last executing test programs: 2.014630565s ago: executing program 4 (id=178): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="48010000100001000000000000000000e00000020000000000000000000000000a"], 0x148}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x6aba, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x42000000, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.940818602s ago: executing program 4 (id=179): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x304}, "c6857f733262a8f1", "3787084fa1b44eba338cf986aef307f2", '\x00', "53ba6ed41b98efa2"}, 0x28) close(r0) 1.807646782s ago: executing program 3 (id=181): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000380)={[{@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}, {@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7fffffff}}]}, 0x3, 0x4f5, &(0x7f00000008c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x182d17, &(0x7f00000000c0)={[], [{@euid_gt}, {@subj_type={'subj_type', 0x3d, 'ext4\x00'}}, {@subj_user={'subj_user', 0x3d, '/'}}]}, 0x3, 0x45b, &(0x7f0000000140)="$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") r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x130) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) 1.777844835s ago: executing program 4 (id=184): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x4000, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, &(0x7f0000001180)={0x0, 0x0, 0xb1, 0x91, ""/145}, &(0x7f00000010c0)=0xb1, 0x0) 1.633997907s ago: executing program 2 (id=185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x74bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffff, 0xc}, {0x1, 0xfff1}, {0xa, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040084}, 0x1010) 1.59457407s ago: executing program 3 (id=187): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x44f0) 1.523110676s ago: executing program 2 (id=190): fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r1}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000600)={0x200000000000001, 0x3}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c880, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x2, 0x404c484) 1.483356039s ago: executing program 3 (id=191): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16], 0x1, 0x36e, &(0x7f0000000c00)="$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") r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x1, @loopback, 0x4}}, 0x7, 0x942f}, 0x90) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = dup(r2) ioctl$PTP_EXTTS_REQUEST2(r3, 0xc0603d0f, &(0x7f0000000040)) 1.436826693s ago: executing program 2 (id=193): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x2, 0x0, 0x0, 0x0) 1.407266575s ago: executing program 3 (id=195): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1, 0xb}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2000c16, &(0x7f0000000040)={[{@nobh}, {@usrjquota}]}, 0xff, 0x240, &(0x7f00000002c0)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x181242, 0x0) write$binfmt_script(r3, &(0x7f0000000b80)={'#! ', './file0'}, 0xb) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 1.167123105s ago: executing program 3 (id=199): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4000, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.119913559s ago: executing program 0 (id=200): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) write$selinux_load(r2, &(0x7f0000000000)=ANY=[], 0x44f0) 916.315785ms ago: executing program 1 (id=202): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370400000000ffffffff00000000", @ANYRES32=r4, @ANYBLOB="0b12050000000000240012800b00010069703667726500001400028008000100", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x8000004) 857.44317ms ago: executing program 0 (id=203): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x12) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) tkill(r0, 0x14) 769.331107ms ago: executing program 1 (id=204): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0xb00, r4, {0x9, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x14, 0x2, [@TCA_CGROUP_EMATCHES={0x10, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xb}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x40000) 633.914658ms ago: executing program 1 (id=205): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000880)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0xa20, 0x8000c64) write$binfmt_elf64(r1, 0x0, 0x478) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 603.91342ms ago: executing program 0 (id=206): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 583.169782ms ago: executing program 2 (id=207): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003200), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000003300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd3000fedbdf250c"], 0x30}, 0x1, 0x0, 0x0, 0x8020}, 0x200000c0) 580.122682ms ago: executing program 4 (id=208): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000740)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}, 0xfdef) 321.962834ms ago: executing program 4 (id=209): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}, 0x4000) setreuid(0x0, r1) setrlimit(0x40000000000008, &(0x7f0000000000)) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f00000001c0)={0x200000000000001}, 0x8) sendto$inet6(r2, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @local}, 0x1c) 42.345757ms ago: executing program 2 (id=218): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r3, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 0s ago: executing program 1 (id=219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x3920e, r2, 0x2, 0x0, 0x2}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. [ 22.569292][ T29] audit: type=1400 audit(1753982454.532:62): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.570199][ T3287] cgroup: Unknown subsys name 'net' [ 22.592012][ T29] audit: type=1400 audit(1753982454.532:63): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.619351][ T29] audit: type=1400 audit(1753982454.572:64): avc: denied { unmount } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.760216][ T3287] cgroup: Unknown subsys name 'cpuset' [ 22.766324][ T3287] cgroup: Unknown subsys name 'rlimit' [ 22.896230][ T29] audit: type=1400 audit(1753982454.862:65): avc: denied { setattr } for pid=3287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.919495][ T29] audit: type=1400 audit(1753982454.862:66): avc: denied { create } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.940033][ T29] audit: type=1400 audit(1753982454.862:67): avc: denied { write } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.960382][ T29] audit: type=1400 audit(1753982454.862:68): avc: denied { read } for pid=3287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.967252][ T3291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.980626][ T29] audit: type=1400 audit(1753982454.872:69): avc: denied { mounton } for pid=3287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.013951][ T29] audit: type=1400 audit(1753982454.872:70): avc: denied { mount } for pid=3287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.037371][ T29] audit: type=1400 audit(1753982454.962:71): avc: denied { relabelto } for pid=3291 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.064636][ T3287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.179599][ T3300] chnl_net:caif_netlink_parms(): no params data found [ 24.205630][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 24.243909][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 24.303284][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.310445][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.317605][ T3302] bridge_slave_0: entered allmulticast mode [ 24.324014][ T3302] bridge_slave_0: entered promiscuous mode [ 24.332437][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.339490][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.346662][ T3300] bridge_slave_0: entered allmulticast mode [ 24.353011][ T3300] bridge_slave_0: entered promiscuous mode [ 24.360537][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.367629][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.374703][ T3300] bridge_slave_1: entered allmulticast mode [ 24.381215][ T3300] bridge_slave_1: entered promiscuous mode [ 24.393655][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.400759][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.407830][ T3302] bridge_slave_1: entered allmulticast mode [ 24.414174][ T3302] bridge_slave_1: entered promiscuous mode [ 24.437599][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.459829][ T3298] chnl_net:caif_netlink_parms(): no params data found [ 24.469306][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.486711][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.513674][ T3300] team0: Port device team_slave_0 added [ 24.520371][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.529653][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.536688][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.543981][ T3305] bridge_slave_0: entered allmulticast mode [ 24.550332][ T3305] bridge_slave_0: entered promiscuous mode [ 24.559335][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.566392][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.573523][ T3305] bridge_slave_1: entered allmulticast mode [ 24.579859][ T3305] bridge_slave_1: entered promiscuous mode [ 24.585873][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 24.595022][ T3300] team0: Port device team_slave_1 added [ 24.632034][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 24.641335][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.648334][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.674333][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.696639][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 24.710842][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.717840][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.743818][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.755122][ T3302] team0: Port device team_slave_0 added [ 24.761756][ T3302] team0: Port device team_slave_1 added [ 24.783329][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.790376][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.797539][ T3298] bridge_slave_0: entered allmulticast mode [ 24.804034][ T3298] bridge_slave_0: entered promiscuous mode [ 24.821951][ T3305] team0: Port device team_slave_0 added [ 24.828202][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.835246][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.842453][ T3298] bridge_slave_1: entered allmulticast mode [ 24.848919][ T3298] bridge_slave_1: entered promiscuous mode [ 24.862577][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 24.869546][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.895461][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 24.907004][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 24.914049][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 24.940315][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 24.951557][ T3305] team0: Port device team_slave_1 added [ 24.994790][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.004134][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.011081][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.037473][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.058461][ T3300] hsr_slave_0: entered promiscuous mode [ 25.064561][ T3300] hsr_slave_1: entered promiscuous mode [ 25.071321][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.085620][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.092581][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.118492][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.131776][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.138819][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.146093][ T3299] bridge_slave_0: entered allmulticast mode [ 25.152596][ T3299] bridge_slave_0: entered promiscuous mode [ 25.159105][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.166332][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.173711][ T3299] bridge_slave_1: entered allmulticast mode [ 25.180050][ T3299] bridge_slave_1: entered promiscuous mode [ 25.200832][ T3298] team0: Port device team_slave_0 added [ 25.207070][ T3298] team0: Port device team_slave_1 added [ 25.218649][ T3302] hsr_slave_0: entered promiscuous mode [ 25.224594][ T3302] hsr_slave_1: entered promiscuous mode [ 25.230496][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 25.236205][ T3302] Cannot create hsr debugfs directory [ 25.283806][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 25.307147][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.314134][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.340045][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.351513][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 25.361004][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.367931][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.393848][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.410759][ T3305] hsr_slave_0: entered promiscuous mode [ 25.416752][ T3305] hsr_slave_1: entered promiscuous mode [ 25.422632][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 25.428335][ T3305] Cannot create hsr debugfs directory [ 25.473290][ T3298] hsr_slave_0: entered promiscuous mode [ 25.479307][ T3298] hsr_slave_1: entered promiscuous mode [ 25.485357][ T3298] debugfs: 'hsr0' already exists in 'hsr' [ 25.491099][ T3298] Cannot create hsr debugfs directory [ 25.499195][ T3299] team0: Port device team_slave_0 added [ 25.520412][ T3299] team0: Port device team_slave_1 added [ 25.562335][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 25.569279][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.595223][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 25.620154][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 25.627098][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 25.653026][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 25.703895][ T3299] hsr_slave_0: entered promiscuous mode [ 25.710293][ T3299] hsr_slave_1: entered promiscuous mode [ 25.716169][ T3299] debugfs: 'hsr0' already exists in 'hsr' [ 25.721913][ T3299] Cannot create hsr debugfs directory [ 25.743316][ T3300] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 25.754078][ T3300] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 25.777313][ T3300] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 25.798663][ T3300] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 25.843303][ T3302] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 25.852137][ T3302] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 25.863118][ T3302] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 25.872490][ T3302] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 25.899903][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 25.923688][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 25.932024][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 25.944029][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 25.952514][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 25.970772][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 25.984403][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.991450][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.010709][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.017749][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.025994][ T3298] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 26.036661][ T3298] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 26.050979][ T3298] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 26.064268][ T3299] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 26.076963][ T3298] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 26.085613][ T3299] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 26.094429][ T3299] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 26.102889][ T3299] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 26.146715][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.159424][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.181769][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.188834][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.208518][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.215573][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.256121][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.281711][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.290726][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.301768][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.310049][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.322720][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.329776][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.343887][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.353173][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.360252][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.375990][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 26.387678][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.394831][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.403546][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.410581][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.426139][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.433247][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.449904][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.469205][ T3298] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.479701][ T3298] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.495336][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.502468][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.539861][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.561201][ T3299] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 26.571594][ T3299] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 26.589457][ T3300] veth0_vlan: entered promiscuous mode [ 26.621114][ T3300] veth1_vlan: entered promiscuous mode [ 26.663056][ T3300] veth0_macvtap: entered promiscuous mode [ 26.671969][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.684679][ T3300] veth1_macvtap: entered promiscuous mode [ 26.701483][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.724355][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 26.740839][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 26.766741][ T3302] veth0_vlan: entered promiscuous mode [ 26.774676][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 26.799809][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.828037][ T3302] veth1_vlan: entered promiscuous mode [ 26.849972][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.872347][ T3300] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.884161][ T3305] veth0_vlan: entered promiscuous mode [ 26.898236][ T3302] veth0_macvtap: entered promiscuous mode [ 26.905257][ T295] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.915930][ T295] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 26.925954][ T3298] veth0_vlan: entered promiscuous mode [ 26.939104][ T3302] veth1_macvtap: entered promiscuous mode [ 26.948659][ T3305] veth1_vlan: entered promiscuous mode [ 26.962772][ T3298] veth1_vlan: entered promiscuous mode [ 26.978382][ T3299] veth0_vlan: entered promiscuous mode [ 26.993163][ T3299] veth1_vlan: entered promiscuous mode [ 27.001459][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.013597][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.022089][ T3305] veth0_macvtap: entered promiscuous mode [ 27.034491][ T3305] veth1_macvtap: entered promiscuous mode [ 27.042623][ T295] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.055005][ T295] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.070423][ T3298] veth0_macvtap: entered promiscuous mode [ 27.076591][ T295] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.086505][ T295] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.101415][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.115277][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.123142][ T3298] veth1_macvtap: entered promiscuous mode [ 27.133461][ T3299] veth0_macvtap: entered promiscuous mode [ 27.144229][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.155802][ T3299] veth1_macvtap: entered promiscuous mode [ 27.162350][ T3476] loop4: detected capacity change from 0 to 512 [ 27.164831][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.180642][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.189460][ T3476] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 27.203838][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.208133][ T3476] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 27.228516][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 27.249207][ T295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.259064][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 27.283067][ T295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.307034][ T295] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.339299][ T295] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.363005][ T295] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.374590][ T3487] serio: Serial port ttyS3 [ 27.389425][ T295] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.409346][ T295] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.425812][ T295] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.442942][ T3489] loop3: detected capacity change from 0 to 8192 [ 27.454716][ T295] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.466555][ T3494] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.473812][ T3494] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.482513][ T3494] bridge0: entered promiscuous mode [ 27.487723][ T3494] bridge0: entered allmulticast mode [ 27.502361][ T295] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 27.513287][ T3494] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.520392][ T3494] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.527754][ T3494] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.534904][ T3494] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.596065][ T3500] pim6reg1: entered promiscuous mode [ 27.601594][ T3500] pim6reg1: entered allmulticast mode [ 27.644110][ T29] kauditd_printk_skb: 52 callbacks suppressed [ 27.644123][ T29] audit: type=1400 audit(1753982459.612:124): avc: denied { mounton } for pid=3478 comm="syz.2.3" path="/proc/2/task" dev="proc" ino=4021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 27.696669][ T3502] bridge: RTM_NEWNEIGH with invalid ether address [ 27.765665][ T29] audit: type=1400 audit(1753982459.732:125): avc: denied { create } for pid=3507 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.790363][ T29] audit: type=1400 audit(1753982459.732:126): avc: denied { setopt } for pid=3507 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 27.887108][ T29] audit: type=1400 audit(1753982459.852:127): avc: denied { name_bind } for pid=3511 comm="syz.2.17" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 27.918211][ T3515] loop0: detected capacity change from 0 to 2048 [ 27.961020][ T29] audit: type=1400 audit(1753982459.852:128): avc: denied { node_bind } for pid=3511 comm="syz.2.17" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 27.964384][ T3520] loop2: detected capacity change from 0 to 7 [ 27.983303][ T29] audit: type=1400 audit(1753982459.862:129): avc: denied { unmount } for pid=3299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 28.007415][ T3520] loop2: [ 28.035706][ T3292] Alternate GPT is invalid, using primary GPT. [ 28.042302][ T3292] loop0: p2 p3 p7 [ 28.052565][ T3515] Alternate GPT is invalid, using primary GPT. [ 28.058909][ T3515] loop0: p2 p3 p7 [ 28.100062][ T29] audit: type=1400 audit(1753982460.072:130): avc: denied { read write } for pid=3509 comm="syz.0.16" name="loop0p7" dev="devtmpfs" ino=551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 28.150266][ T29] audit: type=1400 audit(1753982460.072:131): avc: denied { open } for pid=3509 comm="syz.0.16" path="/dev/loop0p7" dev="devtmpfs" ino=551 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 28.173189][ T29] audit: type=1400 audit(1753982460.102:132): avc: denied { allowed } for pid=3523 comm="syz.2.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 28.192239][ T29] audit: type=1400 audit(1753982460.102:133): avc: denied { create } for pid=3523 comm="syz.2.21" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.318963][ T3537] loop1: detected capacity change from 0 to 512 [ 28.326764][ T3537] ======================================================= [ 28.326764][ T3537] WARNING: The mand mount option has been deprecated and [ 28.326764][ T3537] and is ignored by this kernel. Remove the mand [ 28.326764][ T3537] option from the mount to silence this warning. [ 28.326764][ T3537] ======================================================= [ 28.369100][ T3541] loop2: detected capacity change from 0 to 1024 [ 28.391044][ T3537] EXT4-fs (loop1): orphan cleanup on readonly fs [ 28.396045][ T3541] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 28.401084][ T3537] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.26: bg 0: block 248: padding at end of block bitmap is not set [ 28.417205][ T3541] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 47 with max blocks 1 with error 28 [ 28.435793][ T3541] EXT4-fs (loop2): This should not happen!! Data will be lost [ 28.435793][ T3541] [ 28.445505][ T3541] EXT4-fs (loop2): Total free blocks count 0 [ 28.445833][ T3537] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.26: Failed to acquire dquot type 1 [ 28.451549][ T3541] EXT4-fs (loop2): Free/Dirty block details [ 28.451564][ T3541] EXT4-fs (loop2): free_blocks=0 [ 28.451577][ T3541] EXT4-fs (loop2): dirty_blocks=0 [ 28.477181][ T3537] EXT4-fs (loop1): 1 truncate cleaned up [ 28.478432][ T3541] EXT4-fs (loop2): Block reservation details [ 28.478446][ T3541] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 28.496537][ T3537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 28.514983][ T3548] loop4: detected capacity change from 0 to 512 [ 28.545632][ T3537] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 28.556133][ T3537] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 0 [ 28.558911][ T3541] syz.2.28 (3541) used greatest stack depth: 10824 bytes left [ 28.575647][ T3548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 28.576460][ T3537] syz.1.26 (3537) used greatest stack depth: 9560 bytes left [ 28.589264][ T3548] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 28.616066][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.617151][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.687694][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 28.804010][ T3563] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET) [ 28.932504][ T3575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41'. [ 29.037677][ T3584] SELinux: failed to load policy [ 29.091042][ T3588] netlink: 16 bytes leftover after parsing attributes in process `syz.3.46'. [ 29.106772][ T3592] loop0: detected capacity change from 0 to 128 [ 29.113525][ T3592] EXT4-fs: Ignoring removed nobh option [ 29.122564][ T3592] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 29.135183][ T3592] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 29.170097][ T3596] loop4: detected capacity change from 0 to 128 [ 29.211035][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 29.339227][ T3614] tipc: Started in network mode [ 29.344208][ T3614] tipc: Node identity 22bb864126df, cluster identity 4711 [ 29.351515][ T3614] tipc: Enabled bearer , priority 0 [ 29.391683][ T3614] tipc: Disabling bearer [ 29.424354][ T3622] sd 0:0:1:0: device reset [ 29.455233][ T3626] loop3: detected capacity change from 0 to 512 [ 29.464671][ T3626] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 29.477709][ T3626] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 29.491800][ T3626] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 29.506051][ T3626] EXT4-fs (loop3): 1 truncate cleaned up [ 29.515238][ T3626] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.622472][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.641387][ T3633] loop0: detected capacity change from 0 to 128 [ 29.653327][ T3633] /dev/loop0: Can't open blockdev [ 29.734506][ T3639] syzkaller1: entered promiscuous mode [ 29.740052][ T3639] syzkaller1: entered allmulticast mode [ 29.870062][ T3656] tipc: Enabled bearer , priority 0 [ 29.877416][ T3655] tipc: Resetting bearer [ 29.888393][ T3655] tipc: Disabling bearer [ 29.919150][ T3661] pim6reg1: entered promiscuous mode [ 29.924577][ T3661] pim6reg1: entered allmulticast mode [ 30.024181][ T3670] tipc: Started in network mode [ 30.029038][ T3670] tipc: Node identity ac14140f, cluster identity 4711 [ 30.036098][ T3670] tipc: New replicast peer: 255.255.255.255 [ 30.042278][ T3670] tipc: Enabled bearer , priority 10 [ 30.206092][ T3675] loop4: detected capacity change from 0 to 1024 [ 30.224225][ T3675] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.242664][ T3675] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.80: Allocating blocks 385-513 which overlap fs metadata [ 30.261189][ T3675] EXT4-fs (loop4): pa ffff888107228070: logic 16, phys. 129, len 24 [ 30.269223][ T3675] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 30.295884][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.391479][ T3681] loop4: detected capacity change from 0 to 2048 [ 30.411617][ T3681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 30.475750][ T3685] pim6reg1: entered promiscuous mode [ 30.481162][ T3685] pim6reg1: entered allmulticast mode [ 30.786927][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.965795][ T3724] netlink: 'syz.3.100': attribute type 17 has an invalid length. [ 30.973158][ T3729] loop1: detected capacity change from 0 to 1024 [ 31.005487][ T3729] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.038668][ T3733] loop3: detected capacity change from 0 to 2048 [ 31.057915][ T3729] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.101: Allocating blocks 385-513 which overlap fs metadata [ 31.081061][ T3733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 31.100201][ T3729] EXT4-fs (loop1): pa ffff88810726e620: logic 16, phys. 129, len 24 [ 31.108262][ T3729] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 31.140834][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a9cde00: rx timeout, send abort [ 31.159905][ T3394] tipc: Node number set to 2886997007 [ 31.187747][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.213657][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.264349][ T3749] loop3: detected capacity change from 0 to 512 [ 31.275228][ T3743] Zero length message leads to an empty skb [ 31.300247][ T3749] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 31.308708][ T3749] EXT4-fs (loop3): orphan cleanup on readonly fs [ 31.320005][ T3757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.112'. [ 31.330432][ T3749] EXT4-fs error (device loop3): ext4_do_update_inode:5563: inode #16: comm syz.3.109: corrupted inode contents [ 31.353637][ T3749] EXT4-fs (loop3): Remounting filesystem read-only [ 31.362755][ T3749] EXT4-fs (loop3): 1 truncate cleaned up [ 31.369252][ T586] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 31.380034][ T586] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 31.406373][ T586] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 31.417578][ T3749] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 31.446821][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.471620][ T3767] loop2: detected capacity change from 0 to 8192 [ 31.518559][ T3771] loop3: detected capacity change from 0 to 2048 [ 31.560210][ T3771] loop3: p1 < > p4 [ 31.567267][ T3774] loop1: detected capacity change from 0 to 512 [ 31.575124][ T3771] loop3: p4 size 8388608 extends beyond EOD, truncated [ 31.601618][ T3774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.624792][ T3774] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 31.636031][ T3776] loop0: detected capacity change from 0 to 4096 [ 31.640846][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b89b800: rx timeout, send abort [ 31.650591][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a9cde00: abort rx timeout. Force session deactivation [ 31.661603][ T3776] EXT4-fs: test_dummy_encryption option not supported [ 31.689092][ T3774] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #2: comm syz.1.120: corrupted inode contents [ 31.711950][ T3783] veth1_macvtap: left promiscuous mode [ 31.717512][ T3783] macsec0: entered allmulticast mode [ 31.724842][ T3774] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #2: comm syz.1.120: mark_inode_dirty error [ 31.755410][ T3774] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #2: comm syz.1.120: corrupted inode contents [ 31.768424][ T3783] veth1_macvtap: entered promiscuous mode [ 31.774202][ T3783] veth1_macvtap: entered allmulticast mode [ 31.799584][ T3783] macsec0: entered promiscuous mode [ 31.821513][ T3790] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #2: comm syz.1.120: corrupted inode contents [ 31.842583][ T3790] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #2: comm syz.1.120: mark_inode_dirty error [ 31.888957][ T3805] loop2: detected capacity change from 0 to 128 [ 31.901062][ T3790] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #2: comm syz.1.120: corrupted inode contents [ 31.923054][ T3790] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.120: mark_inode_dirty error [ 31.937698][ T3790] EXT4-fs error (device loop1): ext4_do_update_inode:5563: inode #2: comm syz.1.120: corrupted inode contents [ 31.952658][ T3790] EXT4-fs error (device loop1): ext4_dirty_inode:6454: inode #2: comm syz.1.120: mark_inode_dirty error [ 31.967350][ T3808] serio: Serial port ttyS3 [ 31.987073][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.150552][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b89b800: abort rx timeout. Force session deactivation [ 32.201466][ T3833] loop1: detected capacity change from 0 to 1024 [ 32.208564][ T3833] EXT4-fs: Ignoring removed bh option [ 32.221357][ T3833] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.240583][ T3833] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.146: Allocating blocks 465-513 which overlap fs metadata [ 32.264993][ T3833] EXT4-fs (loop1): Remounting filesystem read-only [ 32.274306][ T3832] EXT4-fs (loop1): pa ffff88810726e700: logic 256, phys. 369, len 9 [ 32.293788][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.311131][ T3843] loop1: detected capacity change from 0 to 512 [ 32.324535][ T3843] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.337400][ T3843] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.360536][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.387448][ T3849] loop4: detected capacity change from 0 to 1024 [ 32.406109][ T3849] EXT4-fs: Ignoring removed oldalloc option [ 32.412144][ T3849] EXT4-fs: Ignoring removed bh option [ 32.422353][ T3849] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.574790][ T3859] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.151: Allocating blocks 1-17 which overlap fs metadata [ 32.589373][ T3849] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.151: Allocating blocks 1-17 which overlap fs metadata [ 32.667271][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.725176][ T3874] loop4: detected capacity change from 0 to 1024 [ 32.742001][ T3874] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 32.754539][ T3874] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.766369][ T29] kauditd_printk_skb: 127 callbacks suppressed [ 32.766383][ T29] audit: type=1400 audit(1753982464.732:253): avc: denied { setopt } for pid=3879 comm="syz.0.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 32.796597][ T3874] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 3: comm syz.4.161: lblock 3 mapped to illegal pblock 3 (length 3) [ 32.811683][ T3874] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 32.811945][ T29] audit: type=1400 audit(1753982464.782:254): avc: denied { create } for pid=3881 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 32.824152][ T3874] EXT4-fs (loop4): This should not happen!! Data will be lost [ 32.824152][ T3874] [ 32.861570][ T3874] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 32.867070][ T29] audit: type=1400 audit(1753982464.802:255): avc: denied { map } for pid=3872 comm="syz.4.161" path="/42/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.899082][ T29] audit: type=1400 audit(1753982464.802:256): avc: denied { execute } for pid=3872 comm="syz.4.161" path="/42/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 32.922221][ T29] audit: type=1400 audit(1753982464.832:257): avc: denied { setopt } for pid=3881 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 32.941729][ T29] audit: type=1400 audit(1753982464.832:258): avc: denied { connect } for pid=3881 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 32.961305][ T31] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: comm kworker/u8:1: lblock 0 mapped to illegal pblock 0 (length 3) [ 32.975509][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 3 with error 117 [ 32.987950][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 32.987950][ T31] [ 32.998537][ T31] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #15: block 8: comm kworker/u8:1: lblock 8 mapped to illegal pblock 8 (length 8) [ 33.013518][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 33.025900][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 33.025900][ T31] [ 33.051302][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 33.205117][ T3900] loop3: detected capacity change from 0 to 512 [ 33.222012][ T3900] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.236327][ T3900] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 33.255147][ T3906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.174'. [ 33.270200][ T3900] EXT4-fs (loop3): shut down requested (2) [ 33.280421][ T3910] IPv6: Can't replace route, no match found [ 33.287674][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.407174][ T29] audit: type=1400 audit(1753982465.372:259): avc: denied { connect } for pid=3922 comm="syz.2.180" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.427759][ T29] audit: type=1400 audit(1753982465.372:260): avc: denied { create } for pid=3922 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.447897][ T29] audit: type=1400 audit(1753982465.372:261): avc: denied { setopt } for pid=3922 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.467925][ T29] audit: type=1400 audit(1753982465.372:262): avc: denied { create } for pid=3922 comm="syz.2.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.517542][ T3927] loop3: detected capacity change from 0 to 512 [ 33.536516][ T3927] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 33.541375][ T3929] loop2: detected capacity change from 0 to 2048 [ 33.552974][ T3927] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 33.563594][ T3927] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.181: invalid block [ 33.575880][ T3927] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.181: invalid indirect mapped block 4294967295 (level 1) [ 33.590061][ T3927] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.181: invalid indirect mapped block 4294967295 (level 1) [ 33.604450][ T3929] loop2: p1 < > p3 p4 [ 33.605380][ T3927] EXT4-fs (loop3): 2 truncates cleaned up [ 33.615462][ T3927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.615482][ T3929] loop2: p3 start 922746880 is beyond EOD, truncated [ 33.634731][ T3929] loop2: p4 size 8388608 extends beyond EOD, truncated [ 33.674994][ T3927] EXT4-fs error (device loop3): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.3.181: path /33/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 33.723352][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.792658][ T3946] capability: warning: `syz.2.190' uses deprecated v2 capabilities in a way that may be insecure [ 33.808420][ T3942] SELinux: failed to load policy [ 33.837804][ T3951] loop3: detected capacity change from 0 to 128 [ 33.933728][ T3960] loop3: detected capacity change from 0 to 128 [ 33.964184][ T3960] EXT4-fs: Ignoring removed nobh option [ 33.988039][ T3960] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.049897][ T3960] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.145203][ T3299] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.337301][ T3972] SELinux: ebitmap: truncated map [ 34.400458][ T3972] SELinux: failed to load policy [ 34.428192][ T3976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.202'. [ 34.469273][ T3976] ip6gre1: entered allmulticast mode [ 34.470061][ T3979] loop0: detected capacity change from 0 to 1024 [ 34.484084][ T3940] syz.4.184 (3940) used greatest stack depth: 8376 bytes left [ 34.496432][ T3979] EXT4-fs: Ignoring removed nobh option [ 34.503440][ T3979] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 34.514938][ T3979] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.203: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 34.534819][ T3979] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.203: couldn't read orphan inode 11 (err -117) [ 34.553439][ T3979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.605918][ T3979] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.203: Invalid block bitmap block 0 in block_group 0 [ 34.630609][ T3979] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.203: Failed to acquire dquot type 0 [ 34.699804][ T3985] loop1: detected capacity change from 0 to 1024 [ 34.708672][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.720961][ T3933] syz.4.184 (3933) used greatest stack depth: 7144 bytes left [ 34.733121][ T3985] EXT4-fs: Ignoring removed nobh option [ 34.738718][ T3985] EXT4-fs: inline encryption not supported [ 34.763402][ T3985] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.771530][ T3989] syzkaller1: entered promiscuous mode [ 34.781145][ T3989] syzkaller1: entered allmulticast mode [ 34.809022][ T3985] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.205: Allocating blocks 385-513 which overlap fs metadata [ 34.861342][ T3993] pim6reg1: entered promiscuous mode [ 34.866662][ T3993] pim6reg1: entered allmulticast mode [ 34.880651][ T3985] EXT4-fs (loop1): pa ffff888107228000: logic 16, phys. 129, len 24 [ 34.888653][ T3985] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 34.919951][ T3985] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 34.932240][ T3985] EXT4-fs (loop1): This should not happen!! Data will be lost [ 34.932240][ T3985] [ 34.941920][ T3985] EXT4-fs (loop1): Total free blocks count 0 [ 34.947905][ T3985] EXT4-fs (loop1): Free/Dirty block details [ 34.953875][ T3985] EXT4-fs (loop1): free_blocks=128 [ 34.959058][ T3985] EXT4-fs (loop1): dirty_blocks=0 [ 34.964150][ T3985] EXT4-fs (loop1): Block reservation details [ 34.965226][ T3987] netlink: 28 bytes leftover after parsing attributes in process `syz.2.207'. [ 34.970181][ T3985] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 34.999271][ T3997] process 'syz.4.209' launched '/dev/fd/3' with NULL argv: empty string added [ 35.037871][ T3999] loop3: detected capacity change from 0 to 512 [ 35.050366][ T3999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.111086][ T4008] loop2: detected capacity change from 0 to 512 [ 35.134911][ T4008] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.147628][ T4008] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.175789][ T4008] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #2: comm syz.2.214: corrupted inode contents [ 35.187810][ T4008] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #2: comm syz.2.214: mark_inode_dirty error [ 35.203675][ T4008] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #2: comm syz.2.214: corrupted inode contents [ 35.222999][ T4019] loop0: detected capacity change from 0 to 128 [ 35.228524][ T4008] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.214: mark_inode_dirty error [ 35.251504][ T4019] FAT-fs (loop0): Directory bread(block 32) failed [ 35.258174][ T4019] FAT-fs (loop0): Directory bread(block 33) failed [ 35.265070][ T4019] FAT-fs (loop0): Directory bread(block 34) failed [ 35.271674][ T4019] FAT-fs (loop0): Directory bread(block 35) failed [ 35.279409][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.288977][ T4019] FAT-fs (loop0): Directory bread(block 36) failed [ 35.296876][ T4019] FAT-fs (loop0): Directory bread(block 37) failed [ 35.303952][ T4019] FAT-fs (loop0): Directory bread(block 38) failed [ 35.313535][ T4019] FAT-fs (loop0): Directory bread(block 39) failed [ 35.320363][ T4019] FAT-fs (loop0): Directory bread(block 40) failed [ 35.327013][ T4019] FAT-fs (loop0): Directory bread(block 41) failed [ 35.344129][ T4021] loop1: detected capacity change from 0 to 512 [ 35.370539][ T4009] ================================================================== [ 35.378656][ T4009] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 35.386491][ T4009] [ 35.388824][ T4009] write to 0xffffea00041feb58 of 8 bytes by task 3999 on cpu 1: [ 35.396459][ T4009] __filemap_remove_folio+0x1a5/0x2a0 [ 35.401844][ T4009] folio_unmap_invalidate+0x1dd/0x360 [ 35.407214][ T4009] invalidate_inode_pages2_range+0x27c/0x3d0 [ 35.413199][ T4009] filemap_invalidate_pages+0x16d/0x1a0 [ 35.418742][ T4009] kiocb_invalidate_pages+0x6e/0x80 [ 35.423932][ T4009] __iomap_dio_rw+0x5d4/0x1250 [ 35.428773][ T4009] iomap_dio_rw+0x40/0x90 [ 35.433092][ T4009] ext4_file_write_iter+0xad9/0xf00 [ 35.438287][ T4009] iter_file_splice_write+0x5f2/0x970 [ 35.443659][ T4009] direct_splice_actor+0x156/0x2a0 [ 35.448769][ T4009] splice_direct_to_actor+0x312/0x680 [ 35.454138][ T4009] do_splice_direct+0xda/0x150 [ 35.458896][ T4009] do_sendfile+0x380/0x650 [ 35.463315][ T4009] __x64_sys_sendfile64+0x105/0x150 [ 35.468511][ T4009] x64_sys_call+0x2bb0/0x2ff0 [ 35.473178][ T4009] do_syscall_64+0xd2/0x200 [ 35.477678][ T4009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.483559][ T4009] [ 35.485867][ T4009] read to 0xffffea00041feb58 of 8 bytes by task 4009 on cpu 0: [ 35.493394][ T4009] folio_mapping+0xa1/0x120 [ 35.497888][ T4009] lru_add+0x80/0x430 [ 35.501863][ T4009] folio_batch_move_lru+0x177/0x230 [ 35.507059][ T4009] lru_add_drain_cpu+0x77/0x250 [ 35.511908][ T4009] __folio_batch_release+0x44/0xb0 [ 35.517014][ T4009] filemap_splice_read+0x521/0x6b0 [ 35.522115][ T4009] ext4_file_splice_read+0x8f/0xb0 [ 35.527226][ T4009] splice_direct_to_actor+0x26c/0x680 [ 35.532608][ T4009] do_splice_direct+0xda/0x150 [ 35.537373][ T4009] do_sendfile+0x380/0x650 [ 35.541784][ T4009] __x64_sys_sendfile64+0x105/0x150 [ 35.546977][ T4009] x64_sys_call+0x2bb0/0x2ff0 [ 35.551640][ T4009] do_syscall_64+0xd2/0x200 [ 35.556152][ T4009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 35.562035][ T4009] [ 35.564339][ T4009] value changed: 0xffff88810553faf8 -> 0x0000000000000000 [ 35.571424][ T4009] [ 35.573730][ T4009] Reported by Kernel Concurrency Sanitizer on: [ 35.579872][ T4009] CPU: 0 UID: 0 PID: 4009 Comm: syz.3.210 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93 #0 PREEMPT(voluntary) [ 35.591835][ T4009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 35.601900][ T4009] ================================================================== [ 35.623550][ T4021] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.636728][ T4021] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 35.675818][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.023209][ T3299] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.