevent_env+0x43d/0x570 [ 113.920513][T32033] kobject_uevent+0x1d/0x30 [ 113.920617][T32033] device_del+0x710/0x790 [ 113.920706][T32033] rfkill_unregister+0x80/0x170 [ 113.920738][T32033] hci_unregister_dev+0x26c/0x2b0 [ 113.920761][T32033] hci_uart_tty_close+0x115/0x170 [ 113.920790][T32033] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 113.920872][T32033] tty_ldisc_close+0x74/0xa0 [ 113.920899][T32033] tty_set_ldisc+0x1b9/0x380 [ 113.920919][T32033] tiocsetd+0x51/0x60 [ 113.920940][T32033] tty_ioctl+0xa79/0xb80 [ 113.920968][T32033] ? __pfx_tty_ioctl+0x10/0x10 [ 113.921043][T32033] __se_sys_ioctl+0xce/0x140 [ 113.921073][T32033] __x64_sys_ioctl+0x43/0x50 [ 113.921101][T32033] x64_sys_call+0x14b0/0x3000 [ 113.921244][T32033] do_syscall_64+0xd8/0x2a0 [ 113.921356][T32033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.921378][T32033] RIP: 0033:0x7f3e5004f749 [ 113.921396][T32033] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.921476][T32033] RSP: 002b:00007f3e4eab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.921526][T32033] RAX: ffffffffffffffda RBX: 00007f3e502a5fa0 RCX: 00007f3e5004f749 [ 113.921539][T32033] RDX: 0000200000000140 RSI: 0000000000005423 RDI: 0000000000000003 [ 113.921562][T32033] RBP: 00007f3e4eab7090 R08: 0000000000000000 R09: 0000000000000000 [ 113.921575][T32033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.921612][T32033] R13: 00007f3e502a6038 R14: 00007f3e502a5fa0 R15: 00007ffc36ac6338 [ 113.921631][T32033] [ 113.925539][T32119] EXT4-fs (loop3): 1 truncate cleaned up [ 113.931546][ T3661] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 113.972511][T32130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.975436][T32119] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.979870][T32130] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.013912][T32119] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.244750][T32151] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1532'. [ 114.254923][T32119] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.265414][T32151] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 114.284139][T32151] ext4: Unknown parameter 'subj_type' [ 114.363834][T32155] --map-set only usable from mangle table [ 114.403518][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.413486][T32160] FAULT_INJECTION: forcing a failure. [ 114.413486][T32160] name failslab, interval 1, probability 0, space 0, times 0 [ 114.426421][T32160] CPU: 1 UID: 0 PID: 32160 Comm: syz.0.1535 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 114.426524][T32160] Tainted: [W]=WARN [ 114.426532][T32160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.426544][T32160] Call Trace: [ 114.426550][T32160] [ 114.426558][T32160] __dump_stack+0x1d/0x30 [ 114.426632][T32160] dump_stack_lvl+0xe8/0x140 [ 114.426657][T32160] dump_stack+0x15/0x1b [ 114.426680][T32160] should_fail_ex+0x265/0x280 [ 114.426708][T32160] should_failslab+0x8c/0xb0 [ 114.426796][T32160] __kvmalloc_node_noprof+0x149/0x6b0 [ 114.426826][T32160] ? __se_sys_add_key+0x1ee/0x350 [ 114.426904][T32160] __se_sys_add_key+0x1ee/0x350 [ 114.426936][T32160] __x64_sys_add_key+0x67/0x80 [ 114.427028][T32160] x64_sys_call+0x2ea3/0x3000 [ 114.427128][T32160] do_syscall_64+0xd8/0x2a0 [ 114.427164][T32160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.427213][T32160] RIP: 0033:0x7fb1989cf749 [ 114.427231][T32160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.427318][T32160] RSP: 002b:00007fb197437038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 114.427340][T32160] RAX: ffffffffffffffda RBX: 00007fb198c25fa0 RCX: 00007fb1989cf749 [ 114.427356][T32160] RDX: 0000200000000840 RSI: 0000000000000000 RDI: 00002000000001c0 [ 114.427437][T32160] RBP: 00007fb197437090 R08: ffffffffffffffff R09: 0000000000000000 [ 114.427451][T32160] R10: 000000000000000c R11: 0000000000000246 R12: 0000000000000001 [ 114.427513][T32160] R13: 00007fb198c26038 R14: 00007fb198c25fa0 R15: 00007ffd62cbf1f8 [ 114.427531][T32160] [ 114.763424][T32174] netlink: 'syz.0.1540': attribute type 10 has an invalid length. [ 114.838031][T32174] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.846507][T32174] bond0: (slave team0): Enslaving as an active interface with an up link [ 114.869648][T32183] bridge: RTM_NEWNEIGH with invalid ether address [ 114.934225][T32191] set_capacity_and_notify: 6 callbacks suppressed [ 114.934243][T32191] loop3: detected capacity change from 0 to 512 [ 114.975394][T32191] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 115.049912][T32191] loop3: detected capacity change from 0 to 2048 [ 115.083581][T32191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 115.102533][T32194] serio: Serial port ptm2 [ 115.146254][T32191] EXT4-fs (loop3): shut down requested (0) [ 115.243169][T32200] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 115.243202][T32200] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 115.272477][T32200] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 115.309941][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 115.397526][T32203] loop4: detected capacity change from 0 to 164 [ 115.413765][T32203] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 115.431071][T32203] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 115.445606][T32203] Symlink component flag not implemented [ 115.451623][T32203] Symlink component flag not implemented [ 115.470781][T32203] Symlink component flag not implemented (7) [ 115.477007][T32203] Symlink component flag not implemented (116) [ 115.487240][T32203] netlink: 8 bytes leftover after parsing attributes in process `'. [ 115.496691][T32203] netlink: 8 bytes leftover after parsing attributes in process `'. [ 115.517523][T32203] netlink: 8 bytes leftover after parsing attributes in process `'. [ 115.540522][T32211] FAULT_INJECTION: forcing a failure. [ 115.540522][T32211] name failslab, interval 1, probability 0, space 0, times 0 [ 115.553673][T32211] CPU: 1 UID: 0 PID: 32211 Comm: syz.3.1552 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 115.553794][T32211] Tainted: [W]=WARN [ 115.553802][T32211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.553816][T32211] Call Trace: [ 115.553824][T32211] [ 115.553833][T32211] __dump_stack+0x1d/0x30 [ 115.553900][T32211] dump_stack_lvl+0xe8/0x140 [ 115.553920][T32211] dump_stack+0x15/0x1b [ 115.553940][T32211] should_fail_ex+0x265/0x280 [ 115.553967][T32211] should_failslab+0x8c/0xb0 [ 115.553994][T32211] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 115.554101][T32211] ? __alloc_skb+0x324/0x4d0 [ 115.554149][T32211] __alloc_skb+0x324/0x4d0 [ 115.554232][T32211] ? __alloc_skb+0x24d/0x4d0 [ 115.554257][T32211] netlink_alloc_large_skb+0xbf/0xf0 [ 115.554326][T32211] netlink_sendmsg+0x3cf/0x6b0 [ 115.554356][T32211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.554393][T32211] __sock_sendmsg+0x145/0x180 [ 115.554460][T32211] ____sys_sendmsg+0x31e/0x4a0 [ 115.554491][T32211] ___sys_sendmsg+0x17b/0x1d0 [ 115.554557][T32211] __x64_sys_sendmsg+0xd4/0x160 [ 115.554593][T32211] x64_sys_call+0x17ba/0x3000 [ 115.554621][T32211] do_syscall_64+0xd8/0x2a0 [ 115.554667][T32211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.554690][T32211] RIP: 0033:0x7f6c3dfff749 [ 115.554706][T32211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.554806][T32211] RSP: 002b:00007f6c3ca5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.554830][T32211] RAX: ffffffffffffffda RBX: 00007f6c3e255fa0 RCX: 00007f6c3dfff749 [ 115.554883][T32211] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 115.554896][T32211] RBP: 00007f6c3ca5f090 R08: 0000000000000000 R09: 0000000000000000 [ 115.554908][T32211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.554979][T32211] R13: 00007f6c3e256038 R14: 00007f6c3e255fa0 R15: 00007ffe50deb5e8 [ 115.555063][T32211] [ 115.555122][T32212] loop2: detected capacity change from 0 to 1024 [ 115.645569][T32203] netlink: 8 bytes leftover after parsing attributes in process `'. [ 115.789821][T32220] random: crng reseeded on system resumption [ 115.825053][T32220] Restarting kernel threads ... [ 115.844088][T32220] Done restarting kernel threads. [ 115.849455][T32221] loop1: detected capacity change from 0 to 512 [ 115.856952][T32221] EXT4-fs: Ignoring removed i_version option [ 115.863375][T32221] EXT4-fs: Ignoring removed bh option [ 115.872546][ T3496] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 115.880078][ T3496] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 115.887610][ T3496] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 115.895356][ T3496] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 115.902985][ T3496] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 115.910541][ T3496] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 115.918259][ T3496] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 115.925706][ T3496] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 115.933325][ T3496] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 115.940932][ T3496] hid-generic 0003:0004:0000.0001: unknown main item tag 0x0 [ 115.958124][ T3496] hid-generic 0003:0004:0000.0001: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 115.981987][T32227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1559'. [ 116.002387][T32227] batadv0 (unregistering): left allmulticast mode [ 116.009111][T32227] batadv0 (unregistering): left promiscuous mode [ 116.015597][T32227] bridge0: port 3(batadv0) entered disabled state [ 116.082532][T32221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.100817][ T29] kauditd_printk_skb: 387 callbacks suppressed [ 116.100835][ T29] audit: type=1400 audit(1765673220.679:19680): avc: denied { execmem } for pid=32243 comm="syz.0.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 116.101197][T32221] ext4 filesystem being mounted at /333/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.212249][ T29] audit: type=1400 audit(1765673220.799:19681): avc: denied { connect } for pid=32245 comm="syz.3.1562" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.242063][T32246] siw: device registration error -23 [ 116.313600][ T29] audit: type=1400 audit(1765673220.819:19682): avc: denied { write } for pid=32245 comm="syz.3.1562" path="socket:[19227]" dev="sockfs" ino=19227 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 116.337631][ T29] audit: type=1400 audit(1765673220.829:19683): avc: denied { create } for pid=32245 comm="syz.3.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 116.358221][ T29] audit: type=1400 audit(1765673220.829:19684): avc: denied { write } for pid=32245 comm="syz.3.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 116.450374][T32252] bridge0: port 3(batadv0) entered blocking state [ 116.457563][T32252] bridge0: port 3(batadv0) entered disabled state [ 116.510980][T32252] batadv0: entered allmulticast mode [ 116.530848][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.536266][ T29] audit: type=1326 audit(1765673220.899:19685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32247 comm="syz.2.1563" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f077653f749 code=0x0 [ 116.547103][T32252] batadv0: entered promiscuous mode [ 116.564074][ T29] audit: type=1400 audit(1765673220.999:19686): avc: denied { ioctl } for pid=32251 comm="syz.3.1565" path="socket:[19243]" dev="sockfs" ino=19243 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 116.594927][ T29] audit: type=1400 audit(1765673221.109:19687): avc: denied { mount } for pid=32243 comm="syz.0.1561" name="/" dev="ramfs" ino=18402 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 116.711035][ T29] audit: type=1400 audit(1765673221.289:19688): avc: denied { create } for pid=32256 comm="syz.1.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 116.731468][ T29] audit: type=1400 audit(1765673221.299:19689): avc: denied { sys_admin } for pid=32256 comm="syz.1.1566" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 116.791246][T32261] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1568'. [ 116.814487][T32266] loop1: detected capacity change from 0 to 1024 [ 116.822025][T32266] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 116.832036][T32266] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 116.871763][T32266] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 116.890040][T32266] EXT4-fs (loop1): orphan cleanup on readonly fs [ 116.900439][T32271] random: crng reseeded on system resumption [ 116.907160][T32266] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.1570: Inode bitmap for bg 0 marked uninitialized [ 116.924176][T32266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.951091][ T3642] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 116.960658][ T3642] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 116.992176][ T3496] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 117.097415][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.176547][T32287] loop2: detected capacity change from 0 to 1024 [ 117.249287][T32289] loop1: detected capacity change from 0 to 128 [ 117.256263][T32287] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 117.289491][T32287] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.307257][T32289] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1579'. [ 117.343227][T32287] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 117.358222][T32287] EXT4-fs (loop2): orphan cleanup on readonly fs [ 117.375195][T32287] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.1578: Inode bitmap for bg 0 marked uninitialized [ 117.392062][T32287] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.409371][ T3664] Bluetooth: hci0: Frame reassembly failed (-84) [ 117.584685][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.684511][T32299] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1582'. [ 117.969564][T32317] 0ªX¹¦À: renamed from caif0 [ 117.977601][T32317] net_ratelimit: 152 callbacks suppressed [ 117.977664][T32317] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 118.057707][T32319] loop3: detected capacity change from 0 to 512 [ 118.064914][T32319] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 118.108418][T32321] veth12: entered promiscuous mode [ 118.113784][T32321] veth12: entered allmulticast mode [ 118.724209][T32350] lo speed is unknown, defaulting to 1000 [ 118.744970][T32355] FAULT_INJECTION: forcing a failure. [ 118.744970][T32355] name failslab, interval 1, probability 0, space 0, times 0 [ 118.757936][T32355] CPU: 1 UID: 0 PID: 32355 Comm: syz.2.1599 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 118.757971][T32355] Tainted: [W]=WARN [ 118.757980][T32355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 118.758034][T32355] Call Trace: [ 118.758041][T32355] [ 118.758050][T32355] __dump_stack+0x1d/0x30 [ 118.758074][T32355] dump_stack_lvl+0xe8/0x140 [ 118.758171][T32355] dump_stack+0x15/0x1b [ 118.758259][T32355] should_fail_ex+0x265/0x280 [ 118.758287][T32355] should_failslab+0x8c/0xb0 [ 118.758312][T32355] kmem_cache_alloc_noprof+0x69/0x4b0 [ 118.758334][T32355] ? getname_flags+0x80/0x3b0 [ 118.758417][T32355] getname_flags+0x80/0x3b0 [ 118.758444][T32355] user_path_at+0x28/0x130 [ 118.758482][T32355] __se_sys_mount+0x25b/0x2e0 [ 118.758549][T32355] ? fput+0x8f/0xc0 [ 118.758579][T32355] __x64_sys_mount+0x67/0x80 [ 118.758599][T32355] x64_sys_call+0x2cca/0x3000 [ 118.758667][T32355] do_syscall_64+0xd8/0x2a0 [ 118.758703][T32355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.758754][T32355] RIP: 0033:0x7f077653f749 [ 118.758772][T32355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.758793][T32355] RSP: 002b:00007f0774f9f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 118.758816][T32355] RAX: ffffffffffffffda RBX: 00007f0776795fa0 RCX: 00007f077653f749 [ 118.758829][T32355] RDX: 0000200000004500 RSI: 00002000000000c0 RDI: 0000000000000000 [ 118.758850][T32355] RBP: 00007f0774f9f090 R08: 0000200000000300 R09: 0000000000000000 [ 118.758903][T32355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.758916][T32355] R13: 00007f0776796038 R14: 00007f0776795fa0 R15: 00007fffa9c98958 [ 118.758934][T32355] [ 118.991056][T32359] __nla_validate_parse: 2 callbacks suppressed [ 118.991074][T32359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1601'. [ 119.006922][T32361] loop2: detected capacity change from 0 to 1024 [ 119.009529][T32359] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 119.024215][T32361] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 119.038459][T32361] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 119.060822][T32361] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 119.069153][T32361] EXT4-fs (loop2): orphan cleanup on readonly fs [ 119.080978][T32361] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.1602: Inode bitmap for bg 0 marked uninitialized [ 119.095394][T32361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 119.137431][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.197894][T32369] Symlink component flag not implemented [ 119.203697][T32369] Symlink component flag not implemented [ 119.284992][T32374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1606'. [ 119.321164][T32369] Symlink component flag not implemented (129) [ 119.327511][T32369] Symlink component flag not implemented (6) [ 119.340671][T32374] batadv0 (unregistering): left allmulticast mode [ 119.347166][T32374] batadv0 (unregistering): left promiscuous mode [ 119.349726][T32369] rock: directory entry would overflow storage [ 119.353909][T32374] bridge0: port 3(batadv0) entered disabled state [ 119.366707][T32369] rock: sig=0x4f50, size=4, remaining=3 [ 119.372307][T32369] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 119.468019][T32661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.476622][T32661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.484805][ T3557] Bluetooth: hci0: command 0x1003 tx timeout [ 119.490906][ T3518] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 119.519748][T32661] netlink: 48 bytes leftover after parsing attributes in process `+}[@'. [ 119.537932][ T348] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=348 comm=syz.1.1608 [ 119.570383][ T348] EXT4-fs: Ignoring removed i_version option [ 119.576739][ T348] EXT4-fs: Ignoring removed bh option [ 119.651989][ T348] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.679495][ T348] ext4 filesystem being mounted at /341/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 119.910674][ T788] veth14: entered promiscuous mode [ 119.915985][ T788] veth14: entered allmulticast mode [ 119.970961][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.064965][ T791] set_capacity_and_notify: 2 callbacks suppressed [ 120.064984][ T791] loop4: detected capacity change from 0 to 512 [ 120.091522][ T791] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 120.218990][ T801] loop3: detected capacity change from 0 to 1024 [ 120.274016][ T791] loop4: detected capacity change from 0 to 2048 [ 120.281369][ T801] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 120.291934][ T804] random: crng reseeded on system resumption [ 120.304681][ T804] Restarting kernel threads ... [ 120.321109][ T801] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.322156][ T791] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 120.332211][ T804] Done restarting kernel threads. [ 120.366714][ T3496] hid-generic 0003:0004:0000.0003: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 120.416265][ T791] EXT4-fs (loop4): shut down requested (0) [ 120.511501][ T801] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 120.511659][ T801] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.511933][ T801] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.1614: Inode bitmap for bg 0 marked uninitialized [ 120.512578][ T801] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 120.674856][ T816] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 120.674972][ T816] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 120.675175][ T816] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 120.862121][ T9] hid-generic 0003:0004:0000.0004: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 121.120843][ T822] syz.1.1618 (822): /proc/813/oom_adj is deprecated, please use /proc/813/oom_score_adj instead. [ 121.146120][ T822] lo speed is unknown, defaulting to 1000 [ 121.349285][ T29] kauditd_printk_skb: 862 callbacks suppressed [ 121.349304][ T29] audit: type=1400 audit(1765673225.929:20552): avc: denied { open } for pid=790 comm="syz.4.1611" path="/295/file2/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 121.442161][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.465134][ T830] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=830 comm=syz.1.1622 [ 121.497491][ T29] audit: type=1400 audit(1765673226.019:20553): avc: denied { create } for pid=828 comm="syz.1.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.517906][ T29] audit: type=1400 audit(1765673226.029:20554): avc: denied { unmount } for pid=3315 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 121.538327][ T29] audit: type=1400 audit(1765673226.039:20555): avc: denied { create } for pid=827 comm="syz.2.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.558788][ T29] audit: type=1400 audit(1765673226.049:20556): avc: denied { write } for pid=828 comm="syz.1.1622" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.579677][ T29] audit: type=1400 audit(1765673226.059:20557): avc: denied { setopt } for pid=827 comm="syz.2.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.599584][ T29] audit: type=1400 audit(1765673226.069:20558): avc: denied { create } for pid=827 comm="syz.2.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.619907][ T29] audit: type=1400 audit(1765673226.069:20559): avc: denied { ioctl } for pid=827 comm="syz.2.1621" path="socket:[20773]" dev="sockfs" ino=20773 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 121.645550][ T29] audit: type=1400 audit(1765673226.069:20560): avc: denied { nlmsg_write } for pid=827 comm="syz.2.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 121.667309][ T29] audit: type=1400 audit(1765673226.069:20561): avc: denied { bind } for pid=827 comm="syz.2.1621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 121.687472][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 121.729556][ T836] siw: device registration error -23 [ 121.766602][ T839] veth8: entered promiscuous mode [ 121.772018][ T839] veth8: entered allmulticast mode [ 121.820248][ T831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1620'. [ 121.844241][ T837] loop3: detected capacity change from 0 to 512 [ 121.858790][ T830] loop1: detected capacity change from 0 to 512 [ 121.891460][ T837] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 121.911527][ T830] EXT4-fs: Ignoring removed i_version option [ 121.917846][ T830] EXT4-fs: Ignoring removed bh option [ 121.932043][ T843] netlink: 'syz.2.1626': attribute type 1 has an invalid length. [ 121.965196][ T846] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=846 comm=syz.0.1627 [ 122.037656][ T830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.071755][ T849] loop3: detected capacity change from 0 to 2048 [ 122.078488][ T830] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 122.161813][ T849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 122.250557][ T837] EXT4-fs (loop3): shut down requested (0) [ 122.360430][ T862] loop4: detected capacity change from 0 to 8192 [ 122.361317][ T849] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 122.402936][ T862] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 122.469259][ T849] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 122.469470][ T849] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 122.489080][ T869] siw: device registration error -23 [ 122.644434][ T858] loop2: detected capacity change from 0 to 512 [ 122.657530][ T876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1630'. [ 122.669551][ T875] lo speed is unknown, defaulting to 1000 [ 122.691277][ T858] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1628: bg 0: block 248: padding at end of block bitmap is not set [ 122.779886][ T858] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.1628: Failed to acquire dquot type 1 [ 122.824954][ T858] EXT4-fs (loop2): 1 truncate cleaned up [ 122.831142][ T858] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.953836][ T882] siw: device registration error -23 [ 123.016799][ T885] loop1: detected capacity change from 0 to 1024 [ 123.038024][ T889] random: crng reseeded on system resumption [ 123.043574][ T885] EXT4-fs: Ignoring removed nobh option [ 123.049750][ T885] EXT4-fs: Ignoring removed bh option [ 123.139451][ T889] loop4: detected capacity change from 0 to 1024 [ 123.190420][ T898] netlink: 'syz.1.1641': attribute type 1 has an invalid length. [ 123.205392][ T904] siw: device registration error -23 [ 123.216052][ T896] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 123.283386][ T896] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 123.291955][ T896] Symlink component flag not implemented [ 123.297624][ T896] Symlink component flag not implemented [ 123.304084][ T898] 8021q: adding VLAN 0 to HW filter on device bond1 [ 123.337762][ T896] Symlink component flag not implemented (7) [ 123.344213][ T896] Symlink component flag not implemented (116) [ 123.384501][ T918] siw: device registration error -23 [ 123.450817][ T896] netlink: 8 bytes leftover after parsing attributes in process `'. [ 123.488083][ T896] netlink: 8 bytes leftover after parsing attributes in process `'. [ 123.508443][ T932] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1641'. [ 123.532906][ T896] netlink: 8 bytes leftover after parsing attributes in process `'. [ 123.581766][ T896] netlink: 8 bytes leftover after parsing attributes in process `'. [ 123.963459][ T945] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=945 comm=syz.4.1658 [ 124.013589][ T947] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=947 comm=syz.2.1659 [ 124.013978][ T945] EXT4-fs: Ignoring removed i_version option [ 124.032381][ T945] EXT4-fs: Ignoring removed bh option [ 124.045583][ T947] EXT4-fs: Ignoring removed i_version option [ 124.052135][ T947] EXT4-fs: Ignoring removed bh option [ 124.071284][ T947] ext4 filesystem being mounted at /301/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.084691][ T945] ext4 filesystem being mounted at /303/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 124.152617][ T954] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 124.172964][ T954] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 124.241849][ T954] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 124.281353][ T954] EXT4-fs (loop1): orphan cleanup on readonly fs [ 124.301502][ T954] EXT4-fs error (device loop1): ext4_read_inode_bitmap:167: comm syz.1.1660: Inode bitmap for bg 0 marked uninitialized [ 124.377441][ T962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'. [ 124.434905][ T964] siw: device registration error -23 [ 124.451842][ T965] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1661'. [ 124.602770][ T979] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 124.693026][ T979] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 124.726409][ T984] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 124.735720][ T979] Symlink component flag not implemented [ 124.741690][ T979] Symlink component flag not implemented [ 124.754259][ T979] Symlink component flag not implemented (7) [ 124.760829][ T979] Symlink component flag not implemented (116) [ 124.798386][ T979] netlink: 8 bytes leftover after parsing attributes in process `'. [ 124.813760][ T979] netlink: 8 bytes leftover after parsing attributes in process `'. [ 124.822879][ T979] netlink: 8 bytes leftover after parsing attributes in process `'. [ 124.864418][ T984] EXT4-fs (loop4): shut down requested (0) [ 124.927972][ T979] netlink: 8 bytes leftover after parsing attributes in process `'. [ 124.928196][ T979] netlink: 8 bytes leftover after parsing attributes in process `'. [ 125.027107][ T1589] veth6: entered promiscuous mode [ 125.027128][ T1589] veth6: entered allmulticast mode [ 125.030693][ T1454] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 125.111641][ T1599] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1599 comm=syz.3.1674 [ 125.149443][ T1599] set_capacity_and_notify: 8 callbacks suppressed [ 125.149461][ T1599] loop3: detected capacity change from 0 to 512 [ 125.149891][ T1599] EXT4-fs: Ignoring removed i_version option [ 125.149976][ T1599] EXT4-fs: Ignoring removed bh option [ 125.151071][ T1454] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 125.151274][ T1454] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 125.174166][ T1599] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 125.552963][ T1616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1678'. [ 125.650711][ T1612] loop1: detected capacity change from 0 to 1764 [ 125.715606][ T1624] loop3: detected capacity change from 0 to 164 [ 125.745054][ T1624] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 125.773050][ T1624] netlink: 8 bytes leftover after parsing attributes in process `'. [ 125.774382][ T1625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1681'. [ 125.870164][ T1652] FAULT_INJECTION: forcing a failure. [ 125.870164][ T1652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.883448][ T1652] CPU: 0 UID: 0 PID: 1652 Comm: syz.4.1687 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 125.883482][ T1652] Tainted: [W]=WARN [ 125.883522][ T1652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 125.883533][ T1652] Call Trace: [ 125.883540][ T1652] [ 125.883548][ T1652] __dump_stack+0x1d/0x30 [ 125.883576][ T1652] dump_stack_lvl+0xe8/0x140 [ 125.883623][ T1652] dump_stack+0x15/0x1b [ 125.883646][ T1652] should_fail_ex+0x265/0x280 [ 125.883733][ T1652] should_fail+0xb/0x20 [ 125.883751][ T1652] should_fail_usercopy+0x1a/0x20 [ 125.883772][ T1652] _copy_from_iter+0xcf/0xe70 [ 125.883798][ T1652] ? __alloc_skb+0x3bb/0x4d0 [ 125.883818][ T1652] ? __alloc_skb+0x24d/0x4d0 [ 125.883861][ T1652] netlink_sendmsg+0x471/0x6b0 [ 125.883917][ T1652] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.883945][ T1652] __sock_sendmsg+0x145/0x180 [ 125.884022][ T1652] ____sys_sendmsg+0x31e/0x4a0 [ 125.884057][ T1652] ___sys_sendmsg+0x17b/0x1d0 [ 125.884135][ T1652] __x64_sys_sendmsg+0xd4/0x160 [ 125.884176][ T1652] x64_sys_call+0x17ba/0x3000 [ 125.884280][ T1652] do_syscall_64+0xd8/0x2a0 [ 125.884318][ T1652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.884339][ T1652] RIP: 0033:0x7f3e5004f749 [ 125.884428][ T1652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.884447][ T1652] RSP: 002b:00007f3e4eab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.884471][ T1652] RAX: ffffffffffffffda RBX: 00007f3e502a5fa0 RCX: 00007f3e5004f749 [ 125.884516][ T1652] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 125.884530][ T1652] RBP: 00007f3e4eab7090 R08: 0000000000000000 R09: 0000000000000000 [ 125.884544][ T1652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.884558][ T1652] R13: 00007f3e502a6038 R14: 00007f3e502a5fa0 R15: 00007ffc36ac6338 [ 125.884643][ T1652] [ 125.937054][ T1658] loop1: detected capacity change from 0 to 512 [ 126.111851][ T1658] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 126.155817][ T1658] loop1: detected capacity change from 0 to 2048 [ 126.193683][ T1658] EXT4-fs (loop1): shut down requested (0) [ 126.218600][ T1670] loop4: detected capacity change from 0 to 164 [ 126.226953][ T1670] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.228075][ T1670] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.233346][ T1670] Symlink component flag not implemented [ 126.233356][ T1670] Symlink component flag not implemented [ 126.233672][ T1670] Symlink component flag not implemented (7) [ 126.233681][ T1670] Symlink component flag not implemented (116) [ 126.342250][ T1674] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 126.391524][ T29] kauditd_printk_skb: 305 callbacks suppressed [ 126.391612][ T29] audit: type=1400 audit(1765673230.979:20865): avc: denied { open } for pid=1676 comm="syz.0.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 126.391635][ T29] audit: type=1400 audit(1765673230.979:20866): avc: denied { kernel } for pid=1676 comm="syz.0.1696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 126.403770][ T1679] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 126.407302][ T29] audit: type=1400 audit(1765673230.989:20867): avc: denied { read } for pid=1677 comm="syz.4.1697" dev="nsfs" ino=4026532859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 126.407331][ T29] audit: type=1400 audit(1765673230.989:20868): avc: denied { open } for pid=1677 comm="syz.4.1697" path="net:[4026532859]" dev="nsfs" ino=4026532859 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 126.408009][ T29] audit: type=1400 audit(1765673230.989:20869): avc: denied { create } for pid=1677 comm="syz.4.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.408700][ T29] audit: type=1400 audit(1765673230.989:20870): avc: denied { bind } for pid=1677 comm="syz.4.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.409509][ T29] audit: type=1400 audit(1765673230.989:20871): avc: denied { setopt } for pid=1677 comm="syz.4.1697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.410333][ T29] audit: type=1400 audit(1765673230.989:20872): avc: denied { write } for pid=1677 comm="syz.4.1697" path="socket:[21216]" dev="sockfs" ino=21216 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.421054][ T1674] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 126.571057][ T3518] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 126.596032][ T1674] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 126.604208][ T29] audit: type=1400 audit(1765673231.179:20873): avc: denied { read write } for pid=1657 comm="syz.1.1689" name="file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.643000][ T3557] Bluetooth: hci0: command 0x1003 tx timeout [ 126.682755][ T29] audit: type=1400 audit(1765673231.189:20874): avc: denied { open } for pid=1657 comm="syz.1.1689" path="/359/file2/file1" dev="loop1" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 126.893466][ T1689] siw: device registration error -23 [ 127.111465][ T1693] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 127.714740][ T1706] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 127.723234][ T1706] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 127.731038][ T1706] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 127.739005][ T1706] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 127.746884][ T1706] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 127.754873][ T1706] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 127.762801][ T1706] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 127.770693][ T1706] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 127.779063][ T1706] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 127.787015][ T1706] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 127.985747][ T1714] FAULT_INJECTION: forcing a failure. [ 127.985747][ T1714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 127.993093][ T1716] loop4: detected capacity change from 0 to 512 [ 127.999116][ T1714] CPU: 0 UID: 0 PID: 1714 Comm: syz.0.1709 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 127.999150][ T1714] Tainted: [W]=WARN [ 127.999157][ T1714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 127.999169][ T1714] Call Trace: [ 127.999177][ T1714] [ 127.999185][ T1714] __dump_stack+0x1d/0x30 [ 127.999238][ T1714] dump_stack_lvl+0xe8/0x140 [ 127.999260][ T1714] dump_stack+0x15/0x1b [ 127.999343][ T1714] should_fail_ex+0x265/0x280 [ 127.999375][ T1714] should_fail+0xb/0x20 [ 127.999401][ T1714] should_fail_usercopy+0x1a/0x20 [ 127.999465][ T1714] _copy_from_user+0x1c/0xb0 [ 127.999492][ T1714] ___sys_sendmsg+0xc1/0x1d0 [ 127.999529][ T1714] __x64_sys_sendmsg+0xd4/0x160 [ 127.999559][ T1714] x64_sys_call+0x17ba/0x3000 [ 127.999659][ T1714] do_syscall_64+0xd8/0x2a0 [ 127.999691][ T1714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.999713][ T1714] RIP: 0033:0x7fb1989cf749 [ 127.999730][ T1714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.999853][ T1714] RSP: 002b:00007fb197416038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.999874][ T1714] RAX: ffffffffffffffda RBX: 00007fb198c26090 RCX: 00007fb1989cf749 [ 127.999888][ T1714] RDX: 0000000000000000 RSI: 0000200000005840 RDI: 000000000000000a [ 127.999901][ T1714] RBP: 00007fb197416090 R08: 0000000000000000 R09: 0000000000000000 [ 127.999914][ T1714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.000004][ T1714] R13: 00007fb198c26128 R14: 00007fb198c26090 R15: 00007ffd62cbf1f8 [ 128.000022][ T1714] [ 128.183214][ T1716] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 128.241377][ T1716] loop4: detected capacity change from 0 to 2048 [ 128.273562][ T1721] veth8: entered promiscuous mode [ 128.278836][ T1721] veth8: entered allmulticast mode [ 128.303710][ T1716] EXT4-fs (loop4): shut down requested (0) [ 128.346942][ T1711] loop3: detected capacity change from 0 to 512 [ 128.430730][ T1716] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 128.451174][ T1711] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1708: bg 0: block 248: padding at end of block bitmap is not set [ 128.451230][ T1716] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 128.476338][ T1711] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1708: Failed to acquire dquot type 1 [ 128.500145][ T1716] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 128.509562][ T1711] EXT4-fs (loop3): 1 truncate cleaned up [ 128.515790][ T1711] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.653345][ T1735] loop2: detected capacity change from 0 to 164 [ 128.731922][ T1739] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 128.913364][ T1739] EXT4-fs (loop4): shut down requested (0) [ 128.937422][ T3639] Bluetooth: hci0: Frame reassembly failed (-84) [ 129.027088][ T1735] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 129.094031][ T1751] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 129.094088][ T1751] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 129.094248][ T1751] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 129.134191][ T1760] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 129.134245][ T1760] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.138101][ T1760] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 129.138203][ T1760] EXT4-fs (loop3): orphan cleanup on readonly fs [ 129.138392][ T1760] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.1723: Inode bitmap for bg 0 marked uninitialized [ 129.216378][ T3315] EXT4-fs unmount: 26 callbacks suppressed [ 129.216398][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.223311][ T1725] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.223334][ T1725] IPv6: NLM_F_CREATE should be set when creating new route [ 129.514699][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 129.838337][ T1775] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 129.864425][ T1775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.885895][ T1775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.914794][ T1780] siw: device registration error -23 [ 129.953892][ T1782] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1782 comm=syz.2.1730 [ 130.005776][ T1782] EXT4-fs: Ignoring removed i_version option [ 130.012056][ T1782] EXT4-fs: Ignoring removed bh option [ 130.042548][ T1782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.055994][ T1782] ext4 filesystem being mounted at /309/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.211542][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.253955][ T1787] __nla_validate_parse: 10 callbacks suppressed [ 130.253974][ T1787] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1731'. [ 130.309327][ T1806] set_capacity_and_notify: 4 callbacks suppressed [ 130.309346][ T1806] loop3: detected capacity change from 0 to 1024 [ 130.323185][ T1806] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 130.341199][ T1806] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.371420][ T1806] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 130.389021][ T1806] EXT4-fs (loop3): orphan cleanup on readonly fs [ 130.404654][ T1806] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.1734: Inode bitmap for bg 0 marked uninitialized [ 130.470884][ T1806] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 130.503968][ T1811] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=1811 comm=syz.4.1735 [ 130.608256][ T1811] loop4: detected capacity change from 0 to 512 [ 130.639208][ T1811] EXT4-fs: Ignoring removed i_version option [ 130.645282][ T1811] EXT4-fs: Ignoring removed bh option [ 130.673475][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.694854][ T1811] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.738506][ T1811] ext4 filesystem being mounted at /324/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 130.974711][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.001039][ T3518] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 131.048544][ T1829] loop4: detected capacity change from 0 to 164 [ 131.061741][ T1829] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 131.072167][ T1829] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 131.080965][ T1829] Symlink component flag not implemented [ 131.086702][ T1829] Symlink component flag not implemented [ 131.093191][ T1829] Symlink component flag not implemented (7) [ 131.099194][ T1829] Symlink component flag not implemented (116) [ 131.107961][ T1829] netlink: 8 bytes leftover after parsing attributes in process `'. [ 131.117186][ T1829] netlink: 8 bytes leftover after parsing attributes in process `'. [ 131.125929][ T1829] netlink: 8 bytes leftover after parsing attributes in process `'. [ 131.149259][ T1829] netlink: 8 bytes leftover after parsing attributes in process `'. [ 131.159066][ T1832] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1742'. [ 131.212789][ T1832] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 131.272572][ T1823] loop3: detected capacity change from 0 to 512 [ 131.325023][ T1842] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1743'. [ 131.357080][ T1823] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1739: bg 0: block 248: padding at end of block bitmap is not set [ 131.372472][ T1823] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1739: Failed to acquire dquot type 1 [ 131.384749][ T1823] EXT4-fs (loop3): 1 truncate cleaned up [ 131.391311][ T1823] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.404352][ T1823] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.427446][ T1823] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.443904][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 131.443923][ T29] audit: type=1400 audit(1765673236.029:21177): avc: denied { ioctl } for pid=1855 comm="syz.2.1749" path="socket:[20221]" dev="sockfs" ino=20221 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 131.513618][ T1873] loop2: detected capacity change from 0 to 1024 [ 131.523066][ T1873] EXT4-fs: Ignoring removed nobh option [ 131.528933][ T1873] EXT4-fs: Ignoring removed bh option [ 131.546176][ T29] audit: type=1400 audit(1765673236.129:21178): avc: denied { create } for pid=1866 comm="syz.0.1750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 131.628423][ T1879] loop1: detected capacity change from 0 to 512 [ 131.636369][ T1879] ext4: Bad value for 'debug_want_extra_isize' [ 131.662912][ T1879] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1752'. [ 131.672532][ T1873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.696876][ T1878] loop3: detected capacity change from 0 to 1024 [ 131.697473][ T1879] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1752'. [ 131.722696][ T1878] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 131.741882][ T1878] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.753501][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.787658][ T1878] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 131.821262][ T1878] EXT4-fs (loop3): orphan cleanup on readonly fs [ 131.866642][ T1878] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.1753: Inode bitmap for bg 0 marked uninitialized [ 131.931651][ T1878] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.935318][ T1894] siw: device registration error -23 [ 131.961314][ T29] audit: type=1400 audit(1765673236.539:21179): avc: denied { create } for pid=1895 comm="syz.1.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.981277][ T29] audit: type=1400 audit(1765673236.539:21180): avc: denied { setopt } for pid=1895 comm="syz.1.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.986579][ T1898] random: crng reseeded on system resumption [ 132.061587][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.105457][ T1904] loop1: detected capacity change from 0 to 512 [ 132.114262][ T29] audit: type=1400 audit(1765673236.569:21181): avc: denied { append } for pid=1897 comm="syz.2.1760" name="snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 132.121667][ T1898] Restarting kernel threads ... [ 132.137802][ T29] audit: type=1400 audit(1765673236.569:21182): avc: denied { open } for pid=1897 comm="syz.2.1760" path="/dev/snapshot" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 132.144989][ T1904] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 132.166501][ T29] audit: type=1400 audit(1765673236.599:21183): avc: denied { bind } for pid=1895 comm="syz.1.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 132.218944][ T23] hid_parser_main: 62 callbacks suppressed [ 132.218965][ T23] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 132.232385][ T23] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 132.239820][ T23] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 132.240055][ T29] audit: type=1400 audit(1765673236.699:21184): avc: denied { ioctl } for pid=1897 comm="syz.2.1760" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 132.247289][ T23] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 132.247316][ T23] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 132.272263][ T29] audit: type=1400 audit(1765673236.799:21185): avc: denied { read write } for pid=1897 comm="syz.2.1760" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 132.272296][ T29] audit: type=1400 audit(1765673236.799:21186): avc: denied { open } for pid=1897 comm="syz.2.1760" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 132.279783][ T23] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 132.288661][ T1898] Done restarting kernel threads. [ 132.311197][ T23] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 132.354829][ T23] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 132.362299][ T23] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 132.370024][ T23] hid-generic 0003:0004:0000.0005: unknown main item tag 0x0 [ 132.383816][ T23] hid-generic 0003:0004:0000.0005: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 132.439301][ T1904] loop1: detected capacity change from 0 to 2048 [ 132.494535][ T1904] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 132.559115][ T1888] loop4: detected capacity change from 0 to 512 [ 132.606799][ T1904] EXT4-fs (loop1): shut down requested (0) [ 132.613621][ T1888] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1756: bg 0: block 248: padding at end of block bitmap is not set [ 132.672254][ T1888] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1756: Failed to acquire dquot type 1 [ 132.672799][ T1888] EXT4-fs (loop4): 1 truncate cleaned up [ 132.673311][ T1888] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.673455][ T1888] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.674415][ T1888] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.757835][ T1923] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 132.757884][ T1923] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 132.758068][ T1923] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 132.760260][ T1922] veth12: entered promiscuous mode [ 132.760333][ T1922] veth12: entered allmulticast mode [ 132.946119][ T1927] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 132.951149][ T1926] siw: device registration error -23 [ 133.028510][ T1927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 133.035961][ T1927] EXT4-fs (loop4): shut down requested (0) [ 133.092652][ T1934] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 133.092682][ T1934] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 133.092807][ T1934] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=15 [ 133.210411][ T1939] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 133.246181][ T1939] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 133.257478][ T1939] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 133.257643][ T1939] EXT4-fs (loop2): orphan cleanup on readonly fs [ 133.257888][ T1939] EXT4-fs error (device loop2): ext4_read_inode_bitmap:167: comm syz.2.1772: Inode bitmap for bg 0 marked uninitialized [ 133.258462][ T1939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 133.299689][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.524844][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 133.625838][ T3318] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 133.799615][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 133.841329][ T1964] veth14: entered promiscuous mode [ 133.846506][ T1964] veth14: entered allmulticast mode [ 134.044678][ T1958] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1778: bg 0: block 248: padding at end of block bitmap is not set [ 134.068925][ T1958] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.1778: Failed to acquire dquot type 1 [ 134.084825][ T1958] EXT4-fs (loop1): 1 truncate cleaned up [ 134.091393][ T1973] EXT4-fs: Ignoring removed i_version option [ 134.097597][ T1973] EXT4-fs: Ignoring removed bh option [ 134.103359][ T1958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.105697][ T1958] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.142244][ T1958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.156596][ T1973] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.187927][ T1973] ext4 filesystem being mounted at /346/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 134.395838][ T1980] netlink: 'syz.2.1785': attribute type 3 has an invalid length. [ 134.482639][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.636253][ T2008] random: crng reseeded on system resumption [ 134.661543][ T2008] Restarting kernel threads ... [ 134.676425][ T2008] Done restarting kernel threads. [ 134.700407][ T9] hid-generic 0003:0004:0000.0006: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 134.788951][ T2014] 9p: Bad value for 'rfdno' [ 134.829851][ T2015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1797'. [ 134.996269][ T2409] SELinux: policydb version -1257804390 does not match my version range 15-35 [ 135.053266][ T2409] SELinux: failed to load policy [ 135.130633][ T3384] EXT4-fs: Ignoring removed bh option [ 135.151728][ T3384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.185685][ T3384] EXT4-fs (loop2): shut down requested (2) [ 135.186438][ T3391] SELinux: policydb version -1257804390 does not match my version range 15-35 [ 135.216102][ T3391] SELinux: failed to load policy [ 135.287055][ T3428] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 135.302621][ T3428] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 135.311343][ T3428] Symlink component flag not implemented [ 135.317212][ T3428] Symlink component flag not implemented [ 135.339890][ T3428] Symlink component flag not implemented (7) [ 135.346023][ T3428] Symlink component flag not implemented (116) [ 135.374510][ T3428] netlink: 8 bytes leftover after parsing attributes in process `'. [ 135.410914][ T3428] netlink: 8 bytes leftover after parsing attributes in process `'. [ 135.448759][ T3428] netlink: 8 bytes leftover after parsing attributes in process `'. [ 135.460073][ T3435] set_capacity_and_notify: 10 callbacks suppressed [ 135.460092][ T3435] loop3: detected capacity change from 0 to 164 [ 135.461344][ T3428] netlink: 8 bytes leftover after parsing attributes in process `'. [ 135.482505][ T3435] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 135.500510][ T3428] netlink: 8 bytes leftover after parsing attributes in process `'. [ 135.509699][ T3435] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 135.519159][ T3435] Symlink component flag not implemented [ 135.524849][ T3435] Symlink component flag not implemented [ 135.531475][ T3435] Symlink component flag not implemented (7) [ 135.537641][ T3435] Symlink component flag not implemented (116) [ 135.552583][ T3435] netlink: 8 bytes leftover after parsing attributes in process `'. [ 135.561674][ T3435] netlink: 8 bytes leftover after parsing attributes in process `'. [ 135.570389][ T3435] netlink: 8 bytes leftover after parsing attributes in process `'. [ 135.587585][ T3435] netlink: 8 bytes leftover after parsing attributes in process `'. [ 135.589330][ T3431] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3431 comm=syz.0.1810 [ 135.654585][ T3431] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3431 comm=syz.0.1810 [ 135.662377][ T3438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1812'. [ 135.667365][ T3431] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=3431 comm=syz.0.1810 [ 135.741197][ T3448] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3448 comm=syz.3.1816 [ 135.763707][ T3448] loop3: detected capacity change from 0 to 512 [ 135.770723][ T3448] EXT4-fs: Ignoring removed i_version option [ 135.777159][ T3448] EXT4-fs: Ignoring removed bh option [ 135.806259][ T3448] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.819641][ T3518] Bluetooth: hci0: command 0x1003 tx timeout [ 135.825895][ T3557] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 135.847164][ T3448] ext4 filesystem being mounted at /353/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 135.950234][ T3460] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3460 comm=syz.1.1819 [ 135.982627][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.992397][ T3460] loop1: detected capacity change from 0 to 512 [ 135.999039][ T3460] EXT4-fs: Ignoring removed i_version option [ 136.005181][ T3460] EXT4-fs: Ignoring removed bh option [ 136.017151][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.021395][ T3462] loop3: detected capacity change from 0 to 512 [ 136.040512][ T3462] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 136.049500][ T3460] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.091270][ T3460] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.135961][ T3462] loop3: detected capacity change from 0 to 2048 [ 136.154282][ T3462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 136.232098][ T3462] EXT4-fs (loop3): shut down requested (0) [ 136.244358][ T3462] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 136.253448][ T3462] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 136.262656][ T3462] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop3 ino=15 [ 136.291033][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 136.359402][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.426285][ T3485] veth10: entered promiscuous mode [ 136.431507][ T3485] veth10: entered allmulticast mode [ 136.466868][ T29] kauditd_printk_skb: 358 callbacks suppressed [ 136.466884][ T29] audit: type=1400 audit(1765673241.049:21541): avc: denied { create } for pid=3487 comm="syz.3.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 136.495591][ T29] audit: type=1400 audit(1765673241.079:21542): avc: denied { relabelfrom } for pid=3490 comm="syz.1.1828" name="" dev="pipefs" ino=22640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 136.533119][ T29] audit: type=1400 audit(1765673241.079:21543): avc: denied { mac_admin } for pid=3490 comm="syz.1.1828" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 136.554425][ T29] audit: type=1400 audit(1765673241.079:21544): avc: denied { relabelto } for pid=3490 comm="syz.1.1828" name="" dev="pipefs" ino=22640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 136.608847][ T29] audit: type=1400 audit(1765673241.189:21545): avc: denied { create } for pid=3495 comm="syz.3.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.631862][ T3497] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3497 comm=syz.3.1830 [ 136.659039][ T29] audit: type=1400 audit(1765673241.219:21546): avc: denied { write } for pid=3495 comm="syz.3.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.709249][ T3497] loop3: detected capacity change from 0 to 512 [ 136.741738][ T29] audit: type=1400 audit(1765673241.289:21547): avc: denied { ioctl } for pid=3495 comm="syz.3.1830" path="socket:[22654]" dev="sockfs" ino=22654 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.767991][ T29] audit: type=1400 audit(1765673241.289:21548): avc: denied { create } for pid=3495 comm="syz.3.1830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.787910][ T29] audit: type=1400 audit(1765673241.289:21549): avc: denied { execmem } for pid=3501 comm="syz.0.1832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 136.808991][ T3497] EXT4-fs: Ignoring removed i_version option [ 136.815189][ T3497] EXT4-fs: Ignoring removed bh option [ 136.820972][ T3504] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 136.821291][ T29] audit: type=1400 audit(1765673241.369:21550): avc: denied { create } for pid=3506 comm="syz.1.1831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 136.854242][ T3509] loop1: detected capacity change from 0 to 512 [ 136.860969][ T3509] EXT4-fs: test_dummy_encryption option not supported [ 136.872681][ T3497] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.930579][ T3497] ext4 filesystem being mounted at /357/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.008868][ T3519] loop2: detected capacity change from 0 to 512 [ 137.081797][ T3519] EXT4-fs: Ignoring removed i_version option [ 137.087933][ T3519] EXT4-fs: Ignoring removed bh option [ 137.154179][ T3519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.174256][ T3519] ext4 filesystem being mounted at /334/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 137.236467][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.330194][ T3535] veth16: entered promiscuous mode [ 137.335477][ T3535] veth16: entered allmulticast mode [ 137.426626][ T3507] loop1: detected capacity change from 0 to 2048 [ 137.487167][ T3507] ext4: Unknown parameter 'subj_type' [ 137.498899][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.568224][ T3548] loop2: detected capacity change from 0 to 1024 [ 137.597896][ T3548] EXT4-fs: Ignoring removed bh option [ 137.625286][ T3548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.675432][ T3548] EXT4-fs (loop2): shut down requested (2) [ 137.979553][ T52] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.071524][ T52] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.135593][ T52] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.195296][ T52] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.272244][ T3819] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3819 comm=syz.1.1848 [ 138.280422][ T3556] lo speed is unknown, defaulting to 1000 [ 138.368787][ T3829] EXT4-fs: Ignoring removed i_version option [ 138.374916][ T3829] EXT4-fs: Ignoring removed bh option [ 138.402310][ T3829] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.421894][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.482651][ T3829] ext4 filesystem being mounted at /383/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 138.551277][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.600170][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.641383][ T52] bond0 (unregistering): (slave team0): Releasing backup interface [ 138.651212][ T52] bond0 (unregistering): Released all slaves [ 138.661160][ T52] bond1 (unregistering): (slave wireguard0): Releasing backup interface [ 138.669556][ T52] wireguard0: left promiscuous mode [ 138.682332][ T52] bond1 (unregistering): Released all slaves [ 138.698569][ T3842] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 138.836175][ T3835] siw: device registration error -23 [ 138.898424][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.929229][ T3857] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.008001][ T3857] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.024896][ T3863] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 139.081342][ T52] hsr_slave_0: left promiscuous mode [ 139.087648][ T52] hsr_slave_1: left promiscuous mode [ 139.114771][ T52] veth1_macvtap: left promiscuous mode [ 139.131791][ T52] veth0_macvtap: left promiscuous mode [ 139.137430][ T52] veth1_vlan: left promiscuous mode [ 139.151163][ T3866] Symlink component flag not implemented [ 139.157041][ T3866] Symlink component flag not implemented [ 139.161484][ T52] veth0_vlan: left promiscuous mode [ 139.170245][ T3863] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 139.188688][ T3866] Symlink component flag not implemented (129) [ 139.194918][ T3866] Symlink component flag not implemented (6) [ 139.205602][ T3849] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 139.217184][ T3866] rock: directory entry would overflow storage [ 139.223488][ T3866] rock: sig=0x4f50, size=4, remaining=3 [ 139.229324][ T3866] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 139.243321][ T3872] EXT4-fs: Ignoring removed i_version option [ 139.249757][ T3872] EXT4-fs: Ignoring removed bh option [ 139.260418][ T3863] EXT4-fs (loop1): shut down requested (0) [ 139.274442][ T3872] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.282177][ T3849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.296261][ T3872] ext4 filesystem being mounted at /368/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.364578][ T3849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.382647][ T3875] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 139.397441][ T3875] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 139.423021][ T3875] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 139.491209][ T52] team0 (unregistering): Port device team_slave_1 removed [ 139.502515][ T52] team0 (unregistering): Port device team_slave_0 removed [ 139.540528][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 139.590126][ T3857] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.633491][ T3881] lo speed is unknown, defaulting to 1000 [ 139.642846][ T3881] lo speed is unknown, defaulting to 1000 [ 139.649156][ T3881] lo speed is unknown, defaulting to 1000 [ 139.657078][ T3881] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 139.669310][ T3857] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.688554][ T3881] lo speed is unknown, defaulting to 1000 [ 139.695414][ T3881] lo speed is unknown, defaulting to 1000 [ 139.712409][ T3556] chnl_net:caif_netlink_parms(): no params data found [ 139.742349][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.757511][ T3881] lo speed is unknown, defaulting to 1000 [ 139.767355][ T3881] lo speed is unknown, defaulting to 1000 [ 139.777111][ T3881] lo speed is unknown, defaulting to 1000 [ 139.788211][ T3639] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.827389][ T3639] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.850368][ T3888] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 139.866030][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.873337][ T3556] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.887628][ T3556] bridge_slave_0: entered allmulticast mode [ 139.893920][ T3888] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.915580][ T3556] bridge_slave_0: entered promiscuous mode [ 139.927171][ T3639] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.941778][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.949358][ T3556] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.961080][ T3888] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 139.971409][ T3888] EXT4-fs (loop3): orphan cleanup on readonly fs [ 139.993647][ T3556] bridge_slave_1: entered allmulticast mode [ 140.000630][ T3556] bridge_slave_1: entered promiscuous mode [ 140.007862][ T3888] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.1862: Inode bitmap for bg 0 marked uninitialized [ 140.045895][ T3639] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.067354][ T3556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.071668][ T3894] siw: device registration error -23 [ 140.092815][ T3556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.101487][ T3888] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 140.140328][ T3556] team0: Port device team_slave_0 added [ 140.165501][ T3556] team0: Port device team_slave_1 added [ 140.181831][ T3899] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 140.212980][ T3899] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 140.240024][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.249901][ T3556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.256897][ T3556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.283311][ T3556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.300381][ T3899] Symlink component flag not implemented [ 140.306162][ T3899] Symlink component flag not implemented [ 140.321215][ T3899] Symlink component flag not implemented (7) [ 140.327312][ T3899] Symlink component flag not implemented (116) [ 140.336341][ T3556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.343517][ T3556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 140.370156][ T3556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.404760][ T3907] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 140.432215][ T3907] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 140.440781][ T3907] Symlink component flag not implemented [ 140.446498][ T3907] Symlink component flag not implemented [ 140.461091][ T3907] Symlink component flag not implemented (7) [ 140.467309][ T3907] Symlink component flag not implemented (116) [ 140.481178][ T3904] __nla_validate_parse: 4 callbacks suppressed [ 140.481195][ T3904] netlink: 8 bytes leftover after parsing attributes in process `'. [ 140.527029][ T3908] netlink: 8 bytes leftover after parsing attributes in process `'. [ 140.530192][ T3890] set_capacity_and_notify: 9 callbacks suppressed [ 140.530281][ T3890] loop1: detected capacity change from 0 to 1764 [ 140.537558][ T3907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1867'. [ 140.537916][ T3907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1867'. [ 140.586299][ T3904] netlink: 8 bytes leftover after parsing attributes in process `'. [ 140.595672][ T3907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1867'. [ 140.621666][ T3556] hsr_slave_0: entered promiscuous mode [ 140.635893][ T3556] hsr_slave_1: entered promiscuous mode [ 140.648685][ T3556] debugfs: 'hsr0' already exists in 'hsr' [ 140.654478][ T3556] Cannot create hsr debugfs directory [ 140.952528][ T3923] random: crng reseeded on system resumption [ 140.971347][ T3923] Restarting kernel threads ... [ 140.978256][ T3556] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.995089][ T3556] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 141.006866][ T3923] Done restarting kernel threads. [ 141.015125][ T3422] hid_parser_main: 26 callbacks suppressed [ 141.015147][ T3422] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 141.017020][ T3556] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 141.021219][ T3422] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 141.021246][ T3422] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 141.021280][ T3422] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 141.058498][ T3422] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 141.066065][ T3422] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 141.073608][ T3422] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 141.081160][ T3422] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 141.088947][ T3422] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 141.096603][ T3422] hid-generic 0003:0004:0000.0007: unknown main item tag 0x0 [ 141.105040][ T3422] hid-generic 0003:0004:0000.0007: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 141.112036][ T3556] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.167906][ T3929] 9p: Bad value for 'wfdno' [ 141.177161][ T3916] loop3: detected capacity change from 0 to 512 [ 141.205651][ T3918] loop4: detected capacity change from 0 to 512 [ 141.212821][ T3929] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=3929 comm=syz.2.1874 [ 141.230386][ T3916] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1871: bg 0: block 248: padding at end of block bitmap is not set [ 141.262815][ T3556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.286442][ T3556] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.293201][ T3918] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1870: bg 0: block 248: padding at end of block bitmap is not set [ 141.308046][ T3916] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.1871: Failed to acquire dquot type 1 [ 141.320331][ T3918] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.1870: Failed to acquire dquot type 1 [ 141.333128][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.340324][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.349899][ T3916] EXT4-fs (loop3): 1 truncate cleaned up [ 141.356492][ T3916] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.361873][ T3918] EXT4-fs (loop4): 1 truncate cleaned up [ 141.375923][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.383034][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.393682][ T3918] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.399694][ T3556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 141.411194][ T3916] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.437392][ T3918] ext4 filesystem being mounted at /file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.461969][ T3918] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.468121][ T3556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.488402][ T3916] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.521661][ T3951] SELinux: policydb version -1257804390 does not match my version range 15-35 [ 141.531471][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 141.531563][ T29] audit: type=1400 audit(1765673246.109:21843): avc: denied { load_policy } for pid=3950 comm="syz.2.1875" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 141.575649][ T3951] SELinux: failed to load policy [ 141.627041][ T29] audit: type=1400 audit(1765673246.209:21844): avc: denied { read } for pid=3954 comm="syz.2.1876" name="cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 141.653333][ T29] audit: type=1400 audit(1765673246.209:21845): avc: denied { open } for pid=3954 comm="syz.2.1876" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 141.697598][ T29] audit: type=1400 audit(1765673246.269:21846): avc: denied { ioctl } for pid=3954 comm="syz.2.1876" path="/syzcgroup/cpu/syz2/cgroup.procs" dev="cgroup" ino=53 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object" [ 141.701602][ T3556] veth0_vlan: entered promiscuous mode [ 141.726414][ T29] audit: type=1400 audit(1765673246.269:21847): avc: denied { unmount } for pid=3954 comm="syz.2.1876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 141.794531][ T3960] loop3: detected capacity change from 0 to 164 [ 141.802537][ T3960] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 141.816886][ T3556] veth1_vlan: entered promiscuous mode [ 141.818848][ T3963] loop2: detected capacity change from 0 to 512 [ 141.850502][ T3960] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 141.859701][ T29] audit: type=1400 audit(1765673246.429:21848): avc: denied { mount } for pid=3961 comm="syz.1.1878" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 141.883084][ T3963] EXT4-fs error (device loop2): ext4_orphan_get:1391: inode #15: comm syz.2.1879: inode has both inline data and extents flags [ 141.899427][ T3556] veth0_macvtap: entered promiscuous mode [ 141.899837][ T3963] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1879: couldn't read orphan inode 15 (err -117) [ 141.907556][ T3556] veth1_macvtap: entered promiscuous mode [ 141.925736][ T3960] Symlink component flag not implemented [ 141.931735][ T3960] Symlink component flag not implemented [ 141.945042][ T3970] wireguard0: entered promiscuous mode [ 141.950573][ T3970] wireguard0: entered allmulticast mode [ 141.960428][ T3971] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1882'. [ 141.975662][ T3960] Symlink component flag not implemented (7) [ 141.981742][ T3960] Symlink component flag not implemented (116) [ 141.993386][ T29] audit: type=1400 audit(1765673246.519:21849): avc: denied { sqpoll } for pid=3969 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 142.012820][ T29] audit: type=1400 audit(1765673246.529:21850): avc: denied { tracepoint } for pid=3969 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 142.032173][ T3963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.032727][ T29] audit: type=1400 audit(1765673246.539:21851): avc: denied { read } for pid=3969 comm="syz.4.1882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 142.068247][ T3974] netlink: 8 bytes leftover after parsing attributes in process `'. [ 142.100134][ T29] audit: type=1400 audit(1765673246.659:21852): avc: denied { write } for pid=3962 comm="syz.2.1879" path="/343/file1/file1" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 142.114852][ T3556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.140345][ T3556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.168716][ T3981] loop3: detected capacity change from 0 to 512 [ 142.170392][ T3674] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.193867][ T3981] EXT4-fs (loop3): too many log groups per flexible block group [ 142.202656][ T3981] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 142.214075][ T3981] EXT4-fs (loop3): mount failed [ 142.225074][ T3661] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.235344][ T3661] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.254980][ T3661] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.346407][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.494239][ T4000] loop3: detected capacity change from 0 to 512 [ 142.500783][ T4000] EXT4-fs: Ignoring removed i_version option [ 142.507254][ T4000] EXT4-fs: Ignoring removed bh option [ 142.532328][ T4000] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 142.549574][ T4000] ext4 filesystem being mounted at /377/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.654374][ T4009] net_ratelimit: 44 callbacks suppressed [ 142.654394][ T4009] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 142.698988][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.720031][ T4012] FAULT_INJECTION: forcing a failure. [ 142.720031][ T4012] name failslab, interval 1, probability 0, space 0, times 0 [ 142.733358][ T4012] CPU: 0 UID: 0 PID: 4012 Comm: syz.3.1895 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 142.733436][ T4012] Tainted: [W]=WARN [ 142.733495][ T4012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.733510][ T4012] Call Trace: [ 142.733518][ T4012] [ 142.733527][ T4012] __dump_stack+0x1d/0x30 [ 142.733555][ T4012] dump_stack_lvl+0xe8/0x140 [ 142.733618][ T4012] dump_stack+0x15/0x1b [ 142.733719][ T4012] should_fail_ex+0x265/0x280 [ 142.733745][ T4012] should_failslab+0x8c/0xb0 [ 142.733820][ T4012] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 142.733845][ T4012] ? alloc_vmap_area+0x241/0xea0 [ 142.733873][ T4012] alloc_vmap_area+0x241/0xea0 [ 142.733956][ T4012] ? should_fail_ex+0xdb/0x280 [ 142.733980][ T4012] ? __kmalloc_cache_node_noprof+0x2b3/0x4d0 [ 142.734004][ T4012] __get_vm_area_node+0x173/0x1d0 [ 142.734027][ T4012] __vmalloc_node_range_noprof+0x28e/0x1310 [ 142.734116][ T4012] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 142.734325][ T4012] ? __rcu_read_unlock+0x4f/0x70 [ 142.734345][ T4012] ? avc_has_perm_noaudit+0xab/0x130 [ 142.734369][ T4012] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 142.734551][ T4012] __vmalloc_noprof+0xa4/0xf0 [ 142.734579][ T4012] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 142.734613][ T4012] bpf_prog_alloc_no_stats+0x47/0x390 [ 142.734630][ T4012] ? bpf_prog_alloc+0x2a/0x150 [ 142.734648][ T4012] bpf_prog_alloc+0x3c/0x150 [ 142.734733][ T4012] bpf_prog_load+0x506/0x1140 [ 142.734765][ T4012] ? security_bpf+0x2b/0x90 [ 142.734790][ T4012] __sys_bpf+0x469/0x7c0 [ 142.734874][ T4012] __x64_sys_bpf+0x41/0x50 [ 142.734894][ T4012] x64_sys_call+0x28e1/0x3000 [ 142.734922][ T4012] do_syscall_64+0xd8/0x2a0 [ 142.734972][ T4012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.735047][ T4012] RIP: 0033:0x7f6c3dfff749 [ 142.735124][ T4012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.735145][ T4012] RSP: 002b:00007f6c3ca5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.735182][ T4012] RAX: ffffffffffffffda RBX: 00007f6c3e255fa0 RCX: 00007f6c3dfff749 [ 142.735195][ T4012] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 142.735208][ T4012] RBP: 00007f6c3ca5f090 R08: 0000000000000000 R09: 0000000000000000 [ 142.735223][ T4012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.735237][ T4012] R13: 00007f6c3e256038 R14: 00007f6c3e255fa0 R15: 00007ffe50deb5e8 [ 142.735257][ T4012] [ 142.735274][ T4012] syz.3.1895: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 142.796382][ T4013] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4013 comm=syz.1.1894 [ 142.797345][ T4012] ,cpuset=/,mems_allowed=0 [ 142.797390][ T4012] CPU: 0 UID: 0 PID: 4012 Comm: syz.3.1895 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 142.797499][ T4012] Tainted: [W]=WARN [ 142.797548][ T4012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.797561][ T4012] Call Trace: [ 142.797569][ T4012] [ 142.797578][ T4012] __dump_stack+0x1d/0x30 [ 142.797604][ T4012] dump_stack_lvl+0xe8/0x140 [ 142.797667][ T4012] dump_stack+0x15/0x1b [ 142.797686][ T4012] warn_alloc+0x12b/0x1a0 [ 142.797760][ T4012] __vmalloc_node_range_noprof+0x2b3/0x1310 [ 142.797789][ T4012] ? __rcu_read_unlock+0x4f/0x70 [ 142.797879][ T4012] ? avc_has_perm_noaudit+0xab/0x130 [ 142.797903][ T4012] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 142.797924][ T4012] __vmalloc_noprof+0xa4/0xf0 [ 142.797989][ T4012] ? bpf_prog_alloc_no_stats+0x47/0x390 [ 142.798010][ T4012] bpf_prog_alloc_no_stats+0x47/0x390 [ 142.798030][ T4012] ? bpf_prog_alloc+0x2a/0x150 [ 142.798061][ T4012] bpf_prog_alloc+0x3c/0x150 [ 142.798081][ T4012] bpf_prog_load+0x506/0x1140 [ 142.798173][ T4012] ? security_bpf+0x2b/0x90 [ 142.798200][ T4012] __sys_bpf+0x469/0x7c0 [ 142.798225][ T4012] __x64_sys_bpf+0x41/0x50 [ 142.798244][ T4012] x64_sys_call+0x28e1/0x3000 [ 142.798290][ T4012] do_syscall_64+0xd8/0x2a0 [ 142.798322][ T4012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.798387][ T4012] RIP: 0033:0x7f6c3dfff749 [ 142.798404][ T4012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.798488][ T4012] RSP: 002b:00007f6c3ca5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 142.798508][ T4012] RAX: ffffffffffffffda RBX: 00007f6c3e255fa0 RCX: 00007f6c3dfff749 [ 142.798522][ T4012] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 142.798607][ T4012] RBP: 00007f6c3ca5f090 R08: 0000000000000000 R09: 0000000000000000 [ 142.798621][ T4012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.798633][ T4012] R13: 00007f6c3e256038 R14: 00007f6c3e255fa0 R15: 00007ffe50deb5e8 [ 142.798652][ T4012] [ 142.798659][ T4012] Mem-Info: [ 142.814870][ T4013] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4013 comm=syz.1.1894 [ 142.819128][ T4012] active_anon:24950 inactive_anon:15 isolated_anon:0 [ 142.819128][ T4012] active_file:24908 inactive_file:2812 isolated_file:0 [ 142.819128][ T4012] unevictable:0 dirty:521 writeback:0 [ 142.819128][ T4012] slab_reclaimable:3680 slab_unreclaimable:35102 [ 142.819128][ T4012] mapped:29703 shmem:17619 pagetables:1287 [ 142.819128][ T4012] sec_pagetables:0 bounce:0 [ 142.819128][ T4012] kernel_misc_reclaimable:0 [ 142.819128][ T4012] free:1844190 free_pcp:5334 free_cma:0 [ 142.824839][ T4013] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4013 comm=syz.1.1894 [ 142.830824][ T4012] Node 0 active_anon:99800kB inactive_anon:60kB active_file:99632kB inactive_file:11248kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118812kB dirty:2084kB writeback:0kB shmem:70476kB kernel_stack:5440kB pagetables:5148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 143.141200][ T4024] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 143.143617][ T4012] Node 0 [ 143.148865][ T4023] vhci_hcd vhci_hcd.4: invalid port number 236 [ 143.153199][ T4012] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 143.391175][ T4012] lowmem_reserve[]: 0 2880 7859 7859 [ 143.396622][ T4012] Node 0 DMA32 free:2945972kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2949500kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 143.430021][ T4012] lowmem_reserve[]: 0 0 4978 4978 [ 143.435188][ T4012] Node 0 Normal free:4413456kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:99800kB inactive_anon:60kB active_file:99632kB inactive_file:11248kB unevictable:0kB writepending:2084kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:16992kB local_pcp:10468kB free_cma:0kB [ 143.469965][ T4012] lowmem_reserve[]: 0 0 0 0 [ 143.474764][ T4012] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 143.487650][ T4012] Node 0 DMA32: 5*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2945972kB [ 143.504327][ T4012] Node 0 Normal: 1425*4kB (UME) 1232*8kB (UME) 828*16kB (UME) 883*32kB (UM) 728*64kB (UME) 582*128kB (UM) 380*256kB (UM) 280*512kB (UM) 219*1024kB (UME) 217*2048kB (UM) 812*4096kB (UM) = 4413412kB [ 143.525102][ T4012] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 143.534858][ T4012] 45348 total pagecache pages [ 143.539727][ T4012] 16 pages in swap cache [ 143.544277][ T4012] Free swap = 124932kB [ 143.548451][ T4012] Total swap = 124996kB [ 143.553107][ T4012] 2097051 pages RAM [ 143.557533][ T4012] 0 pages HighMem/MovableOnly [ 143.562604][ T4012] 81276 pages reserved [ 143.588734][ T4026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'. [ 143.600100][ T4026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1899'. [ 143.678111][ T3642] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.907504][ T4044] loop3: detected capacity change from 0 to 512 [ 143.914532][ T4044] EXT4-fs: Ignoring removed i_version option [ 143.920756][ T4044] EXT4-fs: Ignoring removed bh option [ 143.932649][ T4047] netlink: 'syz.2.1904': attribute type 7 has an invalid length. [ 143.952721][ T4044] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.982971][ T4044] ext4 filesystem being mounted at /380/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 144.077601][ T4039] lo speed is unknown, defaulting to 1000 [ 144.125969][ T4022] loop1: detected capacity change from 0 to 1764 [ 144.166742][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.220066][ T4060] loop3: detected capacity change from 0 to 1024 [ 144.236702][ T4036] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 144.253518][ T4060] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 144.264148][ T4036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.281255][ T4060] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.311510][ T4036] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.322291][ T4060] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 144.326121][ T4041] lo speed is unknown, defaulting to 1000 [ 144.337256][ T4060] EXT4-fs (loop3): orphan cleanup on readonly fs [ 144.355569][ T4060] EXT4-fs error (device loop3): ext4_read_inode_bitmap:167: comm syz.3.1906: Inode bitmap for bg 0 marked uninitialized [ 144.380495][ T4060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 144.466203][ T4068] EXT4-fs: Ignoring removed bh option [ 144.513484][ T4068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.546554][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.556716][ T4041] chnl_net:caif_netlink_parms(): no params data found [ 144.674054][ T4041] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.681566][ T4041] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.707637][ T4041] bridge_slave_0: entered allmulticast mode [ 144.715012][ T3316] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.715053][ T4041] bridge_slave_0: entered promiscuous mode [ 144.734752][ T4041] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.741968][ T4041] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.766228][ T4041] bridge_slave_1: entered allmulticast mode [ 144.816194][ T4041] bridge_slave_1: entered promiscuous mode [ 144.839745][ T3642] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.886496][ T4041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 144.913002][ T4041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 144.925481][ T3642] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.986623][ T3642] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.032375][ T4041] team0: Port device team_slave_0 added [ 145.046548][ T4041] team0: Port device team_slave_1 added [ 145.067668][ T4041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.075075][ T4041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.102372][ T4041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.128163][ T4041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.135409][ T4041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 145.161872][ T4041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.217261][ T4041] hsr_slave_0: entered promiscuous mode [ 145.225200][ T4041] hsr_slave_1: entered promiscuous mode [ 145.231830][ T4041] debugfs: 'hsr0' already exists in 'hsr' [ 145.237764][ T4041] Cannot create hsr debugfs directory [ 145.254014][ T3642] bridge_slave_1: left allmulticast mode [ 145.259791][ T3642] bridge_slave_1: left promiscuous mode [ 145.265660][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.294656][ T3642] bridge_slave_0: left allmulticast mode [ 145.300584][ T3642] bridge_slave_0: left promiscuous mode [ 145.306591][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.395660][ T3642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.416742][ T3642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.437660][ T3642] bond0 (unregistering): Released all slaves [ 145.495127][ T4099] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4099 comm=syz.2.1919 [ 145.618190][ T4099] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=4099 comm=syz.2.1919 [ 145.660831][ T3642] hsr_slave_0: left promiscuous mode [ 145.693327][ T4117] netlink: 'syz.1.1923': attribute type 1 has an invalid length. [ 146.234136][ T4135] set_capacity_and_notify: 3 callbacks suppressed [ 146.234154][ T4135] loop3: detected capacity change from 0 to 512 [ 146.260604][ T4137] loop1: detected capacity change from 0 to 512 [ 146.272960][ T3642] hsr_slave_1: left promiscuous mode [ 146.279010][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.287210][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.291977][ T4137] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 146.304219][ T3642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.312574][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.320695][ T4135] EXT4-fs: Ignoring removed i_version option [ 146.327030][ T4135] EXT4-fs: Ignoring removed bh option [ 146.336707][ T3642] veth1_macvtap: left promiscuous mode [ 146.342381][ T3642] veth0_macvtap: left promiscuous mode [ 146.348085][ T3642] veth1_vlan: left promiscuous mode [ 146.354648][ T3642] veth0_vlan: left promiscuous mode [ 146.371389][ T4135] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.387262][ T4135] ext4 filesystem being mounted at /388/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.394904][ T4137] loop1: detected capacity change from 0 to 2048 [ 146.462678][ T4137] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 146.517735][ T3642] team0 (unregistering): Port device team_slave_1 removed [ 146.530577][ T3642] team0 (unregistering): Port device team_slave_0 removed [ 146.547843][ T29] kauditd_printk_skb: 964 callbacks suppressed [ 146.547860][ T29] audit: type=1400 audit(1765673251.129:22817): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 146.581045][ T29] audit: type=1400 audit(1765673251.159:22818): avc: denied { module_request } for pid=4126 comm="syz.3.1928" kmod="netdev-pim6reg1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 146.614881][ T29] audit: type=1400 audit(1765673251.169:22819): avc: denied { sys_module } for pid=4126 comm="syz.3.1928" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 146.751709][ T29] audit: type=1400 audit(1765673251.229:22820): avc: denied { map_create } for pid=4147 comm="syz.1.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 146.771930][ T29] audit: type=1400 audit(1765673251.239:22821): avc: denied { allowed } for pid=4147 comm="syz.1.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 146.791644][ T29] audit: type=1400 audit(1765673251.239:22822): avc: denied { create } for pid=4147 comm="syz.1.1931" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 146.814494][ T29] audit: type=1400 audit(1765673251.239:22823): avc: denied { map } for pid=4147 comm="syz.1.1931" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 146.839930][ T29] audit: type=1400 audit(1765673251.239:22824): avc: denied { read write } for pid=4147 comm="syz.1.1931" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=24685 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 146.969211][ T4158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 146.977402][ T4158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 146.985333][ T4158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 146.993121][ T4158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.001080][ T4158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.008950][ T4158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.016723][ T4158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.024523][ T4158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.033066][ T4158] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 147.045818][ T29] audit: type=1400 audit(1765673251.549:22825): avc: denied { create } for pid=4152 comm="syz.1.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 147.066249][ T29] audit: type=1400 audit(1765673251.549:22826): avc: denied { map_read map_write } for pid=4152 comm="syz.1.1933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 147.164854][ T4166] random: crng reseeded on system resumption [ 147.175533][ T4166] Restarting kernel threads ... [ 147.180960][ T4166] Done restarting kernel threads. [ 147.196450][ T9] hid_parser_main: 8 callbacks suppressed [ 147.196470][ T9] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 147.209988][ T9] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 147.217570][ T9] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 147.225349][ T9] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 147.233069][ T9] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 147.240872][ T9] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 147.249176][ T9] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 147.256979][ T9] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 147.264508][ T9] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 147.272082][ T9] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 147.281066][ C0] ================================================================== [ 147.289367][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 147.296796][ C0] [ 147.299227][ C0] read-write to 0xffff8881000738b8 of 8 bytes by interrupt on cpu 1: [ 147.307584][ C0] wq_worker_tick+0x60/0x230 [ 147.312746][ C0] sched_tick+0xd7/0x220 [ 147.317629][ C0] update_process_times+0x15f/0x190 [ 147.323159][ C0] tick_nohz_handler+0x276/0x3d0 [ 147.328366][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 147.333750][ C0] hrtimer_interrupt+0x21a/0x460 [ 147.338806][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 147.345475][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 147.351847][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 147.358466][ C0] __tsan_read8+0x14/0x190 [ 147.362995][ C0] nsim_dev_trap_report_work+0x149/0x630 [ 147.369017][ C0] process_scheduled_works+0x4ce/0x9d0 [ 147.374699][ C0] worker_thread+0x582/0x770 [ 147.379776][ C0] kthread+0x489/0x510 [ 147.383977][ C0] ret_from_fork+0x149/0x290 [ 147.388846][ C0] ret_from_fork_asm+0x1a/0x30 [ 147.393730][ C0] [ 147.396053][ C0] read-write to 0xffff8881000738b8 of 8 bytes by interrupt on cpu 0: [ 147.404476][ C0] wq_worker_tick+0x60/0x230 [ 147.409272][ C0] sched_tick+0xd7/0x220 [ 147.413608][ C0] update_process_times+0x15f/0x190 [ 147.418819][ C0] tick_nohz_handler+0x276/0x3d0 [ 147.423847][ C0] __hrtimer_run_queues+0x20f/0x5a0 [ 147.429142][ C0] hrtimer_interrupt+0x21a/0x460 [ 147.434180][ C0] __sysvec_apic_timer_interrupt+0x5f/0x1d0 [ 147.440180][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 147.446203][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 147.452317][ C0] crng_make_state+0xf7/0x250 [ 147.457178][ C0] _get_random_bytes+0x85/0x190 [ 147.462051][ C0] get_random_bytes+0x1d/0x30 [ 147.466838][ C0] nsim_dev_trap_report_work+0x23c/0x630 [ 147.472727][ C0] process_scheduled_works+0x4ce/0x9d0 [ 147.478993][ C0] worker_thread+0x582/0x770 [ 147.483864][ C0] kthread+0x489/0x510 [ 147.488231][ C0] ret_from_fork+0x149/0x290 [ 147.493093][ C0] ret_from_fork_asm+0x1a/0x30 [ 147.497873][ C0] [ 147.500475][ C0] value changed: 0x0000000000528cd0 -> 0x000000000052b3e0 [ 147.507701][ C0] [ 147.510036][ C0] Reported by Kernel Concurrency Sanitizer on: [ 147.516486][ C0] CPU: 0 UID: 0 PID: 3646 Comm: kworker/u8:36 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 147.528978][ C0] Tainted: [W]=WARN [ 147.533268][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 147.543790][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 147.550674][ C0] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 147.571473][ T4170] 9pnet_fd: Insufficient options for proto=fd [ 147.588659][ T4170] wg1 speed is unknown, defaulting to 1000 [ 147.615005][ T4170] wg1 speed is unknown, defaulting to 1000 [ 147.628536][ T4041] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 147.660814][ T9] hid-generic 0003:0004:0000.0008: hidraw0: USB HID v0.02 Device [syz0] on syz1 [ 147.724042][ T4170] wg1 speed is unknown, defaulting to 1000 [ 147.730802][ T4170] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 147.788962][ T4170] wg1 speed is unknown, defaulting to 1000 [ 147.798425][ T4170] wg1 speed is unknown, defaulting to 1000 [ 147.806505][ T4170] wg1 speed is unknown, defaulting to 1000 [ 147.813589][ T4170] wg1 speed is unknown, defaulting to 1000 [ 147.819877][ T4170] wg1 speed is unknown, defaulting to 1000 [ 147.826606][ T4170] wg1 speed is unknown, defaulting to 1000 [ 148.578261][ T3642] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.593119][ T3642] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.642693][ T3642] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.702824][ T3642] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.808044][ T3642] bridge_slave_1: left allmulticast mode [ 148.813947][ T3642] bridge_slave_1: left promiscuous mode [ 148.819730][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.827732][ T3642] bridge_slave_0: left allmulticast mode [ 148.833680][ T3642] bridge_slave_0: left promiscuous mode [ 148.839595][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.848298][ T3642] bridge_slave_1: left allmulticast mode [ 148.854125][ T3642] bridge_slave_1: left promiscuous mode [ 148.859921][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.868879][ T3642] bridge_slave_0: left promiscuous mode [ 148.875181][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.885283][ T3642] bridge_slave_1: left allmulticast mode [ 148.891455][ T3642] bridge_slave_1: left promiscuous mode [ 148.897187][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.905656][ T3642] bridge_slave_0: left allmulticast mode [ 148.911564][ T3642] bridge_slave_0: left promiscuous mode [ 148.917458][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.003657][ T3642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.014029][ T3642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.023926][ T3642] bond0 (unregistering): Released all slaves [ 149.243098][ T3642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.253198][ T3642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.263391][ T3642] bond0 (unregistering): Released all slaves [ 149.343505][ T3642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.353903][ T3642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.364656][ T3642] bond0 (unregistering): Released all slaves [ 149.567088][ T3642] hsr_slave_0: left promiscuous mode [ 149.573054][ T3642] hsr_slave_1: left promiscuous mode [ 149.579032][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.588432][ T3642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.598904][ T3642] hsr_slave_0: left promiscuous mode [ 149.605392][ T3642] hsr_slave_1: left promiscuous mode [ 149.613660][ T3642] hsr_slave_0: left promiscuous mode [ 149.619535][ T3642] hsr_slave_1: left promiscuous mode [ 149.629072][ T3642] veth1_macvtap: left promiscuous mode [ 149.634874][ T3642] veth0_macvtap: left promiscuous mode [ 149.640924][ T3642] veth1_vlan: left promiscuous mode [ 149.647621][ T3642] veth0_vlan: left promiscuous mode [ 149.720176][ T3642] team0 (unregistering): Port device team_slave_1 removed [ 149.733401][ T3642] team0 (unregistering): Port device team_slave_0 removed [ 149.784086][ T3642] pim6reg (unregistering): left allmulticast mode [ 149.818439][ T3642] team0 (unregistering): Port device team_slave_1 removed [ 149.829282][ T3642] team0 (unregistering): Port device team_slave_0 removed [ 149.899101][ T3642] team0 (unregistering): Port device team_slave_1 removed [ 149.908709][ T3642] team0 (unregistering): Port device team_slave_0 removed [ 150.408229][ T3642] IPVS: stop unused estimator thread 0... [ 150.463795][ T3642] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.513262][ T3642] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.564263][ T3642] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.604112][ T3642] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.658432][ T3642] bridge_slave_1: left allmulticast mode [ 150.664331][ T3642] bridge_slave_1: left promiscuous mode [ 150.670090][ T3642] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.678741][ T3642] bridge_slave_0: left allmulticast mode [ 150.684465][ T3642] bridge_slave_0: left promiscuous mode [ 150.690287][ T3642] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.872788][ T3642] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.883912][ T3642] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.894086][ T3642] bond0 (unregistering): Released all slaves [ 150.971790][ T3642] IPVS: stopping master sync thread 4024 ... [ 151.017081][ T3642] hsr_slave_0: left promiscuous mode [ 151.023101][ T3642] hsr_slave_1: left promiscuous mode [ 151.030007][ T3642] veth1_vlan: left promiscuous mode [ 151.035646][ T3642] veth0_vlan: left promiscuous mode [ 151.100234][ T3642] team0 (unregistering): Port device team_slave_1 removed [ 151.110588][ T3642] team0 (unregistering): Port device team_slave_0 removed [ 151.118385][ T330] smc: removing ib device syz! [ 151.149468][ T10] wg1 speed is unknown, defaulting to 1000 [ 151.155483][ T10] infiniband syz0: ib_query_port failed (-19)