last executing test programs: 755.322332ms ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000a00)=[{&(0x7f0000000500)=""/228, 0xe4}], 0x1, 0x9, 0x6) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x420, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0xfffffffffffffffd], 0x0, 0x8340}) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000040)={0x681c5622, 0x6}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x37a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0xa4, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xc337, 0x2, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x61, 0x3, 0x28}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000540)={0x2c, &(0x7f0000000100)={0x20, 0x21, 0x29, {0x29, 0x1, "7d611870cced50a6dc9b9baae6e4fb07347310bcb53837f15d7c0201458010d302afc5dfce714d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1e4062, &(0x7f0000000500)=ANY=[@ANYBLOB='gid=', @ANYRESHEX]) close(r4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 591.478746ms ago: executing program 1 (id=2): syz_mount_image$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x40, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) write$P9_RLERRORu(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB='S\x00\x00\x00\a\x00\x00', @ANYRES32], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) sendfile(r0, r0, &(0x7f0000000040)=0x9d78, 0x3) 526.290177ms ago: executing program 1 (id=6): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r2, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f00000001c0), 0x8) fcntl$addseals(r2, 0x409, 0x8) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 439.088839ms ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x12, 0x21, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x59, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xfffffffa}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @cgroup_sock_addr=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 405.49382ms ago: executing program 2 (id=7): syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaa0c080045000020000000000011907c00"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1829190000dd00"/24], 0x0, 0x0, 0x0, 0x0, 0xefdf7c3f98055ac7, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r2 = socket$netlink(0x10, 0x3, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x1800, &(0x7f0000000100)={0x0, 0x162edb901878112f}, 0x20) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000080)="0ac268b7bb145138d488c53769f5952b32df6bf0c23ce5b12cd42ac8eff30a165c4d32fb23aaeef5293cad", 0x2b}, {&(0x7f0000000200)="4e61e10aaa57a5fab9a2cbefb3cab3e2567519ad86f2510620a42503554d18538b7a3267228bc29a36062b6694cd0c577415eee8935cf26dcfe96b66259837ffb7a90b1284095d907f4774debac23735f23c36ad8337cba6206014c8b183d863f77cf55304c812ac9a0519c5572c132f984a2179824286a9b40d60a6f29d2a3d91fb8ddcd57993b87c7b020ce756acdf6710a0eb48c37517b58a85f1bcccfdbba95f6508c997716c90c99f12f1675f407cd32af9907d76fbafc6a6341eef5c6eb10e1210610597f1b029afc0257170a035cdf3e23f044e765eb298098e7d659e377877d2af2230edc580eb6521dddd3b342104", 0xf3}, {&(0x7f0000000300)="c8b751d27573c32137fbb99820e189caace051fabd015a83378fe6721efd62873a88e6d2e622a5296606964f3dca233e4da44cd6bbadc7a18913ac98843bbeaae78368cdab6726715c494d4832edf5ea05d1c4960dca0d4a8d895c5dd812ffbcc6e05e82e7db039dc2183ae17329a7e624960ab1f6c288694a50f55fd51034cc", 0x80}, {&(0x7f0000000380)="f8b89e2eb7527295a70228b4134bc053", 0x10}, {&(0x7f0000000140)="60031fcec249b5d6f0da3033c7e9cd3000"/29, 0x1d}], 0x100000000000004e) writev(r2, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = socket$inet(0x2, 0xa, 0x7) socket$inet(0x2, 0x2, 0x1) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x0, &(0x7f0000000340), 0x4, 0x58d, &(0x7f0000000dc0)="$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") r4 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r4, &(0x7f0000000880)={0x28, 0x0, 0x2710, @local}, 0x10) shutdown(r4, 0x1) sendmmsg$sock(r4, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000005c0), 0x10200) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000580)={@id={0x2, 0x0, @a}}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006910a300000000000400"/32], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtaction={0x128, 0x30, 0x1, 0x800001, 0x0, {}, [{0x114, 0x1, [@m_csum={0x110, 0x18, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x80000000, 0x4ff, 0x3, 0x81, 0x5}, 0x21}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd74, 0x6, 0x3, 0x9, 0x2}, 0x4}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0xc4, 0x4, 0xfffffff9, 0x7fff}, 0x28}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8b7, 0x4c0a, 0xfffffffffffffff5, 0x1000, 0x3}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x10001, 0x0, 0x5, 0x401}, 0x4e}}]}, {0x56, 0x6, "694c17c40dbd1768cb1eb238689d391af6de7ced99b4696e506384a3847acf355aa285bfc8845c0fba7185808a7845b1b78822e247a32deac7bf714b37e673aaebc77889e5548fa273d0e0aeb0ecad327cfa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000680)={'#! ', './file1', [], 0xa, "cc2e9a0912d39fc14259c7e86701b583afab788a834701365a911cf2a47dd4902c482822d3a9398a4fc79d4269df5f737b6b1c4bc4abbca5de"}, 0x44) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f00000003c0)={0x10}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000540)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4000}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x24) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) setsockopt$inet_mreqsrc(r3, 0x0, 0x25, &(0x7f0000000440)={@multicast2, @remote, @rand_addr=0x64010102}, 0xfffffffffffffe19) 362.151481ms ago: executing program 3 (id=4): open$dir(&(0x7f0000000080)='./file0\x00', 0x2800, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000008d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff010000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2b}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0xa4) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x100d0) write$tun(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000088fbbbbbbbbbbbbb5da4772445968100310008004500005c00632000032f"], 0x72) 282.226063ms ago: executing program 1 (id=8): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0x20, &(0x7f00000012c0)={&(0x7f0000000480)=""/237, 0xed, 0x0, &(0x7f00000011c0)=""/218, 0xda}}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0xa20, 0x8000c65) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000380)=0xffffffff) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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") setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), &(0x7f0000000280)=ANY=[], 0x835, 0x1) lchown(&(0x7f0000000000)='./file1\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), 0xffffffffffffffff) r4 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r4, &(0x7f00000002c0)="9ad36bf1a51f707ddefa003b406f4379d07a799a91aafa39e160a8fd3bb7c40f921c13cfc1363fc1c6f812aeb30d2401d00264447bde29adff4ebe37b825a2f52c1473d5461d43e275fca5c2d0f28040ee42488d98f7e5b6debb244ffbb7818690887228", 0x64, 0x41, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x1, 0x5, 0x6, @random="70d28260e66c"}, 0x14) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r2, &(0x7f0000004040)={0x0, 0x0, &(0x7f0000004000)={&(0x7f0000001340)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="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"], 0xbac}, 0x1, 0x0, 0x0, 0x4}, 0x8000) sendmsg$NL80211_CMD_SET_WOWLAN(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9000"/13, @ANYRES16=r3, @ANYBLOB="00022dbd7000ffdbdf254a00000010007580040008000400070004000100"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="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"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x40004) 52.422878ms ago: executing program 4 (id=5): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) syz_usb_connect(0x3, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a2401"], 0x0) 24.147619ms ago: executing program 3 (id=9): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000000)='proc\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='proc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='proc/kallsyms\x00', 0x0, 0x0) lseek(r0, 0x8, 0x0) (async) read(r0, &(0x7f0000010000), 0x10000) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x10}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmmsg(r2, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r1, @ANYBLOB="06001c004e21000008000100ac1414", @ANYRES16], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000440)={0x5, &(0x7f0000000140)=[{}, {@none}, {@none}, {@fixed}, {@fixed}]}) (async) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000003c0)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x0, 0x53}, 0x28) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) syz_ublk_setup_queues(0xffffffffffffffff, r7, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ef9, 0x80000, 0x1000000, 0x33d, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x94dd, 0x20, 0x0, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a6b, 0x800, 0x0, 0xca, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x40, 0x2, 0xffffffff, 0x0, r5}}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x3, 0x571, &(0x7f0000000940)="$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") r11 = open(&(0x7f0000000040)='./file1\x00', 0x4827e, 0x20) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r11, 0x9000) (async) r12 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ftruncate(r12, 0x7fffffff) 0s ago: executing program 2 (id=10): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) r1 = socket(0xa, 0x3, 0xff) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000071180d000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x82100, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet6(r1, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0xa, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000290000000800"], 0x18}, 0x922bac8556bdad8e) kernel console output (not intermixed with test programs): [ 6.523885][ T28] audit: type=1400 audit(1785499067.976:58): avc: denied { read } for pid=195 comm="getty" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:getty_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 syzkaller syzkaller login: [ 14.226841][ T28] audit: type=1400 audit(1785499075.686:59): avc: denied { transition } for pid=225 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.230512][ T28] audit: type=1400 audit(1785499075.686:60): avc: denied { noatsecure } for pid=225 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.233559][ T28] audit: type=1400 audit(1785499075.686:61): avc: denied { write } for pid=225 comm="sh" path="pipe:[9053]" dev="pipefs" ino=9053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.236890][ T28] audit: type=1400 audit(1785499075.686:62): avc: denied { rlimitinh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.239947][ T28] audit: type=1400 audit(1785499075.686:63): avc: denied { siginh } for pid=225 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. [ 21.520201][ T28] audit: type=1400 audit(1785499082.986:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.521222][ T279] cgroup: Unknown subsys name 'net' [ 21.543266][ T28] audit: type=1400 audit(1785499082.986:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.570862][ T28] audit: type=1400 audit(1785499083.016:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.571034][ T279] cgroup: Unknown subsys name 'devices' [ 21.688858][ T279] cgroup: Unknown subsys name 'hugetlb' [ 21.694567][ T279] cgroup: Unknown subsys name 'rlimit' [ 21.826687][ T28] audit: type=1400 audit(1785499083.286:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.849913][ T28] audit: type=1400 audit(1785499083.286:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.874778][ T28] audit: type=1400 audit(1785499083.286:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.903952][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.913108][ T28] audit: type=1400 audit(1785499083.376:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.938612][ T28] audit: type=1400 audit(1785499083.376:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.967673][ T28] audit: type=1400 audit(1785499083.436:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.968083][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.993738][ T28] audit: type=1400 audit(1785499083.436:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.825879][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.833049][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.840740][ T290] device bridge_slave_0 entered promiscuous mode [ 22.849463][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.856510][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.864001][ T290] device bridge_slave_1 entered promiscuous mode [ 22.913749][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.920970][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.928583][ T287] device bridge_slave_0 entered promiscuous mode [ 22.953973][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.961192][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.968811][ T287] device bridge_slave_1 entered promiscuous mode [ 22.988723][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.996058][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.004015][ T288] device bridge_slave_0 entered promiscuous mode [ 23.020236][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.027393][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.035152][ T288] device bridge_slave_1 entered promiscuous mode [ 23.048490][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.055647][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.063167][ T289] device bridge_slave_0 entered promiscuous mode [ 23.073592][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.080843][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.088264][ T289] device bridge_slave_1 entered promiscuous mode [ 23.180840][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.187991][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.195472][ T291] device bridge_slave_0 entered promiscuous mode [ 23.202764][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.209841][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.217458][ T291] device bridge_slave_1 entered promiscuous mode [ 23.293243][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.300423][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.351649][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.358742][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.366068][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.373120][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.381035][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.388096][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.395355][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.402401][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.437685][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.444866][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.452247][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.459378][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.487757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.496587][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.503900][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.512123][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.519388][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.526852][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.534123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.542451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.552020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.559422][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.566867][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.575365][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.583642][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.591225][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.608283][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.629175][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.643819][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.661094][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.678908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.686483][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.694566][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.703712][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.712161][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.719268][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.726797][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.735216][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.742376][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.756094][ T289] device veth0_vlan entered promiscuous mode [ 23.771819][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.779517][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.787842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.795535][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.803464][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.811943][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.819105][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.826433][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.834718][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.841764][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.849304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.857657][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.864692][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.872242][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.880423][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.887507][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.895624][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.913622][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.922241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.930757][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.939145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.947763][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.955793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.967325][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.975488][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.985955][ T289] device veth1_macvtap entered promiscuous mode [ 24.003247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.011177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.019564][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.027822][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.036064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.054148][ T290] device veth0_vlan entered promiscuous mode [ 24.064726][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.073192][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.081489][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.090169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.098860][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.107260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.115592][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.123735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.131993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.140186][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.148387][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.155912][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.168447][ T290] device veth1_macvtap entered promiscuous mode [ 24.177360][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.185636][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.194185][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.202394][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.210865][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.222331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.231121][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.255382][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.263862][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.264078][ T289] request_module fs-gadgetfs succeeded, but still no fs? [ 24.273150][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.288135][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.296534][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.305155][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.313975][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.322005][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.330283][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.337941][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.348332][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.356278][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.366821][ T287] device veth0_vlan entered promiscuous mode [ 24.378244][ T288] device veth0_vlan entered promiscuous mode [ 24.390234][ T310] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.397577][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.414081][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.424832][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.433041][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.457665][ T291] device veth0_vlan entered promiscuous mode [ 24.467729][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.476643][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.487489][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.495797][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.504153][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.513098][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.523104][ T287] device veth1_macvtap entered promiscuous mode [ 24.530502][ T288] device veth1_macvtap entered promiscuous mode [ 24.553182][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.561884][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.570428][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.579422][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.606359][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.615433][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.624429][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.633252][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.641816][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.650539][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.659307][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.667657][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.678025][ T291] device veth1_macvtap entered promiscuous mode [ 24.709487][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.717453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.726634][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.743870][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.752094][ T60] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.753528][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.777447][ T324] netlink: 'syz.2.7': attribute type 4 has an invalid length. [ 24.785738][ T324] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 24.788350][ T327] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 24.805309][ T324] loop2: detected capacity change from 0 to 1024 [ 24.826595][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready [ 24.830726][ T329] loop1: detected capacity change from 0 to 512 [ 24.835770][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 24.851847][ T324] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 24.853988][ T329] ======================================================= [ 24.853988][ T329] WARNING: The mand mount option has been deprecated and [ 24.853988][ T329] and is ignored by this kernel. Remove the mand [ 24.853988][ T329] option from the mount to silence this warning. [ 24.853988][ T329] ======================================================= [ 24.861145][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 24.916363][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 24.926270][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 24.934173][ T329] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 24.943448][ T329] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 24.946993][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 24.954495][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 24.960048][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 24.982624][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 24.983650][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.991961][ T336] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 25.004022][ T60] usb 1-1: New USB device found, idVendor=056a, idProduct=037a, bcdDevice= 0.00 [ 25.020076][ T329] EXT4-fs error (device loop1): ext4_acquire_dquot:6828: comm syz.1.8: Failed to acquire dquot type 0 [ 25.027373][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.038925][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 25.049963][ T60] usb 1-1: config 0 descriptor?? [ 25.090840][ T329] device ip6gretap1 entered promiscuous mode [ 25.128555][ T8] ------------[ cut here ]------------ [ 25.134262][ T8] kernel BUG at fs/ext4/inode.c:2763! [ 25.141102][ T290] EXT4-fs (loop1): unmounting filesystem. [ 25.148165][ T344] loop3: detected capacity change from 0 to 1024 [ 25.155112][ T8] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 25.161197][ T8] CPU: 0 PID: 8 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 25.168485][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.178545][ T8] Workqueue: writeback wb_workfn (flush-7:2) [ 25.184640][ T8] RIP: 0010:ext4_writepages+0x3085/0x30a0 [ 25.190371][ T8] Code: ac 84 ff 84 db 75 31 e8 99 a9 84 ff 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 20 48 8b 5c 24 30 e9 41 d3 ff ff e8 7b a9 84 ff <0f> 0b e8 74 a9 84 ff e8 eb bf 13 ff eb 98 e8 68 a9 84 ff e8 df bf [ 25.210240][ T8] RSP: 0018:ffffc90000087120 EFLAGS: 00010293 [ 25.216489][ T8] RAX: ffffffff81ecbcc5 RBX: 000000c410000000 RCX: ffff888100299440 [ 25.224565][ T8] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 25.232554][ T8] RBP: ffffc90000087490 R08: ffff888117a7561f R09: 1ffff11022f4eac3 [ 25.240536][ T8] R10: dffffc0000000000 R11: ffffed1022f4eac4 R12: 0000000000000001 [ 25.249124][ T8] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff8881131ce000 [ 25.257116][ T8] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 25.266046][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.272625][ T8] CR2: 0000555592004908 CR3: 0000000130219000 CR4: 00000000003526b0 [ 25.280697][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.288669][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.296661][ T8] Call Trace: [ 25.300034][ T8] [ 25.302979][ T8] ? debug_smp_processor_id+0x17/0x20 [ 25.308377][ T8] ? __cfi_ext4_writepages+0x10/0x10 [ 25.313676][ T8] ? __cfi____update_load_sum+0x10/0x10 [ 25.319237][ T8] ? __kasan_check_write+0x14/0x20 [ 25.324354][ T8] ? __cfi_ext4_writepages+0x10/0x10 [ 25.329647][ T8] do_writepages+0x3ab/0x600 [ 25.334249][ T8] ? __cfi_do_writepages+0x10/0x10 [ 25.339358][ T8] ? kvm_sched_clock_read+0x18/0x40 [ 25.344653][ T8] ? sched_clock+0x9/0x10 [ 25.348992][ T8] ? sched_clock_cpu+0x6e/0x260 [ 25.353931][ T8] ? __kasan_check_write+0x14/0x20 [ 25.359044][ T8] ? _raw_spin_lock+0x94/0xf0 [ 25.363721][ T8] __writeback_single_inode+0xd9/0xb10 [ 25.369271][ T8] ? wbc_attach_and_unlock_inode+0xce/0x500 [ 25.375163][ T8] ? inode_io_list_move_locked+0x366/0x3d0 [ 25.380971][ T8] writeback_sb_inodes+0x9fd/0x1610 [ 25.386186][ T8] ? queue_io+0x4b0/0x4b0 [ 25.390541][ T8] ? __kasan_check_read+0x11/0x20 [ 25.395565][ T8] ? queue_io+0x377/0x4b0 [ 25.399897][ T8] wb_writeback+0x3eb/0x990 [ 25.404500][ T8] ? inode_cgwb_move_to_attached+0x3b0/0x3b0 [ 25.410487][ T8] ? set_worker_desc+0x1ba/0x1f0 [ 25.415434][ T8] ? __kasan_check_write+0x14/0x20 [ 25.420630][ T8] ? kvm_sched_clock_read+0x18/0x40 [ 25.425837][ T8] wb_workfn+0x378/0xeb0 [ 25.430080][ T8] ? __cfi_wb_workfn+0x10/0x10 [ 25.434844][ T8] ? __cfi___switch_to+0x10/0x10 [ 25.439868][ T8] ? kthread_data+0x50/0xc0 [ 25.444537][ T8] ? _raw_spin_unlock+0x4c/0x70 [ 25.449388][ T8] ? finish_task_switch+0x16b/0x7c0 [ 25.454591][ T8] ? switch_mm_irqs_off+0x32d/0x960 [ 25.459803][ T8] ? __schedule+0xbea/0x14b0 [ 25.464401][ T8] process_one_work+0x717/0xc30 [ 25.469257][ T8] worker_thread+0xa4d/0x11d0 [ 25.473951][ T8] kthread+0x281/0x320 [ 25.478024][ T8] ? __cfi_worker_thread+0x10/0x10 [ 25.483134][ T8] ? __cfi_kthread+0x10/0x10 [ 25.487734][ T8] ret_from_fork+0x1f/0x30 [ 25.492165][ T8] [ 25.495181][ T8] Modules linked in: [ 25.536232][ T344] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.9: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 25.539499][ T8] ---[ end trace 0000000000000000 ]--- [ 25.561190][ T8] RIP: 0010:ext4_writepages+0x3085/0x30a0 [ 25.566272][ T344] EXT4-fs (loop3): get root inode failed [ 25.572920][ T8] Code: ac 84 ff 84 db 75 31 e8 99 a9 84 ff 49 bd 00 00 00 00 00 fc ff df 4c 8b 7c 24 20 48 8b 5c 24 30 e9 41 d3 ff ff e8 7b a9 84 ff <0f> 0b e8 74 a9 84 ff e8 eb bf 13 ff eb 98 e8 68 a9 84 ff e8 df bf [ 25.574472][ T344] EXT4-fs (loop3): mount failed [ 25.592844][ T8] RSP: 0018:ffffc90000087120 EFLAGS: 00010293 [ 25.603955][ T8] RAX: ffffffff81ecbcc5 RBX: 000000c410000000 RCX: ffff888100299440 [ 25.612609][ T8] RDX: 0000000000000000 RSI: 0000008000000000 RDI: 0000000000000000 [ 25.621874][ T8] RBP: ffffc90000087490 R08: ffff888117a7561f R09: 1ffff11022f4eac3 [ 25.630103][ T8] R10: dffffc0000000000 R11: ffffed1022f4eac4 R12: 0000000000000001 [ 25.638693][ T8] R13: dffffc0000000000 R14: 0000008000000000 R15: ffff8881131ce000 [ 25.646896][ T8] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 25.656233][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 25.667042][ T313] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 25.668048][ T8] CR2: 00007ff43a9ef2f8 CR3: 000000013359b000 CR4: 00000000003526b0 [ 25.682660][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 25.691084][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 25.699541][ T8] Kernel panic - not syncing: Fatal exception [ 25.705755][ T8] Kernel Offset: disabled [ 25.710265][ T8] Rebooting in 86400 seconds..