last executing test programs: 1.28164063s ago: executing program 0 (id=1): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x82000, 0x23) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, 0x0, 0x24004001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0x10000000000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x800) 874.340556ms ago: executing program 2 (id=3): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000000)='\x9a', &(0x7f0000001c80)='n', 0x1) close(r2) 845.160236ms ago: executing program 3 (id=4): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000bf9f00", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 625.83557ms ago: executing program 2 (id=6): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000780), &(0x7f0000000740)=0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @c}}) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) unshare(0x22020600) get_mempolicy(&(0x7f0000000040), 0x0, 0x1, &(0x7f00006d1000/0x2000)=nil, 0x4) socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="61000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32, @ANYBLOB="bafb8091b19a6ecbbc20b223fe102c3d412ed6f93135c21a67520db0fe46faa07f62b732e7d59141cefb"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 597.42462ms ago: executing program 3 (id=7): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x7fffffffffffffff}, 0x18) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x2, &(0x7f0000000000)='\x9a', &(0x7f0000001c80)='n', 0x1) fsconfig$FSCONFIG_SET_FD(r2, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r2) close(r2) 563.362971ms ago: executing program 3 (id=8): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x80, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0x5}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x2081, &(0x7f0000000080)={0x0, 0x5945, 0x40, 0x0, 0x3fffffe}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 439.993353ms ago: executing program 3 (id=9): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000400)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) syz_emit_ethernet(0x76, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f00000000c0)={0x2, 0x2, 0x1, 0x7}) syz_io_uring_setup(0x22b, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x100002cf}, 0x0, 0x0) syz_clone(0x600e7180, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x68}}, 0x0) 318.767284ms ago: executing program 0 (id=10): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {0xb9}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x0, 0x7}, 0x8}, [{}, {}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x40000000, 0x3}, {}, {}, {0x0, 0x4}, {}, {}, {}, {0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8}, {0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0xffffffff}, {}, {0x0, 0x1ff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x1}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x98590, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x5, 0xa5d4}, 0x4c58, 0x5, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x803, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x100000, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0xd87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xab, 0x8e}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") 12.09798ms ago: executing program 2 (id=11): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) 0s ago: executing program 3 (id=12): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r3, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r4}], 0x2c, 0xffffffffffbffff8) dup2(r3, r4) fcntl$setown(r3, 0x8, r2) tkill(r2, 0x13) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.25' (ED25519) to the list of known hosts. [ 40.105919][ T30] audit: type=1400 audit(1748723444.412:62): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 40.107220][ T3306] cgroup: Unknown subsys name 'net' [ 40.134451][ T30] audit: type=1400 audit(1748723444.412:63): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 40.181950][ T30] audit: type=1400 audit(1748723444.452:64): avc: denied { unmount } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 40.352543][ T3306] cgroup: Unknown subsys name 'cpuset' [ 40.359912][ T3306] cgroup: Unknown subsys name 'rlimit' [ 40.492454][ T30] audit: type=1400 audit(1748723444.802:65): avc: denied { setattr } for pid=3306 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 40.525824][ T30] audit: type=1400 audit(1748723444.802:66): avc: denied { create } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.558828][ T30] audit: type=1400 audit(1748723444.802:67): avc: denied { write } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.585153][ T30] audit: type=1400 audit(1748723444.802:68): avc: denied { read } for pid=3306 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 40.594798][ T3309] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 40.608713][ T30] audit: type=1400 audit(1748723444.812:69): avc: denied { mounton } for pid=3306 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 40.657363][ T30] audit: type=1400 audit(1748723444.812:70): avc: denied { mount } for pid=3306 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 40.689514][ T30] audit: type=1400 audit(1748723444.932:71): avc: denied { relabelto } for pid=3309 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 40.748963][ T3306] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.033373][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 43.123973][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.131675][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.140561][ T3316] bridge_slave_0: entered allmulticast mode [ 43.148332][ T3316] bridge_slave_0: entered promiscuous mode [ 43.158527][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.165965][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.174895][ T3316] bridge_slave_1: entered allmulticast mode [ 43.181737][ T3316] bridge_slave_1: entered promiscuous mode [ 43.203053][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 43.237334][ T3329] chnl_net:caif_netlink_parms(): no params data found [ 43.253943][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.268513][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.321439][ T3317] chnl_net:caif_netlink_parms(): no params data found [ 43.338390][ T3316] team0: Port device team_slave_0 added [ 43.348879][ T3316] team0: Port device team_slave_1 added [ 43.367895][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 43.434700][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.442280][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.475674][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.508734][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.517166][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 43.547811][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.574878][ T3329] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.583861][ T3329] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.592512][ T3329] bridge_slave_0: entered allmulticast mode [ 43.603452][ T3329] bridge_slave_0: entered promiscuous mode [ 43.611502][ T3329] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.619472][ T3329] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.627426][ T3329] bridge_slave_1: entered allmulticast mode [ 43.634958][ T3329] bridge_slave_1: entered promiscuous mode [ 43.644979][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.654132][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.662483][ T3320] bridge_slave_0: entered allmulticast mode [ 43.670087][ T3320] bridge_slave_0: entered promiscuous mode [ 43.700863][ T3329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.711665][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.719504][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.727941][ T3320] bridge_slave_1: entered allmulticast mode [ 43.736449][ T3320] bridge_slave_1: entered promiscuous mode [ 43.752703][ T3317] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.760922][ T3317] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.769023][ T3317] bridge_slave_0: entered allmulticast mode [ 43.777299][ T3317] bridge_slave_0: entered promiscuous mode [ 43.794486][ T3329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.822389][ T3317] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.830231][ T3317] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.842173][ T3317] bridge_slave_1: entered allmulticast mode [ 43.854462][ T3317] bridge_slave_1: entered promiscuous mode [ 43.882309][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.893359][ T3329] team0: Port device team_slave_0 added [ 43.913484][ T3316] hsr_slave_0: entered promiscuous mode [ 43.920292][ T3316] hsr_slave_1: entered promiscuous mode [ 43.930216][ T3329] team0: Port device team_slave_1 added [ 43.947158][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.967282][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.975787][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.984105][ T3323] bridge_slave_0: entered allmulticast mode [ 43.997589][ T3323] bridge_slave_0: entered promiscuous mode [ 44.010233][ T3317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.028486][ T3317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.059346][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.067254][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.076442][ T3323] bridge_slave_1: entered allmulticast mode [ 44.085860][ T3323] bridge_slave_1: entered promiscuous mode [ 44.107253][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.115999][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.150407][ T3329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.165676][ T3320] team0: Port device team_slave_0 added [ 44.193051][ T3317] team0: Port device team_slave_0 added [ 44.202032][ T3329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.211805][ T3329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.242842][ T3329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.256079][ T3320] team0: Port device team_slave_1 added [ 44.275050][ T3317] team0: Port device team_slave_1 added [ 44.282766][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.313885][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.330819][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.339522][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.372801][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.410199][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.417835][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.451344][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.466312][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.476403][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.518004][ T3317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.540821][ T3329] hsr_slave_0: entered promiscuous mode [ 44.548833][ T3329] hsr_slave_1: entered promiscuous mode [ 44.558861][ T3329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.567705][ T3329] Cannot create hsr debugfs directory [ 44.580454][ T3317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.588189][ T3317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.624382][ T3317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.642030][ T3323] team0: Port device team_slave_0 added [ 44.673738][ T3323] team0: Port device team_slave_1 added [ 44.722210][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.730294][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.762696][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.777548][ T3320] hsr_slave_0: entered promiscuous mode [ 44.784511][ T3320] hsr_slave_1: entered promiscuous mode [ 44.790605][ T3320] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.799105][ T3320] Cannot create hsr debugfs directory [ 44.820699][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.828296][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.858930][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.887792][ T3317] hsr_slave_0: entered promiscuous mode [ 44.895815][ T3317] hsr_slave_1: entered promiscuous mode [ 44.907119][ T3317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 44.917242][ T3317] Cannot create hsr debugfs directory [ 44.980776][ T3323] hsr_slave_0: entered promiscuous mode [ 44.988221][ T3323] hsr_slave_1: entered promiscuous mode [ 44.995754][ T3323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.003936][ T3323] Cannot create hsr debugfs directory [ 45.066884][ T3316] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.100134][ T3316] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.123422][ T3316] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.151258][ T3316] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.229311][ T3329] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 45.247906][ T3329] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 45.282738][ T3329] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 45.304010][ T3329] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 45.329260][ T3320] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.381391][ T3320] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.405474][ T3320] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.420912][ T3320] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.466200][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.501751][ T3317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.511928][ T3317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.528416][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.537934][ T3317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.549698][ T3317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.565053][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.574563][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.616099][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.627411][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.653519][ T3323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.681314][ T3323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.726014][ T3323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.748018][ T3323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.796945][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.829648][ T3329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.854951][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.889476][ T3317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.925328][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.939226][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.957509][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.965307][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.983613][ T3317] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.008007][ T3329] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.026688][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.034647][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.057282][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.078421][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.089394][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.111743][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.124685][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.156747][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.168662][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.210950][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 46.267535][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 46.305110][ T3329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 46.329351][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.343244][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.375377][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.389276][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.411649][ T3316] veth0_vlan: entered promiscuous mode [ 46.427592][ T3316] veth1_vlan: entered promiscuous mode [ 46.484107][ T3316] veth0_macvtap: entered promiscuous mode [ 46.510723][ T3317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.522934][ T3316] veth1_macvtap: entered promiscuous mode [ 46.543995][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.585681][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.614009][ T3329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.634226][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.683103][ T3316] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.695277][ T3316] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.705145][ T3316] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.715455][ T3316] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.789638][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 46.789657][ T30] audit: type=1400 audit(1748723451.092:81): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.l5ZIF5/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 46.828264][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.830615][ T30] audit: type=1400 audit(1748723451.132:82): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 46.864309][ T3317] veth0_vlan: entered promiscuous mode [ 46.867820][ T30] audit: type=1400 audit(1748723451.132:83): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.l5ZIF5/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 46.885715][ T3320] veth0_vlan: entered promiscuous mode [ 46.907323][ T30] audit: type=1400 audit(1748723451.132:84): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 46.940626][ T3317] veth1_vlan: entered promiscuous mode [ 46.941706][ T30] audit: type=1400 audit(1748723451.132:85): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.l5ZIF5/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 46.968935][ T3317] veth0_macvtap: entered promiscuous mode [ 46.978876][ T30] audit: type=1400 audit(1748723451.132:86): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/root/syzkaller.l5ZIF5/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 46.978931][ T30] audit: type=1400 audit(1748723451.132:87): avc: denied { unmount } for pid=3316 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 47.019428][ T3320] veth1_vlan: entered promiscuous mode [ 47.050963][ T30] audit: type=1400 audit(1748723451.152:88): avc: denied { mounton } for pid=3316 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 47.078834][ T30] audit: type=1400 audit(1748723451.152:89): avc: denied { mount } for pid=3316 comm="syz-executor" name="/" dev="gadgetfs" ino=3356 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 47.111075][ T3317] veth1_macvtap: entered promiscuous mode [ 47.118885][ T3316] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.158131][ T3320] veth0_macvtap: entered promiscuous mode [ 47.167954][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.177505][ T3320] veth1_macvtap: entered promiscuous mode [ 47.184569][ T30] audit: type=1400 audit(1748723451.482:90): avc: denied { read write } for pid=3316 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 47.244037][ T3317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.254000][ T3317] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.265097][ T3317] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.276047][ T3317] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.287597][ T3317] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.306941][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.343587][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.360919][ T3320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.371003][ T3320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.381754][ T3320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.392051][ T3320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.625988][ T3323] veth0_vlan: entered promiscuous mode [ 47.728323][ T3329] veth0_vlan: entered promiscuous mode [ 47.753151][ T3463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3463 comm=syz.3.4 [ 47.804907][ T3329] veth1_vlan: entered promiscuous mode [ 47.850963][ T3323] veth1_vlan: entered promiscuous mode [ 47.878379][ T3465] loop2: detected capacity change from 0 to 512 [ 47.899866][ T3329] veth0_macvtap: entered promiscuous mode [ 47.912996][ T3465] ======================================================= [ 47.912996][ T3465] WARNING: The mand mount option has been deprecated and [ 47.912996][ T3465] and is ignored by this kernel. Remove the mand [ 47.912996][ T3465] option from the mount to silence this warning. [ 47.912996][ T3465] ======================================================= [ 47.919093][ T3329] veth1_macvtap: entered promiscuous mode [ 47.960608][ T3465] EXT4-fs: Ignoring removed orlov option [ 47.969719][ T3465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 47.991276][ T3465] EXT4-fs (loop2): orphan cleanup on readonly fs [ 48.006653][ T3323] veth0_macvtap: entered promiscuous mode [ 48.016629][ T3465] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6: bg 0: block 248: padding at end of block bitmap is not set [ 48.032455][ T3323] veth1_macvtap: entered promiscuous mode [ 48.049185][ T3465] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6: Failed to acquire dquot type 1 [ 48.049634][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.114852][ T3465] EXT4-fs (loop2): 1 truncate cleaned up [ 48.121934][ T3465] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 48.132572][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.153133][ T3008] udevd[3008]: worker [3310] terminated by signal 33 (Unknown signal 33) [ 48.178642][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.198275][ T3329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.209120][ T3465] EXT4-fs: Ignoring removed orlov option [ 48.215830][ T3323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.226283][ T3323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.237533][ T3323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.242599][ T3465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.247241][ T3323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.267405][ T3465] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 48.287307][ T3465] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.6: Abort forced by user [ 48.298618][ T3479] loop0: detected capacity change from 0 to 512 [ 48.300152][ T3329] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.316119][ T3329] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.326473][ T3329] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.330067][ T3479] EXT4-fs (loop0): too many log groups per flexible block group [ 48.336069][ T3329] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.336890][ T3465] EXT4-fs (loop2): Remounting filesystem read-only [ 48.347023][ T3479] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 48.357462][ T3465] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 48.369402][ T3479] EXT4-fs (loop0): mount failed [ 48.374009][ T3465] ext4 filesystem being remounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 48.416975][ T3465] syz.2.6 (3465) used greatest stack depth: 9496 bytes left [ 48.443404][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.476190][ T3317] ================================================================== [ 48.485899][ T3317] BUG: KCSAN: data-race in find_get_block_common / has_bh_in_lru [ 48.495388][ T3317] [ 48.499217][ T3317] read-write to 0xffff888237d26f70 of 8 bytes by task 3486 on cpu 1: [ 48.514915][ T3317] find_get_block_common+0x4f0/0x960 [ 48.523536][ T3317] bdev_getblk+0x83/0x3d0 [ 48.528348][ T3317] __ext4_get_inode_loc+0x303/0x930 [ 48.535837][ T3317] ext4_reserve_inode_write+0xd7/0x250 [ 48.545680][ T3317] __ext4_mark_inode_dirty+0x8c/0x3f0 [ 48.552178][ T3317] ext4_dirty_inode+0x92/0xc0 [ 48.557089][ T3317] __mark_inode_dirty+0x15f/0x760 [ 48.565116][ T3317] file_update_time+0x288/0x2b0 [ 48.570711][ T3317] ext4_page_mkwrite+0x18b/0xba0 [ 48.576502][ T3317] handle_mm_fault+0x15a8/0x2c00 [ 48.582947][ T3317] do_user_addr_fault+0x636/0x1090 [ 48.589226][ T3317] exc_page_fault+0x62/0xa0 [ 48.594679][ T3317] asm_exc_page_fault+0x26/0x30 [ 48.600144][ T3317] [ 48.602696][ T3317] read to 0xffff888237d26f70 of 8 bytes by task 3317 on cpu 0: [ 48.611522][ T3317] has_bh_in_lru+0x35/0x1f0 [ 48.617360][ T3317] smp_call_function_many_cond+0x394/0xb20 [ 48.625038][ T3317] on_each_cpu_cond_mask+0x3c/0x80 [ 48.631233][ T3317] invalidate_bh_lrus+0x2a/0x30 [ 48.637339][ T3317] blkdev_flush_mapping+0x9a/0x1a0 [ 48.644178][ T3317] bdev_release+0x2bf/0x3d0 [ 48.649409][ T3317] blkdev_release+0x15/0x20 [ 48.655631][ T3317] __fput+0x29b/0x650 [ 48.660098][ T3317] ____fput+0x1c/0x30 [ 48.664814][ T3317] task_work_run+0x131/0x1a0 [ 48.670394][ T3317] exit_to_user_mode_loop+0xe4/0x100 [ 48.677682][ T3317] do_syscall_64+0x1d6/0x200 [ 48.683027][ T3317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.690164][ T3317] [ 48.694189][ T3317] value changed: 0x0000000000000000 -> 0xffff888100755a90 [ 48.703847][ T3317] [ 48.706210][ T3317] Reported by Kernel Concurrency Sanitizer on: [ 48.714840][ T3317] CPU: 0 UID: 0 PID: 3317 Comm: syz-executor Not tainted 6.15.0-syzkaller-09161-g0f70f5b08a47 #0 PREEMPT(voluntary) [ 48.730036][ T3317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.741929][ T3317] ================================================================== [ 48.796722][ T3491] serio: Serial port ptm0