last executing test programs: 2.407779068s ago: executing program 0 (id=602): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 2.358148513s ago: executing program 0 (id=603): socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000400), &(0x7f00000005c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x20) 2.261404843s ago: executing program 0 (id=605): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbff}, 0x10}}, 0x4040014) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x7e}) 777.295171ms ago: executing program 1 (id=644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x40}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r1, 0x0, 0x0, 0x80800) 765.309463ms ago: executing program 1 (id=645): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 604.744108ms ago: executing program 4 (id=650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0xff, 0x0, 0x7fff0026}]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x16, 0x0, "0af5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d1408407e5a774ef95f2fc1b947e00f000000123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x3, @dev={0xfe, 0x80, '\x00', 0x3d}, 0xfffffffd}}, 0x0, 0x0, 0x15, 0x0, "a1c1dd75808473ba07d90000b03e10950cd4b347013e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810d7d88b0abec04ebc00"}, 0xd8) close_range(r2, 0xffffffffffffffff, 0x0) 587.039081ms ago: executing program 3 (id=651): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r1, &(0x7f00000007c0)}, 0x20) 576.153422ms ago: executing program 4 (id=652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0xf5ff, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 560.314393ms ago: executing program 2 (id=653): prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 548.476654ms ago: executing program 3 (id=654): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r3}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 536.313186ms ago: executing program 4 (id=655): r0 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setresuid(r1, 0x0, 0xee01) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r4, r4) sendmsg$unix(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x20, 0x4000}, 0x200048c0) 527.031466ms ago: executing program 2 (id=656): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48) 507.952308ms ago: executing program 4 (id=657): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r1, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r0, &(0x7f0000000000)=""/49, 0x31) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) renameat2(r2, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000200)='./file7\x00', 0x0) getdents64(r0, &(0x7f0000000540)=""/217, 0xd9) 493.87007ms ago: executing program 4 (id=658): setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000200850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x1a00404, &(0x7f0000000080)={[{@grpquota}, {@nomblk_io_submit}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 486.695571ms ago: executing program 3 (id=659): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0xfffffffe, 0xd3}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x200}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 468.245003ms ago: executing program 2 (id=660): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fd03000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000feffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x371d, &(0x7f0000000440)={0x0, 0x0, 0x400, 0xa, 0xffffff}, &(0x7f0000000380), &(0x7f0000000400)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) 403.381679ms ago: executing program 2 (id=661): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8002}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 390.12563ms ago: executing program 1 (id=662): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfdef}], 0x1}, 0x0) 377.584802ms ago: executing program 2 (id=663): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x7}, 0x18) syz_read_part_table(0x60e, &(0x7f00000007c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 346.027265ms ago: executing program 1 (id=664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 315.268958ms ago: executing program 1 (id=665): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 284.745471ms ago: executing program 0 (id=666): socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2000844, &(0x7f0000000400)=ANY=[@ANYBLOB='sys_immutable,dots,tz=UTC,dots,errors=continue,dots,nodots,dots,dots,dots,allow_utime=00000000000000000000011,gid=', @ANYRESHEX=0x0, @ANYBLOB="000000000000f9ffffff000000"], 0x1, 0x250, &(0x7f00000005c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) 281.693131ms ago: executing program 3 (id=667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1}, 0x9) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) 276.438512ms ago: executing program 1 (id=668): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f14a18", 0x3) syz_emit_ethernet(0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x40001) sendfile(r2, r1, 0x0, 0x7ffff000) 183.557371ms ago: executing program 3 (id=669): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000380)={0x0, 0x1, 0x7}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10, 0x3}) close_range(r0, 0xffffffffffffffff, 0x0) 129.254277ms ago: executing program 0 (id=670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x6) fcntl$notify(r2, 0x402, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r3, 0x4) 109.643958ms ago: executing program 0 (id=671): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7ffeffff}}}}]}, 0x44}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000cc0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 61.235633ms ago: executing program 3 (id=672): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x8, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x4, 0x7}, 0x13748, 0x10000, 0x0, 0x5, 0xa, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014}) close_range(r0, r1, 0x0) 49.369545ms ago: executing program 2 (id=673): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002085000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 0s ago: executing program 4 (id=674): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r2, &(0x7f0000000780)}, 0x20) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 24.787686][ T29] audit: type=1400 audit(1763245379.245:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.810559][ T29] audit: type=1400 audit(1763245379.265:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.811183][ T3304] cgroup: Unknown subsys name 'net' [ 24.838167][ T29] audit: type=1400 audit(1763245379.295:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.988090][ T3304] cgroup: Unknown subsys name 'cpuset' [ 24.994098][ T3304] cgroup: Unknown subsys name 'rlimit' [ 25.102878][ T29] audit: type=1400 audit(1763245379.555:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.130354][ T29] audit: type=1400 audit(1763245379.555:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.150787][ T29] audit: type=1400 audit(1763245379.555:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.162530][ T3308] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.171138][ T29] audit: type=1400 audit(1763245379.555:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.199888][ T29] audit: type=1400 audit(1763245379.565:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.209063][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.224635][ T29] audit: type=1400 audit(1763245379.565:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.256551][ T29] audit: type=1400 audit(1763245379.635:71): avc: denied { relabelto } for pid=3308 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.410479][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 26.494106][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 26.509232][ T3316] chnl_net:caif_netlink_parms(): no params data found [ 26.517937][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.525058][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.532241][ T3314] bridge_slave_0: entered allmulticast mode [ 26.538554][ T3314] bridge_slave_0: entered promiscuous mode [ 26.560166][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.567309][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.574593][ T3314] bridge_slave_1: entered allmulticast mode [ 26.580840][ T3314] bridge_slave_1: entered promiscuous mode [ 26.623494][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.646588][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.669515][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.676560][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.683697][ T3318] bridge_slave_0: entered allmulticast mode [ 26.690052][ T3318] bridge_slave_0: entered promiscuous mode [ 26.703832][ T3321] chnl_net:caif_netlink_parms(): no params data found [ 26.712809][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.719888][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.726960][ T3318] bridge_slave_1: entered allmulticast mode [ 26.733440][ T3318] bridge_slave_1: entered promiscuous mode [ 26.753245][ T3316] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.760308][ T3316] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.767464][ T3316] bridge_slave_0: entered allmulticast mode [ 26.773860][ T3316] bridge_slave_0: entered promiscuous mode [ 26.780746][ T3314] team0: Port device team_slave_0 added [ 26.786394][ T3316] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.793470][ T3316] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.800551][ T3316] bridge_slave_1: entered allmulticast mode [ 26.806921][ T3316] bridge_slave_1: entered promiscuous mode [ 26.822481][ T3327] chnl_net:caif_netlink_parms(): no params data found [ 26.839915][ T3314] team0: Port device team_slave_1 added [ 26.853189][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.871845][ T3316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 26.889130][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.901486][ T3316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 26.910808][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 26.917810][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 26.943691][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 26.968931][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 26.975865][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.001970][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.029982][ T3318] team0: Port device team_slave_0 added [ 27.040445][ T3316] team0: Port device team_slave_0 added [ 27.053930][ T3318] team0: Port device team_slave_1 added [ 27.060129][ T3316] team0: Port device team_slave_1 added [ 27.065876][ T3321] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.072989][ T3321] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.080245][ T3321] bridge_slave_0: entered allmulticast mode [ 27.086705][ T3321] bridge_slave_0: entered promiscuous mode [ 27.093742][ T3321] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.100819][ T3321] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.107949][ T3321] bridge_slave_1: entered allmulticast mode [ 27.114313][ T3321] bridge_slave_1: entered promiscuous mode [ 27.163051][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.170107][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.177296][ T3327] bridge_slave_0: entered allmulticast mode [ 27.183682][ T3327] bridge_slave_0: entered promiscuous mode [ 27.190263][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.197189][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.223094][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.234006][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.240976][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.266866][ T3316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.279285][ T3314] hsr_slave_0: entered promiscuous mode [ 27.285222][ T3314] hsr_slave_1: entered promiscuous mode [ 27.292094][ T3321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.301342][ T3327] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.308394][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.315469][ T3327] bridge_slave_1: entered allmulticast mode [ 27.321915][ T3327] bridge_slave_1: entered promiscuous mode [ 27.328200][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.335124][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.361071][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.374384][ T3316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.381331][ T3316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.407207][ T3316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.421087][ T3321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.441033][ T3327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.471433][ T3327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 27.491907][ T3321] team0: Port device team_slave_0 added [ 27.510893][ T3327] team0: Port device team_slave_0 added [ 27.517139][ T3321] team0: Port device team_slave_1 added [ 27.530390][ T3318] hsr_slave_0: entered promiscuous mode [ 27.536345][ T3318] hsr_slave_1: entered promiscuous mode [ 27.542210][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 27.547921][ T3318] Cannot create hsr debugfs directory [ 27.558512][ T3327] team0: Port device team_slave_1 added [ 27.577820][ T3316] hsr_slave_0: entered promiscuous mode [ 27.583766][ T3316] hsr_slave_1: entered promiscuous mode [ 27.589591][ T3316] debugfs: 'hsr0' already exists in 'hsr' [ 27.595294][ T3316] Cannot create hsr debugfs directory [ 27.622163][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.629124][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.655030][ T3321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.667781][ T3321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.674774][ T3321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.700726][ T3321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.725684][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 27.732642][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.758544][ T3327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 27.771463][ T3327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 27.778478][ T3327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 27.804445][ T3327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 27.850235][ T3321] hsr_slave_0: entered promiscuous mode [ 27.856231][ T3321] hsr_slave_1: entered promiscuous mode [ 27.862290][ T3321] debugfs: 'hsr0' already exists in 'hsr' [ 27.868023][ T3321] Cannot create hsr debugfs directory [ 27.897260][ T3327] hsr_slave_0: entered promiscuous mode [ 27.903301][ T3327] hsr_slave_1: entered promiscuous mode [ 27.909068][ T3327] debugfs: 'hsr0' already exists in 'hsr' [ 27.914801][ T3327] Cannot create hsr debugfs directory [ 28.010650][ T3314] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 28.025734][ T3314] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 28.036132][ T3314] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 28.044746][ T3314] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 28.088263][ T3316] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 28.109338][ T3316] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 28.119500][ T3316] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 28.128647][ T3316] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 28.140577][ T3318] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 28.149521][ T3318] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 28.162905][ T3318] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 28.171481][ T3318] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 28.201854][ T3321] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 28.210402][ T3321] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 28.226540][ T3321] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 28.237369][ T3321] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 28.264595][ T3316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.285307][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.305954][ T3316] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.314390][ T3327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 28.326632][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.333576][ T3327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 28.342111][ T3327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 28.350625][ T3327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 28.365604][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.372642][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.381171][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.388210][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.396582][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.403668][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.418720][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.430397][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.437638][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.465059][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.477907][ T264] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.484942][ T264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.500265][ T264] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.507299][ T264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.523160][ T3321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.568508][ T3321] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.595671][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.602827][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.611763][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.618904][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.640189][ T3321] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 28.650541][ T3321] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.675110][ T3316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.691611][ T3327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 28.709725][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.751957][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.760932][ T3327] 8021q: adding VLAN 0 to HW filter on device team0 [ 28.781236][ T272] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.788295][ T272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.806499][ T3321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 28.845952][ T1897] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.853023][ T1897] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.875959][ T3314] veth0_vlan: entered promiscuous mode [ 28.918502][ T3314] veth1_vlan: entered promiscuous mode [ 28.925878][ T3321] veth0_vlan: entered promiscuous mode [ 28.933766][ T3327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 28.957937][ T3321] veth1_vlan: entered promiscuous mode [ 28.973326][ T3314] veth0_macvtap: entered promiscuous mode [ 28.994548][ T3316] veth0_vlan: entered promiscuous mode [ 29.007566][ T3318] veth0_vlan: entered promiscuous mode [ 29.015243][ T3314] veth1_macvtap: entered promiscuous mode [ 29.026322][ T3316] veth1_vlan: entered promiscuous mode [ 29.034371][ T3321] veth0_macvtap: entered promiscuous mode [ 29.041145][ T3318] veth1_vlan: entered promiscuous mode [ 29.051375][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.066642][ T3321] veth1_macvtap: entered promiscuous mode [ 29.078740][ T3327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.088976][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.099992][ T3318] veth0_macvtap: entered promiscuous mode [ 29.107977][ T1897] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.118978][ T3316] veth0_macvtap: entered promiscuous mode [ 29.134120][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.141773][ T1777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.151711][ T3316] veth1_macvtap: entered promiscuous mode [ 29.166365][ T3314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.174115][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.189059][ T3318] veth1_macvtap: entered promiscuous mode [ 29.200192][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.208106][ T1777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.217426][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.230164][ T3316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.245349][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.252697][ T1777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.276653][ T3480] netlink: 'syz.1.6': attribute type 10 has an invalid length. [ 29.284269][ T3480] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6'. [ 29.296346][ T3480] team0: Port device geneve1 added [ 29.302610][ T1777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.312514][ T1777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.321558][ T1777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.330912][ T1777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.351323][ T1777] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.383552][ T1777] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.396742][ T3327] veth0_vlan: entered promiscuous mode [ 29.403409][ T1777] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.427200][ T1777] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.437281][ T3327] veth1_vlan: entered promiscuous mode [ 29.450742][ T264] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.485546][ T264] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.493791][ T3495] loop2: detected capacity change from 0 to 1024 [ 29.496421][ T3327] veth0_macvtap: entered promiscuous mode [ 29.511861][ T3494] capability: warning: `syz.0.1' uses 32-bit capabilities (legacy support in use) [ 29.535239][ T3500] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5'. [ 29.544715][ T264] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.545118][ T3495] ======================================================= [ 29.545118][ T3495] WARNING: The mand mount option has been deprecated and [ 29.545118][ T3495] and is ignored by this kernel. Remove the mand [ 29.545118][ T3495] option from the mount to silence this warning. [ 29.545118][ T3495] ======================================================= [ 29.589709][ T3327] veth1_macvtap: entered promiscuous mode [ 29.615059][ T264] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.633815][ T3495] EXT4-fs: Ignoring removed oldalloc option [ 29.637486][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 29.639822][ T3495] EXT4-fs: Ignoring removed bh option [ 29.653512][ T3327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 29.678335][ T264] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.697023][ T264] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.714252][ T3495] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 29.733221][ T264] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.750323][ T264] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 29.797790][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 29.797803][ T29] audit: type=1400 audit(1763245384.255:126): avc: denied { allowed } for pid=3492 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 29.829859][ T29] audit: type=1400 audit(1763245384.255:127): avc: denied { create } for pid=3492 comm="syz.2.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.850750][ T29] audit: type=1400 audit(1763245384.255:128): avc: denied { map } for pid=3492 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.874557][ T29] audit: type=1400 audit(1763245384.255:129): avc: denied { read write } for pid=3492 comm="syz.2.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 29.899370][ T29] audit: type=1400 audit(1763245384.305:130): avc: denied { open } for pid=3525 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.918283][ T29] audit: type=1400 audit(1763245384.305:131): avc: denied { kernel } for pid=3525 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 29.961119][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 29.988558][ T29] audit: type=1400 audit(1763245384.445:132): avc: denied { mount } for pid=3532 comm="syz.2.18" name="/" dev="ramfs" ino=4939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 30.013841][ T3533] loop2: detected capacity change from 0 to 128 [ 30.021368][ T29] audit: type=1400 audit(1763245384.475:133): avc: denied { mounton } for pid=3532 comm="syz.2.18" path="/file2" dev="ramfs" ino=4942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 30.057425][ T29] audit: type=1400 audit(1763245384.505:134): avc: denied { mount } for pid=3532 comm="syz.2.18" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 30.130301][ T3541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 30.152094][ T29] audit: type=1400 audit(1763245384.605:135): avc: denied { create } for pid=3545 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.210709][ T3553] loop2: detected capacity change from 0 to 512 [ 30.243640][ T3553] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 30.263642][ T3553] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 30.308533][ T3553] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.26: corrupted inode contents [ 30.326297][ T3559] loop0: detected capacity change from 0 to 1024 [ 30.352774][ T3559] ext4: Unknown parameter 'uid<00000000000000000000' [ 30.416790][ T3553] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.26: mark_inode_dirty error [ 30.464443][ T3553] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.26: corrupted inode contents [ 30.513570][ T3563] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.26: corrupted inode contents [ 30.563768][ T3563] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.26: mark_inode_dirty error [ 30.616101][ T3563] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.26: corrupted inode contents [ 30.713120][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 30.824864][ T3584] loop0: detected capacity change from 0 to 2048 [ 30.892565][ T3584] loop0: p1 p2 p3 [ 31.038532][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 31.048798][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 31.059328][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 31.186642][ T3599] netlink: 'syz.0.44': attribute type 17 has an invalid length. [ 31.194332][ T3599] netlink: 148 bytes leftover after parsing attributes in process `syz.0.44'. [ 31.555985][ T3627] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.58'. [ 31.572167][ T3627] netlink: zone id is out of range [ 31.577303][ T3627] netlink: zone id is out of range [ 31.583074][ T3627] netlink: zone id is out of range [ 31.588263][ T3627] netlink: zone id is out of range [ 31.593598][ T3627] netlink: del zone limit has 8 unknown bytes [ 31.739713][ T3645] loop3: detected capacity change from 0 to 512 [ 31.768548][ T3645] ------------[ cut here ]------------ [ 31.774020][ T3645] EA inode 11 i_nlink=2 [ 31.774224][ T3645] WARNING: CPU: 1 PID: 3645 at fs/ext4/xattr.c:1058 ext4_xattr_inode_update_ref+0x36a/0x380 [ 31.788596][ T3645] Modules linked in: [ 31.792499][ T3645] CPU: 1 UID: 0 PID: 3645 Comm: syz.3.67 Not tainted syzkaller #0 PREEMPT(voluntary) [ 31.802039][ T3645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 31.812105][ T3645] RIP: 0010:ext4_xattr_inode_update_ref+0x36a/0x380 [ 31.818759][ T3645] Code: 90 49 8d 7e 40 e8 e6 f9 b8 ff 4d 8b 6e 40 4c 89 e7 e8 fa f4 b8 ff 41 8b 56 48 48 c7 c7 66 d4 55 86 4c 89 ee e8 a7 f5 67 ff 90 <0f> 0b 90 90 e9 ff fe ff ff e8 28 f4 b5 03 0f 1f 84 00 00 00 00 00 [ 31.838409][ T3645] RSP: 0000:ffffc90001923778 EFLAGS: 00010246 [ 31.844461][ T3645] RAX: 44b7d51f05d81600 RBX: ffff888106dfed18 RCX: 0000000000080000 [ 31.852425][ T3645] RDX: ffffc900077c5000 RSI: 00000000000027f9 RDI: 00000000000027fa [ 31.860422][ T3645] RBP: 0000000000000002 R08: 0001c900019235f7 R09: 0000000000000000 [ 31.868411][ T3645] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888106dfecc8 [ 31.876375][ T3645] R13: 000000000000000b R14: ffff888106dfec80 R15: 0000000000000001 [ 31.884385][ T3645] FS: 00007fa3d7d0f6c0(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 31.893369][ T3645] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.899955][ T3645] CR2: 0000001b34322ff8 CR3: 000000011a4c4000 CR4: 00000000003506f0 [ 31.907974][ T3645] Call Trace: [ 31.911231][ T3645] [ 31.914142][ T3645] ext4_xattr_inode_dec_ref_all+0x579/0x830 [ 31.920047][ T3645] ? errseq_check+0x2c/0x50 [ 31.924553][ T3645] ext4_xattr_delete_inode+0x6b7/0x790 [ 31.930073][ T3645] ext4_evict_inode+0xa6a/0xd90 [ 31.934991][ T3645] ? __pfx_ext4_evict_inode+0x10/0x10 [ 31.940396][ T3645] evict+0x2e3/0x550 [ 31.944289][ T3645] ? __dquot_initialize+0x146/0x7c0 [ 31.949503][ T3645] iput+0x4ed/0x650 [ 31.953315][ T3645] ext4_process_orphan+0x1a9/0x1c0 [ 31.958426][ T3645] ext4_orphan_cleanup+0x6a8/0xa00 [ 31.963616][ T3645] ext4_fill_super+0x3483/0x3810 [ 31.968559][ T3645] ? snprintf+0x86/0xb0 [ 31.972718][ T3645] ? set_blocksize+0x1a8/0x310 [ 31.977544][ T3645] ? sb_set_blocksize+0xe3/0x100 [ 31.982506][ T3645] ? setup_bdev_super+0x30e/0x370 [ 31.987629][ T3645] ? __pfx_ext4_fill_super+0x10/0x10 [ 31.992937][ T3645] get_tree_bdev_flags+0x291/0x300 [ 31.998044][ T3645] ? __pfx_ext4_fill_super+0x10/0x10 [ 32.003364][ T3645] get_tree_bdev+0x1f/0x30 [ 32.007791][ T3645] ext4_get_tree+0x1c/0x30 [ 32.012199][ T3645] vfs_get_tree+0x57/0x1d0 [ 32.016598][ T3645] do_new_mount+0x24d/0x660 [ 32.021179][ T3645] path_mount+0x4a5/0xb70 [ 32.025543][ T3645] ? user_path_at+0x109/0x130 [ 32.030218][ T3645] __se_sys_mount+0x28c/0x2e0 [ 32.034907][ T3645] __x64_sys_mount+0x67/0x80 [ 32.039501][ T3645] x64_sys_call+0x2b51/0x3000 [ 32.044213][ T3645] do_syscall_64+0xd2/0x200 [ 32.048768][ T3645] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 32.054902][ T3645] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 32.060621][ T3645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 32.066511][ T3645] RIP: 0033:0x7fa3d92b0e6a [ 32.070921][ T3645] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 32.090538][ T3645] RSP: 002b:00007fa3d7d0ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 32.098955][ T3645] RAX: ffffffffffffffda RBX: 00007fa3d7d0eef0 RCX: 00007fa3d92b0e6a [ 32.106920][ T3645] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007fa3d7d0eeb0 [ 32.114889][ T3645] RBP: 0000200000000180 R08: 00007fa3d7d0eef0 R09: 0000000000800700 [ 32.122867][ T3645] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 32.130832][ T3645] R13: 00007fa3d7d0eeb0 R14: 000000000000046c R15: 0000200000000740 [ 32.138827][ T3645] [ 32.141827][ T3645] ---[ end trace 0000000000000000 ]--- [ 32.147468][ T3645] EXT4-fs (loop3): 1 orphan inode deleted [ 32.153750][ T3645] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.212658][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.300149][ T3666] netlink: 96 bytes leftover after parsing attributes in process `syz.2.75'. [ 32.334897][ T3669] process 'syz.0.78' launched './file0' with NULL argv: empty string added [ 32.360546][ T3673] loop2: detected capacity change from 0 to 512 [ 32.391957][ T3673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.420183][ T3675] loop1: detected capacity change from 0 to 512 [ 32.426808][ T3675] EXT4-fs: Ignoring removed mblk_io_submit option [ 32.433860][ T3673] ext4 filesystem being mounted at /11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.444380][ T3675] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 32.457542][ T3675] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 32.472816][ T3675] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 32.487978][ T3675] EXT4-fs (loop1): 1 truncate cleaned up [ 32.493892][ T3675] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 32.515112][ T3673] syz.2.80 (3673) used greatest stack depth: 10536 bytes left [ 32.548216][ T3685] loop3: detected capacity change from 0 to 4096 [ 32.555306][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.567978][ T3685] EXT4-fs: Ignoring removed nomblk_io_submit option [ 32.586352][ T3685] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.639856][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.683094][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.726418][ T3702] loop3: detected capacity change from 0 to 256 [ 32.762271][ T3705] netlink: 'syz.4.93': attribute type 6 has an invalid length. [ 32.789115][ T3702] FAT-fs (loop3): Directory bread(block 64) failed [ 32.807688][ T3702] FAT-fs (loop3): Directory bread(block 65) failed [ 32.817359][ T3702] FAT-fs (loop3): Directory bread(block 66) failed [ 32.824222][ T3702] FAT-fs (loop3): Directory bread(block 67) failed [ 32.832227][ T3702] FAT-fs (loop3): Directory bread(block 68) failed [ 32.839119][ T3702] FAT-fs (loop3): Directory bread(block 69) failed [ 32.848678][ T3702] FAT-fs (loop3): Directory bread(block 70) failed [ 32.857510][ T3702] FAT-fs (loop3): Directory bread(block 71) failed [ 32.864100][ T3702] FAT-fs (loop3): Directory bread(block 72) failed [ 32.886606][ T3702] FAT-fs (loop3): Directory bread(block 73) failed [ 33.011985][ T3732] Zero length message leads to an empty skb [ 33.050272][ T3730] loop3: detected capacity change from 0 to 8192 [ 33.129988][ T3730] loop3: p1 p2 p3 p4 [ 33.157775][ T3730] loop3: p3 start 331777 is beyond EOD, truncated [ 33.161225][ T3749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.164219][ T3730] loop3: p4 size 262238 extends beyond EOD, truncated [ 33.183571][ T3749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.283633][ T3307] udevd[3307]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 33.294919][ T3499] udevd[3499]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 33.308900][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 33.482913][ T3766] xt_connbytes: Forcing CT accounting to be enabled [ 33.492917][ T3766] Cannot find set identified by id 0 to match [ 33.535781][ T3772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.122'. [ 33.559708][ T3772] netlink: 12 bytes leftover after parsing attributes in process `syz.2.122'. [ 33.587950][ T3774] loop3: detected capacity change from 0 to 4096 [ 33.636101][ T3774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.786312][ T3788] loop1: detected capacity change from 0 to 1024 [ 33.811367][ T3788] EXT4-fs: Ignoring removed bh option [ 33.882971][ T3788] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 33.990662][ T3802] netlink: 19 bytes leftover after parsing attributes in process `syz.0.133'. [ 34.039244][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.167502][ T3814] Illegal XDP return value 4294967294 on prog (id 117) dev syz_tun, expect packet loss! [ 34.216880][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.277821][ T3830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.147'. [ 34.330706][ C0] hrtimer: interrupt took 38388 ns [ 34.356397][ T3842] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 34.362911][ T3842] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 34.371023][ T3842] vhci_hcd vhci_hcd.0: Device attached [ 34.380933][ T3845] vhci_hcd: connection closed [ 34.382177][ T1897] vhci_hcd: stop threads [ 34.391106][ T1897] vhci_hcd: release socket [ 34.395528][ T1897] vhci_hcd: disconnect device [ 34.895790][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 34.895883][ T29] audit: type=1400 audit(1763245389.345:421): avc: denied { create } for pid=3867 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.922680][ T29] audit: type=1400 audit(1763245389.345:422): avc: denied { write } for pid=3867 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.942731][ T29] audit: type=1400 audit(1763245389.345:423): avc: denied { nlmsg_write } for pid=3867 comm="syz.3.162" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 34.950021][ T3874] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 34.970883][ T3874] netlink: 'syz.1.163': attribute type 4 has an invalid length. [ 34.978939][ T3874] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.163'. [ 34.993109][ T3874] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 35.000768][ T3874] netlink: 'syz.1.163': attribute type 4 has an invalid length. [ 35.008404][ T3874] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.163'. [ 35.094536][ T29] audit: type=1400 audit(1763245389.545:424): avc: denied { bind } for pid=3881 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 35.152726][ T3886] netlink: 96 bytes leftover after parsing attributes in process `syz.0.167'. [ 35.171602][ T29] audit: type=1400 audit(1763245389.625:425): avc: denied { setopt } for pid=3881 comm="syz.1.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 35.216748][ T29] audit: type=1400 audit(1763245389.665:426): avc: denied { name_bind } for pid=3890 comm="syz.0.169" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 35.341203][ T29] audit: type=1326 audit(1763245389.795:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6311f6c9 code=0x7ffc0000 [ 35.394929][ T29] audit: type=1326 audit(1763245389.815:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6311f6c9 code=0x7ffc0000 [ 35.418250][ T29] audit: type=1326 audit(1763245389.815:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6311f6c9 code=0x7ffc0000 [ 35.441511][ T29] audit: type=1326 audit(1763245389.815:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3904 comm="syz.0.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4f6311f6c9 code=0x7ffc0000 [ 35.537162][ T3924] bridge0: entered promiscuous mode [ 35.539222][ T3915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 35.551322][ T3915] netlink: 12 bytes leftover after parsing attributes in process `syz.1.179'. [ 35.552718][ T3924] bridge0: port 3(macsec1) entered blocking state [ 35.566610][ T3924] bridge0: port 3(macsec1) entered disabled state [ 35.573694][ T3924] macsec1: entered allmulticast mode [ 35.579028][ T3924] bridge0: entered allmulticast mode [ 35.586160][ T3924] macsec1: left allmulticast mode [ 35.591237][ T3924] bridge0: left allmulticast mode [ 35.596645][ T3924] bridge0: left promiscuous mode [ 35.695146][ T3924] syz.0.182 (3924) used greatest stack depth: 10480 bytes left [ 35.740469][ T3936] loop0: detected capacity change from 0 to 512 [ 35.756395][ T3936] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.187: corrupted inode contents [ 35.780078][ T3936] EXT4-fs error (device loop0) in ext4_orphan_del:301: Corrupt filesystem [ 35.789599][ T3936] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.187: corrupted inode contents [ 35.801832][ T3936] EXT4-fs error (device loop0): ext4_evict_inode:302: inode #15: comm syz.0.187: mark_inode_dirty error [ 35.813710][ T3936] EXT4-fs (loop0): 1 orphan inode deleted [ 35.820031][ T3936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 35.844028][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.932616][ T3949] Set syz1 is full, maxelem 6117 reached [ 35.978688][ T3953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.195'. [ 36.019566][ T3955] netlink: 'syz.0.196': attribute type 1 has an invalid length. [ 36.044260][ T3955] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 36.053210][ T3955] bond1: (slave batadv1): making interface the new active one [ 36.063279][ T3955] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 36.078453][ T3955] syz.0.196 (3955) used greatest stack depth: 10208 bytes left [ 36.089839][ T3960] bond1: entered promiscuous mode [ 36.094892][ T3960] bond1: entered allmulticast mode [ 36.101657][ T3960] 8021q: adding VLAN 0 to HW filter on device bond1 [ 36.111548][ T3960] bond1 (unregistering): Released all slaves [ 36.259347][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 36.559572][ T3999] loop1: detected capacity change from 0 to 512 [ 36.566029][ T3999] EXT4-fs: Ignoring removed i_version option [ 36.572133][ T3999] EXT4-fs: Ignoring removed bh option [ 36.598986][ T3999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.611917][ T3999] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.620052][ T4003] loop0: detected capacity change from 0 to 1024 [ 36.644108][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.653550][ T4003] EXT4-fs: Ignoring removed orlov option [ 36.685810][ T4007] vlan2: entered allmulticast mode [ 36.691065][ T4007] dummy0: entered allmulticast mode [ 36.697515][ T4003] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 36.726957][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.816160][ T4022] syz.4.225 uses obsolete (PF_INET,SOCK_PACKET) [ 36.901626][ T4034] netlink: 96 bytes leftover after parsing attributes in process `syz.1.231'. [ 37.152218][ T4063] loop4: detected capacity change from 0 to 1024 [ 37.164558][ T4063] EXT4-fs: Ignoring removed orlov option [ 37.173396][ T4063] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 37.219486][ T4063] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.274664][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.315767][ T4073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'. [ 37.420412][ T4089] netlink: 'syz.1.253': attribute type 3 has an invalid length. [ 37.560057][ T4104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 37.624162][ T4110] loop3: detected capacity change from 0 to 8192 [ 37.786728][ T4122] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.514356][ T4146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.276'. [ 38.569011][ T4150] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 38.596254][ T4150] bond2: entered promiscuous mode [ 38.605118][ T4150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 38.663615][ T4150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 38.671053][ T4150] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 38.681161][ T4150] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 38.692205][ T4150] bond2: (slave xfrm1): making interface the new active one [ 38.699527][ T4150] xfrm1: entered promiscuous mode [ 38.707244][ T4150] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 39.017358][ T4170] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 39.155488][ T4182] vlan2: entered allmulticast mode [ 39.166535][ T4177] loop1: detected capacity change from 0 to 8192 [ 39.172924][ T4182] dummy0: entered allmulticast mode [ 39.280060][ T4191] loop0: detected capacity change from 0 to 1024 [ 39.311903][ T4191] EXT4-fs: Ignoring removed orlov option [ 39.360348][ T4191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.593566][ T4212] ip6gre1: entered allmulticast mode [ 39.935056][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.045311][ T4235] loop2: detected capacity change from 0 to 1024 [ 40.068333][ T4235] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 40.103058][ T4235] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 40.121721][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 40.121735][ T29] audit: type=1400 audit(1763245394.575:591): avc: denied { sqpoll } for pid=4238 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 40.148679][ T4235] EXT4-fs (loop2): failed to initialize system zone (-117) [ 40.155899][ T4235] EXT4-fs (loop2): mount failed [ 40.435971][ T4309] __nla_validate_parse: 5 callbacks suppressed [ 40.435985][ T4309] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.321'. [ 40.451324][ T4309] netlink: 24 bytes leftover after parsing attributes in process `syz.1.321'. [ 40.922739][ T29] audit: type=1326 audit(1763245395.355:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f63116567 code=0x7ffc0000 [ 40.945949][ T29] audit: type=1326 audit(1763245395.355:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f630bb789 code=0x7ffc0000 [ 40.969148][ T29] audit: type=1326 audit(1763245395.365:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4f63116567 code=0x7ffc0000 [ 40.992263][ T29] audit: type=1326 audit(1763245395.365:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4f630bb789 code=0x7ffc0000 [ 41.015517][ T29] audit: type=1326 audit(1763245395.365:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6311f6c9 code=0x7ffc0000 [ 41.038790][ T29] audit: type=1326 audit(1763245395.365:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6311f6c9 code=0x7ffc0000 [ 41.061997][ T29] audit: type=1326 audit(1763245395.365:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6311f6c9 code=0x7ffc0000 [ 41.085273][ T29] audit: type=1326 audit(1763245395.365:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f6311f6c9 code=0x7ffc0000 [ 41.108553][ T29] audit: type=1326 audit(1763245395.365:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4328 comm="syz.0.329" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f6311f6c9 code=0x7ffc0000 [ 41.133583][ T4334] loop0: detected capacity change from 0 to 164 [ 41.173170][ T4338] netlink: 96 bytes leftover after parsing attributes in process `syz.3.332'. [ 41.176129][ T4334] : attempt to access beyond end of device [ 41.176129][ T4334] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 41.213426][ T4340] loop1: detected capacity change from 0 to 512 [ 41.221154][ T4334] : attempt to access beyond end of device [ 41.221154][ T4334] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 41.250738][ T4348] netlink: 20 bytes leftover after parsing attributes in process `syz.2.337'. [ 41.985874][ T4407] netlink: 'syz.4.363': attribute type 3 has an invalid length. [ 41.993590][ T4407] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.363'. [ 42.072978][ T4413] loop4: detected capacity change from 0 to 1024 [ 42.080001][ T4413] EXT4-fs: Ignoring removed orlov option [ 42.104731][ T4413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.290166][ T4421] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 42.296003][ T4421] syzkaller0: Linktype set failed because interface is up [ 42.458477][ T4440] hub 9-0:1.0: USB hub found [ 42.469527][ T4440] hub 9-0:1.0: 8 ports detected [ 42.688942][ T3316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.998669][ T4484] veth2: entered promiscuous mode [ 43.003727][ T4484] veth2: entered allmulticast mode [ 43.151100][ T4502] netlink: 32 bytes leftover after parsing attributes in process `syz.2.406'. [ 43.215429][ T4508] netlink: 92 bytes leftover after parsing attributes in process `syz.4.408'. [ 43.227046][ T4508] netlink: 32 bytes leftover after parsing attributes in process `syz.4.408'. [ 43.314005][ T4523] netlink: 96 bytes leftover after parsing attributes in process `syz.1.410'. [ 44.044488][ T4587] wg2: entered promiscuous mode [ 44.049515][ T4587] wg2: entered allmulticast mode [ 44.271599][ T4612] hub 9-0:1.0: USB hub found [ 44.276622][ T4612] hub 9-0:1.0: 8 ports detected [ 44.411663][ T4634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 44.439117][ T4640] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4640 comm=syz.4.432 [ 45.330914][ T2968] IPVS: starting estimator thread 0... [ 45.418096][ T4758] IPVS: using max 2880 ests per chain, 144000 per kthread [ 45.530824][ T4775] __nla_validate_parse: 2 callbacks suppressed [ 45.530838][ T4775] netlink: 64 bytes leftover after parsing attributes in process `syz.3.461'. [ 45.579008][ T4781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.464'. [ 45.592345][ T4783] netlink: 96 bytes leftover after parsing attributes in process `syz.3.465'. [ 45.621008][ T4785] loop0: detected capacity change from 0 to 1024 [ 45.627960][ T4785] EXT4-fs: inline encryption not supported [ 45.633788][ T4785] EXT4-fs: Ignoring removed i_version option [ 45.640402][ T4785] EXT4-fs: Ignoring removed orlov option [ 45.651510][ T4785] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.677237][ T4785] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 45.814887][ T29] kauditd_printk_skb: 160 callbacks suppressed [ 45.814900][ T29] audit: type=1400 audit(1763245400.265:761): avc: denied { write } for pid=4797 comm="{/}\" path="socket:[8155]" dev="sockfs" ino=8155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.873941][ T4804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.474'. [ 45.919965][ T4808] netlink: 96 bytes leftover after parsing attributes in process `syz.3.476'. [ 46.046139][ T4819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.480'. [ 46.079963][ T4823] loop2: detected capacity change from 0 to 512 [ 46.222722][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.263785][ T4839] loop0: detected capacity change from 0 to 256 [ 46.300304][ T29] audit: type=1400 audit(1763245400.745:762): avc: denied { watch } for pid=4836 comm="syz.0.489" path="/121/file0" dev="loop0" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 46.384695][ T29] audit: type=1400 audit(1763245400.835:763): avc: denied { watch } for pid=4842 comm="syz.0.491" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 46.584795][ T29] audit: type=1326 audit(1763245401.035:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d92af6c9 code=0x7ffc0000 [ 46.608206][ T29] audit: type=1326 audit(1763245401.035:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d92af6c9 code=0x7ffc0000 [ 46.631505][ T29] audit: type=1326 audit(1763245401.035:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3d92af6c9 code=0x7ffc0000 [ 46.654713][ T29] audit: type=1326 audit(1763245401.035:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d92af6c9 code=0x7ffc0000 [ 46.677962][ T29] audit: type=1326 audit(1763245401.035:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa3d92af6c9 code=0x7ffc0000 [ 46.701188][ T29] audit: type=1326 audit(1763245401.035:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d92af6c9 code=0x7ffc0000 [ 46.724385][ T29] audit: type=1326 audit(1763245401.035:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4859 comm="syz.3.499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa3d92af6c9 code=0x7ffc0000 [ 46.763262][ T4862] loop3: detected capacity change from 0 to 512 [ 46.791602][ T4862] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.804439][ T4862] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.822122][ T4862] SELinux: Context is not valid (left unmapped). [ 46.839708][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.846667][ T4865] syz.4.501 (4865) used greatest stack depth: 9520 bytes left [ 47.115932][ T4887] netlink: 'syz.2.511': attribute type 27 has an invalid length. [ 47.247040][ T4887] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.254289][ T4887] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.408500][ T4887] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.425885][ T4920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.519'. [ 47.456150][ T4887] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.558362][ T4887] veth2: left promiscuous mode [ 47.563135][ T4887] veth2: left allmulticast mode [ 47.590370][ T4891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.600548][ T4891] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.654449][ T4891] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 47.676585][ T4257] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.716599][ T4257] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.747225][ T4942] capability: warning: `syz.1.525' uses deprecated v2 capabilities in a way that may be insecure [ 47.764339][ T4257] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.766081][ T4941] loop4: detected capacity change from 0 to 2048 [ 47.778136][ T4257] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.853286][ T4952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 47.862941][ T4952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.531'. [ 47.872513][ T4941] loop4: p1 < > p4 [ 47.891957][ T4938] netlink: 96 bytes leftover after parsing attributes in process `syz.2.523'. [ 47.903394][ T4958] bridge0: entered promiscuous mode [ 47.909519][ T4941] loop4: p4 size 8388608 extends beyond EOD, truncated [ 47.927807][ T4960] netlink: 'syz.1.534': attribute type 27 has an invalid length. [ 47.928013][ T4958] bridge0: port 3(macsec1) entered blocking state [ 47.942077][ T4958] bridge0: port 3(macsec1) entered disabled state [ 47.949437][ T4958] macsec1: entered allmulticast mode [ 47.954763][ T4958] bridge0: entered allmulticast mode [ 47.963113][ T4958] macsec1: left allmulticast mode [ 47.968182][ T4958] bridge0: left allmulticast mode [ 47.973950][ T4958] bridge0: left promiscuous mode [ 48.016824][ T4960] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.024025][ T4960] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.073841][ T4960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.083676][ T4960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.133709][ T4941] bridge0: entered promiscuous mode [ 48.143334][ T4941] macsec1: entered promiscuous mode [ 48.158261][ T4941] bridge0: port 3(macsec1) entered blocking state [ 48.164785][ T4941] bridge0: port 3(macsec1) entered disabled state [ 48.172347][ T4941] macsec1: entered allmulticast mode [ 48.177709][ T4941] bridge0: entered allmulticast mode [ 48.183896][ T4941] macsec1: left allmulticast mode [ 48.188962][ T4941] bridge0: left allmulticast mode [ 48.194892][ T4941] bridge0: left promiscuous mode [ 48.213039][ T4963] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.221125][ T4963] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.230449][ T4963] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 48.250189][ T4257] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.259271][ T4257] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.268556][ T4974] netem: change failed [ 48.307423][ T4257] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.361386][ T4257] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.375833][ T4983] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 48.407282][ T4983] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 48.474103][ T4987] loop3: detected capacity change from 0 to 2048 [ 48.569377][ T3305] Alternate GPT is invalid, using primary GPT. [ 48.575696][ T3305] loop3: p2 p3 p7 [ 48.585637][ T4987] Alternate GPT is invalid, using primary GPT. [ 48.592029][ T4987] loop3: p2 p3 p7 [ 48.668890][ T4982] Set syz1 is full, maxelem 65536 reached [ 48.692995][ T5000] batman_adv: batadv0: Adding interface: dummy0 [ 48.699301][ T5000] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 48.727827][ T5000] batman_adv: batadv0: Interface activated: dummy0 [ 48.760094][ T5000] batadv0: mtu less than device minimum [ 48.765992][ T5000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 48.776648][ T5000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 48.787336][ T5000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 48.797966][ T5000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 48.808645][ T5000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 48.819462][ T5000] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 48.852713][ T5011] netlink: 'syz.4.554': attribute type 19 has an invalid length. [ 48.861081][ T5011] netlink: 'syz.4.554': attribute type 19 has an invalid length. [ 49.492459][ T5054] sctp: [Deprecated]: syz.0.572 (pid 5054) Use of int in max_burst socket option. [ 49.492459][ T5054] Use struct sctp_assoc_value instead [ 50.577739][ T3821] Bluetooth: hci0: command 0x1003 tx timeout [ 50.583841][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 50.654239][ T5094] loop0: detected capacity change from 0 to 128 [ 50.666651][ T5094] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.689322][ T5094] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 50.703832][ T5094] __nla_validate_parse: 9 callbacks suppressed [ 50.703845][ T5094] netlink: 104 bytes leftover after parsing attributes in process `syz.0.590'. [ 50.738638][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.900792][ T5118] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 51.038131][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 51.038136][ T5126] SELinux: policydb version 0 does not match my version range 15-35 [ 51.038146][ T29] audit: type=1400 audit(1763245405.495:820): avc: denied { load_policy } for pid=5125 comm="syz.0.603" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 51.076264][ T5128] netlink: 'syz.3.604': attribute type 1 has an invalid length. [ 51.083480][ T5126] SELinux: failed to load policy [ 51.096887][ T5128] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.134630][ T5134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.606'. [ 51.143631][ T5134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.606'. [ 51.152500][ T5134] netlink: 12 bytes leftover after parsing attributes in process `syz.1.606'. [ 51.177185][ T5134] netlink: 28 bytes leftover after parsing attributes in process `syz.1.606'. [ 51.186092][ T5134] netlink: 'syz.1.606': attribute type 6 has an invalid length. [ 51.207820][ T5128] bond1: (slave veth3): Enslaving as an active interface with a down link [ 51.240424][ T5128] bond1: (slave dummy0): making interface the new active one [ 51.249207][ T5128] dummy0: entered promiscuous mode [ 51.257699][ T5128] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 51.273928][ T29] audit: type=1400 audit(1763245405.725:821): avc: denied { append } for pid=5142 comm="syz.1.607" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 51.415869][ T5167] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=5167 comm=syz.3.610 [ 51.682634][ T5210] syz.3.616 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.736107][ T5219] netlink: 96 bytes leftover after parsing attributes in process `syz.3.619'. [ 51.878870][ T29] audit: type=1400 audit(1763245406.335:822): avc: denied { ioctl } for pid=5245 comm="syz.4.624" path="socket:[11763]" dev="sockfs" ino=11763 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 51.950595][ T5258] netlink: 24 bytes leftover after parsing attributes in process `syz.3.626'. [ 51.952955][ T29] audit: type=1326 audit(1763245406.365:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5018 comm="syz.2.557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f2ee3cbb789 code=0x7fc00000 [ 51.986194][ T5260] netlink: 'syz.4.627': attribute type 13 has an invalid length. [ 52.046266][ T5260] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.053527][ T5260] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.118438][ T5260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.130777][ T5260] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.221620][ T4274] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.237486][ T4274] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.258181][ T4274] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.291459][ T4274] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.339774][ T5300] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.632'. [ 52.458187][ T29] audit: type=1400 audit(1763245406.905:824): avc: denied { setopt } for pid=5315 comm="syz.4.635" lport=40498 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 52.498326][ T5319] bridge: RTM_NEWNEIGH with invalid ether address [ 52.538851][ T5324] loop3: detected capacity change from 0 to 1024 [ 52.567570][ T5324] EXT4-fs: inline encryption not supported [ 52.587208][ T5324] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.625042][ T3327] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.654004][ T5352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.647'. [ 52.662888][ T5352] netlink: 348 bytes leftover after parsing attributes in process `syz.4.647'. [ 52.721733][ T29] audit: type=1400 audit(1763245407.175:825): avc: denied { append } for pid=5356 comm="syz.2.648" name="file0" dev="tmpfs" ino=461 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 53.020923][ T5392] loop2: detected capacity change from 0 to 2048 [ 53.058161][ T5392] loop2: p1 < > p4 [ 53.062665][ T5392] loop2: p4 size 8388608 extends beyond EOD, truncated [ 53.084617][ T5392] bridge0: entered promiscuous mode [ 53.104670][ T5392] macsec1: entered promiscuous mode [ 53.110030][ T5398] loop0: detected capacity change from 0 to 512 [ 53.113872][ T5392] bridge0: port 3(macsec1) entered blocking state [ 53.122804][ T5392] bridge0: port 3(macsec1) entered disabled state [ 53.129714][ T5398] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000101) [ 53.130644][ T5392] macsec1: entered allmulticast mode [ 53.144929][ T5392] bridge0: entered allmulticast mode [ 53.147943][ T5402] loop1: detected capacity change from 0 to 1024 [ 53.156796][ T5392] macsec1: left allmulticast mode [ 53.159184][ T5402] EXT4-fs: Ignoring removed oldalloc option [ 53.161947][ T5392] bridge0: left allmulticast mode [ 53.167798][ T5402] EXT4-fs: Ignoring removed bh option [ 53.197546][ T29] audit: type=1400 audit(1763245407.645:826): avc: denied { create } for pid=5403 comm="syz.3.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 53.217279][ T5392] bridge0: left promiscuous mode [ 53.218738][ T5402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.385248][ T5413] ================================================================== [ 53.393336][ T5413] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 53.401222][ T5413] [ 53.403533][ T5413] write to 0xffff888106e3254c of 4 bytes by task 5402 on cpu 1: [ 53.411143][ T5413] xas_set_mark+0x12b/0x140 [ 53.415630][ T5413] __folio_start_writeback+0x155/0x390 [ 53.421077][ T5413] ext4_bio_write_folio+0x5ad/0x9f0 [ 53.426266][ T5413] mpage_process_page_bufs+0x4a1/0x620 [ 53.431714][ T5413] mpage_prepare_extent_to_map+0x786/0xc00 [ 53.437509][ T5413] ext4_do_writepages+0xa05/0x2750 [ 53.442602][ T5413] ext4_writepages+0x176/0x300 [ 53.447357][ T5413] do_writepages+0x1c6/0x310 [ 53.451933][ T5413] file_write_and_wait_range+0x156/0x2c0 [ 53.457559][ T5413] generic_buffers_fsync_noflush+0x45/0x120 [ 53.463445][ T5413] ext4_sync_file+0x1ab/0x690 [ 53.468108][ T5413] vfs_fsync_range+0x10d/0x130 [ 53.472861][ T5413] ext4_buffered_write_iter+0x34f/0x3c0 [ 53.478389][ T5413] ext4_file_write_iter+0x387/0xf60 [ 53.483573][ T5413] iter_file_splice_write+0x666/0xa60 [ 53.488932][ T5413] direct_splice_actor+0x156/0x2a0 [ 53.494031][ T5413] splice_direct_to_actor+0x312/0x680 [ 53.499389][ T5413] do_splice_direct+0xda/0x150 [ 53.504139][ T5413] do_sendfile+0x380/0x650 [ 53.508551][ T5413] __x64_sys_sendfile64+0x105/0x150 [ 53.513741][ T5413] x64_sys_call+0x2bb4/0x3000 [ 53.518408][ T5413] do_syscall_64+0xd2/0x200 [ 53.522895][ T5413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.528782][ T5413] [ 53.531091][ T5413] read to 0xffff888106e3254c of 4 bytes by task 5413 on cpu 0: [ 53.538619][ T5413] __writeback_single_inode+0x1f9/0x7c0 [ 53.544153][ T5413] writeback_single_inode+0x16d/0x3f0 [ 53.549518][ T5413] sync_inode_metadata+0x5b/0x90 [ 53.554449][ T5413] generic_buffers_fsync_noflush+0xd9/0x120 [ 53.560330][ T5413] ext4_sync_file+0x1ab/0x690 [ 53.564993][ T5413] vfs_fsync_range+0x10d/0x130 [ 53.569746][ T5413] ext4_buffered_write_iter+0x34f/0x3c0 [ 53.575282][ T5413] ext4_file_write_iter+0x387/0xf60 [ 53.580464][ T5413] iter_file_splice_write+0x666/0xa60 [ 53.585822][ T5413] direct_splice_actor+0x156/0x2a0 [ 53.590929][ T5413] splice_direct_to_actor+0x312/0x680 [ 53.596296][ T5413] do_splice_direct+0xda/0x150 [ 53.601046][ T5413] do_sendfile+0x380/0x650 [ 53.605455][ T5413] __x64_sys_sendfile64+0x105/0x150 [ 53.610643][ T5413] x64_sys_call+0x2bb4/0x3000 [ 53.615306][ T5413] do_syscall_64+0xd2/0x200 [ 53.619796][ T5413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.625678][ T5413] [ 53.627981][ T5413] value changed: 0x0a000021 -> 0x04000021 [ 53.633677][ T5413] [ 53.635979][ T5413] Reported by Kernel Concurrency Sanitizer on: [ 53.642114][ T5413] CPU: 0 UID: 0 PID: 5413 Comm: syz.1.668 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 53.653294][ T5413] Tainted: [W]=WARN [ 53.657080][ T5413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 53.667117][ T5413] ================================================================== [ 53.828027][ T5402] ================================================================== [ 53.836116][ T5402] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / copy_folio_from_iter_atomic [ 53.845557][ T5402] [ 53.847860][ T5402] read to 0xffff88812c1ec000 of 1024 bytes by task 4274 on cpu 1: [ 53.855650][ T5402] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 53.861523][ T5402] generic_perform_write+0x2c2/0x490 [ 53.866785][ T5402] shmem_file_write_iter+0xc5/0xf0 [ 53.871880][ T5402] lo_rw_aio+0x6a0/0x760 [ 53.876116][ T5402] loop_process_work+0x52d/0xa60 [ 53.881032][ T5402] loop_workfn+0x31/0x40 [ 53.885253][ T5402] process_scheduled_works+0x4ce/0x9d0 [ 53.890698][ T5402] worker_thread+0x582/0x770 [ 53.895265][ T5402] kthread+0x489/0x510 [ 53.899311][ T5402] ret_from_fork+0x122/0x1b0 [ 53.903881][ T5402] ret_from_fork_asm+0x1a/0x30 [ 53.908622][ T5402] [ 53.910924][ T5402] write to 0xffff88812c1ec290 of 9 bytes by task 5402 on cpu 0: [ 53.918523][ T5402] copy_folio_from_iter_atomic+0x7fc/0x11b0 [ 53.924392][ T5402] generic_perform_write+0x2c2/0x490 [ 53.929655][ T5402] ext4_buffered_write_iter+0x1ee/0x3c0 [ 53.935180][ T5402] ext4_file_write_iter+0x387/0xf60 [ 53.940353][ T5402] iter_file_splice_write+0x666/0xa60 [ 53.945705][ T5402] direct_splice_actor+0x156/0x2a0 [ 53.950814][ T5402] splice_direct_to_actor+0x312/0x680 [ 53.956196][ T5402] do_splice_direct+0xda/0x150 [ 53.960968][ T5402] do_sendfile+0x380/0x650 [ 53.965396][ T5402] __x64_sys_sendfile64+0x105/0x150 [ 53.970607][ T5402] x64_sys_call+0x2bb4/0x3000 [ 53.975291][ T5402] do_syscall_64+0xd2/0x200 [ 53.979796][ T5402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 53.985693][ T5402] [ 53.988008][ T5402] Reported by Kernel Concurrency Sanitizer on: [ 53.994152][ T5402] CPU: 0 UID: 0 PID: 5402 Comm: syz.1.668 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 54.005357][ T5402] Tainted: [W]=WARN [ 54.009158][ T5402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 54.019207][ T5402] ================================================================== [ 54.037318][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.577644][ T1897] dummy0: left promiscuous mode