last executing test programs: 1.464285622s ago: executing program 4 (id=357): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000005c0)={0x53, 0x20, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000240), 0x0, 0x0, 0x14, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = epoll_create(0x8e81) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000b80)={0x8000200a}) 942.825312ms ago: executing program 3 (id=372): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0xb, 0x9}, 0x0, 0x10000, 0x8, 0x1, 0x4, 0x20005, 0x400, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 778.677155ms ago: executing program 3 (id=374): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendfile(r2, r0, 0x0, 0x7ffff088) 756.349725ms ago: executing program 3 (id=375): socket$inet(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0xfffffe23, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 740.766826ms ago: executing program 1 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x800007, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x4000000, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x1, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 730.432516ms ago: executing program 0 (id=377): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="2800ffff0000", 0x6, 0x0, 0x0, 0x2}]) 674.122977ms ago: executing program 2 (id=378): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000380)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0) recvfrom(r1, 0x0, 0x4000, 0x40, 0x0, 0x0) 570.155389ms ago: executing program 1 (id=379): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000240)=ANY=[@ANYBLOB="646f74732c666d61736b3d303030303030303030303030303030303030303636d811bb476973636172642c7569643d19ac2bf5a9b087c510a0070317a048b1228caefb32679bb42d96ddff356fff472a16b193178aabd7bef64099ec8948f4716285a3edb8124a", @ANYRESHEX=0xee00, @ANYBLOB=',dots,nodots,gid=', @ANYRESHEX=0xee00, @ANYBLOB=',nodots,nodots,dots,nodots,nodots,nodots,dmask=00000000000000000000010,nodots,nfs,nodots,showexec,flush,umask=00000000000000000000007,nodots,dots,\x00'], 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000700000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x3fffffff}}, 0x0) 564.001449ms ago: executing program 4 (id=380): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r2, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 559.526109ms ago: executing program 2 (id=381): socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x275, &(0x7f0000000980)="$eJzs3T1onHUcB/Dfcy8mMUGiLoL4AiKigRAHQXDRRSEgIYgIKkREnCQRYoJbzsnFwc5tydQllG5NO5YuoUuha9pmSJcODR0aOrTDleeeu3BJLiS515Ln84HL8/zv/m8H9/0/d8PzTwC5NR4RX0ZEMSImIqIcEUlzhfezx3i9uDqyMRdRrX73OKnVy8qZRrvRiKhExOcRpcZry+s/bT/d/Oaj/5bKH15a/3GkX+8vYnjvbGd769vdizP/Xp3+dLlQf26sfmx+H92UtHiulES80YvBXhJJadAz4CRm/75yN839mxHxQS3/5SjUI/v/4is3y/HJhaPannt05+1+zhXovmq1nF4DK1Ugdwq178BJYTIisvNCYXIy+w5/r5jEHwuLf038vrA0/1vL5aPY9wUL6ESS/jZPf4B/fX3o2uiB/D8sZvk/kc96PFOgJ8Yitr6fXbufnu+6ikM+vJMd0vxP/LLyccg/5I78Q37JP+SX/MMZ0GZ25R/yqzn/Q4OeDNBXrv9whpUbJ5WWL8s/5Jf8Q34dyH8f78cFBq05/wBAvlSHBn0HMjAog15/AAAAAAAAAAAAAAAAAACAw1ZHNuYaj36Neet8xM5XEVHaP362H3mx9v+II4Zrf199kqTV9iRZs478/F6HHXTocpfvvp455Uburz3o7vindfvd3vT7z/7ikXvbrcxHVNLKU6XS4c9/Uv/8HevI/l8/pmH515MN0C3JgfIXP3Sv75U22jxf69747ZjejLiRrj9Trda/QrxVO7Zef8aat1hu05/POuwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvnkRAAD//0x2aeA=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', '', [{0x20, '}#^\\,$'}], 0xa, "939f9672"}, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) 495.742241ms ago: executing program 3 (id=382): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xfff2}, {0xd, 0xffe0}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 451.076761ms ago: executing program 0 (id=383): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000100000000000000000a"], 0xc4}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd27, 0x0, {{@in=@multicast2, @in6=@empty, 0x1fe, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x8, 0x0, 0x2, 0x40}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 430.409892ms ago: executing program 0 (id=384): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c2000bbcfccd19c0fb8085670000"], 0x0) 426.792762ms ago: executing program 1 (id=385): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) readahead(0xffffffffffffffff, 0x2, 0xd737) 369.492003ms ago: executing program 2 (id=386): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 357.945484ms ago: executing program 1 (id=387): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x3, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) 328.461244ms ago: executing program 0 (id=388): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001140)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@rand_addr=0x64010100, 0x4e27, 0x1, 0x4e20, 0x81, 0x2, 0x0, 0x0, 0x3c}, {0xa, 0x9, 0x7, 0x3, 0xfff, 0x4, 0xa4, 0x4}, {0x3ff, 0x2, 0xcc1, 0x5a83}, 0xc0, 0xfffffffe, 0x0, 0x0, 0x1, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d2, 0x2b}, 0x9, @in=@rand_addr=0x64010102, 0x3506, 0x4, 0x2, 0x7, 0x0, 0x7, 0x1}}, 0xe8) 307.223474ms ago: executing program 0 (id=389): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xffa8) 278.893635ms ago: executing program 4 (id=390): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r0, 0x0, 0xfffffffffffffffc}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, r2, 0x4, 0x0, @void}, 0x10) 273.369425ms ago: executing program 2 (id=391): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x4, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r1}, 0x18) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 252.668725ms ago: executing program 0 (id=392): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000440)='./file2\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$eJzs3N1qHFUcAPD/TPNh0+pGrV5owUgRgx/5aEpssKCCl15ZX2BN0hLdNrZZwZZcKIh9APUBxMv6CF6Id4LgTfHaO6VQJMm1rMxmdjNudmO+ltHu7wcHzpnZ4Zz/zOyek3MOCWBgTUTEpxExEhEfREQlP57kKd7cTtnntjbWF7OURKNx+c+keX5zY30xCtdkTuWFyTQi/TyJZ7vUu3br9ofVWm35Zl6erl/7aHrt1u1XV65Vry5fXb4+N7OwMDN3cX5h/thi/T3u/Hbp3tuVL38+9+uP7787n7X3dH6uGMdxmYiJ9j3pNHXclZXskUI+GSqxIRxIGhEnImKo+f2vxInYeXiV+L5SauMAgL5oNN7oKAMAD79Enw8AA6b1d//mxvpiK5UxD1GWB29tL15t5mubW+34h9orIcMd61vHaSIivvv6teeyFH1ahwQAKPohG/9c7Db+S+Ns4XMnI2Is39t1OiIejYjHCvvFDmuio7x7/JPeP2IVe8rGf5cKe9u2CvHnxk/kpSzm8RhOrqzUlmfy+CdjeDQrz+5Rx9nLT//V61xx/JelrP7WWDBvx/2h0X9es1StV48Sc9GDzyKeGeoWf9Ie/ybNuA/v9Rt3n+p17t/j76/GNxEvdn3+Ozv3kr33J04334fp1lux252XXrjRq/6y48+e/9je8Y8nxf2aawev46cLK7/0OnfY938kea+ZH8mPfVKt12/ORowk7+w+fn7n2la59fks/slz3b//Z2LnTjweEU9ExJMRzeM9X+guXql9+/zh4++vLP6lAz3/g2fGvrh7r1f9+3v+F5q5yfzIfn7/9tvAo9w7AAAA+L9Im/O5STrVzqfp1NT2PO+ZGEtrq2v1l6+sfnx9aXvedzyG09ZMV6UwHzqbzxG2yuc7ynP5HMpXoyeb5anF1dpS2cEDwIA61aP/z/wxWnbrAIC+6dfmdgDgv0v/DwCDR/8PAINH/w8Ag0f/DwCDR/8PAAPlKP/XT0ZG5mHNlP3LBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQrr8DAAD//3JA1T8=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7a680000) 242.115845ms ago: executing program 4 (id=393): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mq_unlink(0x0) 228.546495ms ago: executing program 2 (id=394): writev(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x5e, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 221.375336ms ago: executing program 4 (id=395): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r0, 0xffffffffffffffff, 0x0) 201.318596ms ago: executing program 1 (id=396): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300", 0xffffffff}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 171.939727ms ago: executing program 2 (id=397): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="610302100206039040560b68f43397c06802"], 0x12) 158.133147ms ago: executing program 1 (id=398): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xb2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380100001"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 141.281317ms ago: executing program 3 (id=399): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_access(r1, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 124.107998ms ago: executing program 3 (id=400): r0 = socket(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000280)=0x497, 0x4) epoll_create1(0x0) r1 = io_uring_setup(0x6001, &(0x7f0000000080)={0x0, 0xeec2, 0x800, 0x2, 0x116}) close_range(r1, r1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0x0, 0xfffffffffffffff8, 0x0, 0x1, 0x10}, 0x0, &(0x7f0000000240)={0x1f, 0xc, 0x715, 0x8000000000000000, 0x0, 0x80000000000000, 0x800, 0x20000}, 0x0, 0x0) 0s ago: executing program 4 (id=401): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@debug}, {@norecovery}]}, 0x9, 0x458, &(0x7f0000002240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000008c0)="3bf58d7d45d32cfe1da7c797b82fee444b42785c24a868a4046cf670ba8f376c429a424fcc374c08887ba2bb530d843b61bf79a3879fa0", 0x37) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.165' (ED25519) to the list of known hosts. [ 34.558338][ T29] audit: type=1400 audit(1757448532.691:62): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 34.559490][ T3294] cgroup: Unknown subsys name 'net' [ 34.581269][ T29] audit: type=1400 audit(1757448532.691:63): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.608654][ T29] audit: type=1400 audit(1757448532.721:64): avc: denied { unmount } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 34.724658][ T3294] cgroup: Unknown subsys name 'cpuset' [ 34.731091][ T3294] cgroup: Unknown subsys name 'rlimit' [ 34.902415][ T29] audit: type=1400 audit(1757448533.031:65): avc: denied { setattr } for pid=3294 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 34.925723][ T29] audit: type=1400 audit(1757448533.041:66): avc: denied { create } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.946293][ T29] audit: type=1400 audit(1757448533.041:67): avc: denied { write } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.966686][ T29] audit: type=1400 audit(1757448533.041:68): avc: denied { read } for pid=3294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 34.986978][ T29] audit: type=1400 audit(1757448533.051:69): avc: denied { mounton } for pid=3294 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 34.995974][ T3298] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 35.011836][ T29] audit: type=1400 audit(1757448533.051:70): avc: denied { mount } for pid=3294 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 35.043852][ T29] audit: type=1400 audit(1757448533.161:71): avc: denied { relabelto } for pid=3298 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 35.071614][ T3294] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.707128][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 36.790912][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 36.830887][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.838053][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.845564][ T3304] bridge_slave_0: entered allmulticast mode [ 36.851985][ T3304] bridge_slave_0: entered promiscuous mode [ 36.860606][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.867853][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.875252][ T3304] bridge_slave_1: entered allmulticast mode [ 36.881945][ T3304] bridge_slave_1: entered promiscuous mode [ 36.910573][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.934631][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.950729][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 36.964342][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.971472][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.978663][ T3305] bridge_slave_0: entered allmulticast mode [ 36.985506][ T3305] bridge_slave_0: entered promiscuous mode [ 37.002176][ T3304] team0: Port device team_slave_0 added [ 37.018150][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.025361][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.032536][ T3305] bridge_slave_1: entered allmulticast mode [ 37.039171][ T3305] bridge_slave_1: entered promiscuous mode [ 37.053749][ T3304] team0: Port device team_slave_1 added [ 37.083751][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.101400][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.108408][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.134357][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.151140][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.161731][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 37.171223][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.178226][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.204180][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.235021][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 37.258208][ T3305] team0: Port device team_slave_0 added [ 37.265814][ T3305] team0: Port device team_slave_1 added [ 37.277237][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.284365][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.291499][ T3314] bridge_slave_0: entered allmulticast mode [ 37.298236][ T3314] bridge_slave_0: entered promiscuous mode [ 37.304900][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.312034][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.319248][ T3314] bridge_slave_1: entered allmulticast mode [ 37.325712][ T3314] bridge_slave_1: entered promiscuous mode [ 37.378396][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.394356][ T3304] hsr_slave_0: entered promiscuous mode [ 37.400384][ T3304] hsr_slave_1: entered promiscuous mode [ 37.408736][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.415735][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.441803][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.455978][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.475782][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.482804][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.509086][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.538688][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.545802][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.552987][ T3309] bridge_slave_0: entered allmulticast mode [ 37.559500][ T3309] bridge_slave_0: entered promiscuous mode [ 37.577040][ T3314] team0: Port device team_slave_0 added [ 37.589524][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.596759][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.604114][ T3309] bridge_slave_1: entered allmulticast mode [ 37.610456][ T3309] bridge_slave_1: entered promiscuous mode [ 37.616902][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.624015][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.631189][ T3311] bridge_slave_0: entered allmulticast mode [ 37.637810][ T3311] bridge_slave_0: entered promiscuous mode [ 37.644648][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.651729][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.658883][ T3311] bridge_slave_1: entered allmulticast mode [ 37.665448][ T3311] bridge_slave_1: entered promiscuous mode [ 37.678466][ T3314] team0: Port device team_slave_1 added [ 37.691354][ T3305] hsr_slave_0: entered promiscuous mode [ 37.697442][ T3305] hsr_slave_1: entered promiscuous mode [ 37.703311][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 37.709080][ T3305] Cannot create hsr debugfs directory [ 37.756842][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.768571][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.775570][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.801599][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.818773][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.833493][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.845387][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.852347][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.878436][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.890197][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.942319][ T3309] team0: Port device team_slave_0 added [ 37.948641][ T3311] team0: Port device team_slave_0 added [ 37.955325][ T3311] team0: Port device team_slave_1 added [ 37.975790][ T3309] team0: Port device team_slave_1 added [ 38.023018][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.030027][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.055937][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.067168][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.074191][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.100200][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.111196][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.118203][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.144133][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.155503][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.162464][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.188401][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.201294][ T3314] hsr_slave_0: entered promiscuous mode [ 38.207378][ T3314] hsr_slave_1: entered promiscuous mode [ 38.213313][ T3314] debugfs: 'hsr0' already exists in 'hsr' [ 38.219096][ T3314] Cannot create hsr debugfs directory [ 38.248719][ T3311] hsr_slave_0: entered promiscuous mode [ 38.255060][ T3311] hsr_slave_1: entered promiscuous mode [ 38.260789][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 38.266566][ T3311] Cannot create hsr debugfs directory [ 38.314988][ T3309] hsr_slave_0: entered promiscuous mode [ 38.321060][ T3309] hsr_slave_1: entered promiscuous mode [ 38.327083][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 38.332807][ T3309] Cannot create hsr debugfs directory [ 38.363088][ T3304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.391623][ T3304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.413380][ T3304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.434202][ T3304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.490743][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.504029][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.516350][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.527234][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.548867][ T3314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 38.557709][ T3314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 38.574521][ T3314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 38.584490][ T3314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 38.617908][ T3311] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 38.627772][ T3311] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 38.637523][ T3311] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 38.646620][ T3311] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 38.686604][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.712894][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.720644][ T3309] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.736393][ T3309] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.749885][ T3309] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.760866][ T1597] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.767976][ T1597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.786458][ T3309] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.797627][ T1597] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.804735][ T1597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.827836][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.865584][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.880048][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.901192][ T1597] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.908335][ T1597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.918799][ T1597] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.925972][ T1597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.940088][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.949364][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.970492][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.981407][ T311] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.988497][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.997444][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.004540][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.015574][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.031067][ T1597] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.038208][ T1597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.047141][ T1597] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.054248][ T1597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.079891][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.093672][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.104172][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.137372][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.162485][ T3304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 39.172977][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.198111][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.218203][ T1597] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.225314][ T1597] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.246266][ T1597] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.253442][ T1597] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.309874][ T3305] veth0_vlan: entered promiscuous mode [ 39.317450][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 39.361266][ T3305] veth1_vlan: entered promiscuous mode [ 39.389762][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.401788][ T3305] veth0_macvtap: entered promiscuous mode [ 39.427162][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.436610][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.446270][ T3305] veth1_macvtap: entered promiscuous mode [ 39.476484][ T3311] veth0_vlan: entered promiscuous mode [ 39.491477][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.518269][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.546890][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.556911][ T3311] veth1_vlan: entered promiscuous mode [ 39.565749][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.581753][ T3311] veth0_macvtap: entered promiscuous mode [ 39.596270][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.612391][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.632713][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 39.632730][ T29] audit: type=1400 audit(1757448537.761:81): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.OlbTiu/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 39.634995][ T3311] veth1_macvtap: entered promiscuous mode [ 39.638827][ T29] audit: type=1400 audit(1757448537.761:82): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 39.682192][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.691288][ T29] audit: type=1400 audit(1757448537.761:83): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.OlbTiu/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 39.723110][ T29] audit: type=1400 audit(1757448537.761:84): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 39.745004][ T29] audit: type=1400 audit(1757448537.811:85): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.OlbTiu/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 39.752212][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.771685][ T29] audit: type=1400 audit(1757448537.811:86): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/root/syzkaller.OlbTiu/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3778 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 39.799701][ T3314] veth0_vlan: entered promiscuous mode [ 39.806408][ T29] audit: type=1400 audit(1757448537.811:87): avc: denied { unmount } for pid=3305 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 39.827518][ T3309] veth0_vlan: entered promiscuous mode [ 39.848207][ T3309] veth1_vlan: entered promiscuous mode [ 39.853747][ T29] audit: type=1400 audit(1757448537.971:88): avc: denied { mounton } for pid=3305 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.870013][ T3314] veth1_vlan: entered promiscuous mode [ 39.876681][ T29] audit: type=1400 audit(1757448537.971:89): avc: denied { mount } for pid=3305 comm="syz-executor" name="/" dev="gadgetfs" ino=3810 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 39.894877][ T3314] veth0_macvtap: entered promiscuous mode [ 39.913386][ T3305] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 39.917646][ T3304] veth0_vlan: entered promiscuous mode [ 39.944779][ T3314] veth1_macvtap: entered promiscuous mode [ 39.953071][ T29] audit: type=1400 audit(1757448538.081:90): avc: denied { read write } for pid=3305 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 39.977622][ T3309] veth0_macvtap: entered promiscuous mode [ 39.993022][ T3304] veth1_vlan: entered promiscuous mode [ 40.000245][ T3309] veth1_macvtap: entered promiscuous mode [ 40.011443][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.012916][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.022496][ T37] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.048978][ T37] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.072299][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.082229][ T37] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.094999][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.104334][ T3475] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 40.124607][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.138029][ T3304] veth0_macvtap: entered promiscuous mode [ 40.151665][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.162188][ T3304] veth1_macvtap: entered promiscuous mode [ 40.175277][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.201367][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.220506][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.235355][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.259352][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.269576][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.287958][ T383] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.313753][ T383] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.330684][ T383] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.340563][ T3493] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 40.351930][ T383] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.390810][ T383] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.402839][ T383] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.433215][ T383] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.503560][ T3509] process 'syz.2.13' launched './file1' with NULL argv: empty string added [ 40.570778][ T3502] loop4: detected capacity change from 0 to 8192 [ 40.883080][ C0] hrtimer: interrupt took 40654 ns [ 41.129297][ T3549] loop1: detected capacity change from 0 to 512 [ 41.159882][ T3549] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 41.173099][ T3549] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 41.237654][ T3549] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 41.317541][ T3549] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #11: comm syz.1.31: corrupted inode contents [ 41.358581][ T3549] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #11: comm syz.1.31: mark_inode_dirty error [ 41.371474][ T3549] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.31: invalid indirect mapped block 1 (level 1) [ 41.397919][ T3549] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #11: comm syz.1.31: corrupted inode contents [ 41.414034][ T3561] loop0: detected capacity change from 0 to 128 [ 41.435504][ T3549] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 41.446737][ T3549] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #11: comm syz.1.31: corrupted inode contents [ 41.504643][ T3549] EXT4-fs error (device loop1): ext4_truncate:4666: inode #11: comm syz.1.31: mark_inode_dirty error [ 41.530103][ T3549] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 41.551397][ T3561] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.568806][ T3561] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.572637][ T3549] EXT4-fs (loop1): 1 truncate cleaned up [ 41.607552][ T3549] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.677738][ T3309] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.724410][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.062181][ T3607] capability: warning: `syz.3.55' uses deprecated v2 capabilities in a way that may be insecure [ 42.201234][ T3615] infiniband syz!: set active [ 42.206025][ T3615] infiniband syz!: added team_slave_0 [ 42.220143][ T3615] RDS/IB: syz!: added [ 42.228833][ T3615] smc: adding ib device syz! with port count 1 [ 42.239328][ T3615] smc: ib device syz! port 1 has pnetid [ 42.412316][ T3635] netlink: 'syz.2.63': attribute type 3 has an invalid length. [ 42.473387][ T3640] netlink: 24 bytes leftover after parsing attributes in process `syz.0.65'. [ 42.523562][ T3615] syz.3.58 (3615) used greatest stack depth: 10616 bytes left [ 42.534959][ T3646] loop0: detected capacity change from 0 to 1024 [ 42.546154][ T3646] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 42.557487][ T3646] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 42.566486][ T3646] EXT4-fs (loop0): orphan cleanup on readonly fs [ 42.573009][ T3646] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.67: Freeing blocks not in datazone - block = 0, count = 4096 [ 42.588539][ T3646] EXT4-fs (loop0): 1 orphan inode deleted [ 42.594812][ T3646] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 42.621132][ T3309] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.786326][ T3668] hsr0: entered allmulticast mode [ 42.791466][ T3668] hsr_slave_0: entered allmulticast mode [ 42.797367][ T3668] hsr_slave_1: entered allmulticast mode [ 42.811526][ T3668] hsr_slave_0: left promiscuous mode [ 42.817903][ T3668] hsr_slave_1: left promiscuous mode [ 42.826259][ T3668] hsr0 (unregistering): left allmulticast mode [ 42.860287][ T3674] syz.4.77 uses obsolete (PF_INET,SOCK_PACKET) [ 43.043035][ T3699] loop1: detected capacity change from 0 to 128 [ 43.051918][ T3698] IPv6: Can't replace route, no match found [ 43.069987][ T3699] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 43.092211][ T3699] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 43.156719][ T3305] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 43.231382][ T3715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.93'. [ 43.371694][ T3731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 43.480370][ T3749] unsupported nla_type 52263 [ 43.693660][ T3769] SELinux: failed to load policy [ 43.821852][ T3790] sd 0:0:1:0: device reset [ 43.837124][ T3788] : renamed from veth0_to_bond (while UP) [ 43.887263][ T3797] loop4: detected capacity change from 0 to 512 [ 43.938057][ T3797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.971701][ T3797] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.032194][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.056642][ T3817] ALSA: seq fatal error: cannot create timer (-22) [ 44.139949][ T3827] loop1: detected capacity change from 0 to 512 [ 44.166279][ T3827] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.201942][ T3827] ext4 filesystem being mounted at /29/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.309470][ T3842] netlink: 'syz.3.154': attribute type 13 has an invalid length. [ 44.322008][ T3842] gretap0: refused to change device tx_queue_len [ 44.331584][ T3842] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 44.400299][ T3845] loop3: detected capacity change from 0 to 512 [ 44.414607][ T3845] ======================================================= [ 44.414607][ T3845] WARNING: The mand mount option has been deprecated and [ 44.414607][ T3845] and is ignored by this kernel. Remove the mand [ 44.414607][ T3845] option from the mount to silence this warning. [ 44.414607][ T3845] ======================================================= [ 44.454754][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.465886][ T3845] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 44.487409][ T3845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.533915][ T3845] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.615686][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.636491][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 44.636508][ T29] audit: type=1326 audit(1757448542.771:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd697b2ebe9 code=0x7ffc0000 [ 44.694240][ T29] audit: type=1326 audit(1757448542.781:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312727ebe9 code=0x7ffc0000 [ 44.717588][ T29] audit: type=1326 audit(1757448542.781:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312727ebe9 code=0x7ffc0000 [ 44.741213][ T29] audit: type=1326 audit(1757448542.781:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f312727ebe9 code=0x7ffc0000 [ 44.764686][ T29] audit: type=1326 audit(1757448542.781:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312727ebe9 code=0x7ffc0000 [ 44.787944][ T29] audit: type=1326 audit(1757448542.781:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3859 comm="syz.1.162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312727ebe9 code=0x7ffc0000 [ 44.811286][ T29] audit: type=1326 audit(1757448542.801:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7fd697b2ebe9 code=0x7ffc0000 [ 44.834488][ T29] audit: type=1326 audit(1757448542.801:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd697b2ebe9 code=0x7ffc0000 [ 44.857955][ T29] audit: type=1326 audit(1757448542.801:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7fd697b2ebe9 code=0x7ffc0000 [ 44.881561][ T29] audit: type=1326 audit(1757448542.801:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3857 comm="syz.0.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd697b2ebe9 code=0x7ffc0000 [ 44.927684][ T3864] binfmt_misc: register: failed to install interpreter file ./file2 [ 45.065342][ T36] IPVS: starting estimator thread 0... [ 45.074975][ T3883] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 45.082350][ C1] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 45.153895][ T3885] IPVS: using max 1872 ests per chain, 93600 per kthread [ 45.426268][ T3925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 45.497889][ T3925] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 45.513111][ T3925] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 45.622386][ T3947] loop3: detected capacity change from 0 to 1024 [ 45.661925][ T3947] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.758621][ T3947] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.198: Allocating blocks 449-513 which overlap fs metadata [ 45.806674][ T3945] EXT4-fs (loop3): pa ffff888106ea60e0: logic 48, phys. 177, len 21 [ 45.815110][ T3945] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 45.836664][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.857144][ T3969] loop2: detected capacity change from 0 to 512 [ 45.883641][ T3969] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.912611][ T3969] ext4 filesystem being mounted at /39/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.957680][ T3982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.212'. [ 45.978561][ T3982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.212'. [ 46.029610][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.055967][ T3990] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 46.069199][ T3993] SELinux: failed to load policy [ 46.162590][ T4006] SELinux: policydb version 6277 does not match my version range 15-35 [ 46.184416][ T4006] SELinux: failed to load policy [ 46.336018][ T4025] loop2: detected capacity change from 0 to 512 [ 46.435975][ T4037] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 46.475722][ T4037] netlink: 'syz.1.238': attribute type 12 has an invalid length. [ 46.482258][ T4041] loop3: detected capacity change from 0 to 512 [ 46.483519][ T4037] netlink: 'syz.1.238': attribute type 29 has an invalid length. [ 46.497764][ T4037] netlink: 148 bytes leftover after parsing attributes in process `syz.1.238'. [ 46.506912][ T4037] netlink: 'syz.1.238': attribute type 1 has an invalid length. [ 46.514703][ T4037] netlink: 'syz.1.238': attribute type 2 has an invalid length. [ 46.522436][ T4037] netlink: 39 bytes leftover after parsing attributes in process `syz.1.238'. [ 46.539354][ T4037] Zero length message leads to an empty skb [ 46.543526][ T4041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.560445][ T4041] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 46.600215][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.879590][ T4065] syzkaller1: entered promiscuous mode [ 46.885754][ T4065] syzkaller1: entered allmulticast mode [ 47.044081][ T4069] hub 9-0:1.0: USB hub found [ 47.048841][ T4069] hub 9-0:1.0: 8 ports detected [ 47.140768][ T4073] SELinux: failed to load policy [ 47.508996][ T4093] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 47.606509][ T4107] loop2: detected capacity change from 0 to 512 [ 47.617080][ T4107] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 47.626609][ T4107] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 47.650467][ T2994] udevd[2994]: worker [3693] terminated by signal 33 (Unknown signal 33) [ 47.667350][ T2994] udevd[2994]: worker [3693] failed while handling '/devices/virtual/block/loop2' [ 47.710036][ T2994] udevd[2994]: worker [3694] terminated by signal 33 (Unknown signal 33) [ 47.729260][ T2994] udevd[2994]: worker [3694] failed while handling '/devices/virtual/block/loop4' [ 47.747114][ T2994] udevd[2994]: worker [3543] terminated by signal 33 (Unknown signal 33) [ 47.755783][ T2994] udevd[2994]: worker [3543] failed while handling '/devices/virtual/block/loop1' [ 47.796385][ T4120] netlink: 16 bytes leftover after parsing attributes in process `syz.4.275'. [ 47.933911][ T4145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 47.942788][ T4145] netlink: 348 bytes leftover after parsing attributes in process `syz.2.285'. [ 47.951829][ T4145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 47.960718][ T4145] netlink: 348 bytes leftover after parsing attributes in process `syz.2.285'. [ 47.972369][ T4145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.285'. [ 48.235284][ T4189] macvtap0: refused to change device tx_queue_len [ 48.324728][ T4194] netlink: 36 bytes leftover after parsing attributes in process `syz.4.307'. [ 48.462433][ T4200] ALSA: seq fatal error: cannot create timer (-19) [ 48.737702][ T4234] openvswitch: netlink: Message has 6 unknown bytes. [ 49.217635][ T4289] vxcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 49.325381][ T4302] netlink: 12 bytes leftover after parsing attributes in process `syz.3.356'. [ 49.380961][ T4310] SELinux: policydb version -821099834 does not match my version range 15-35 [ 49.399075][ T4310] SELinux: failed to load policy [ 49.731876][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 49.731893][ T29] audit: type=1400 audit(1757448547.861:555): avc: denied { getopt } for pid=4362 comm="syz.0.368" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 49.873347][ T29] audit: type=1400 audit(1757448548.001:556): avc: denied { setopt } for pid=4377 comm="syz.0.371" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 49.897588][ T4378] pim6reg: entered allmulticast mode [ 49.916997][ T4378] pim6reg: left allmulticast mode [ 49.937195][ T29] audit: type=1400 audit(1757448548.071:557): avc: denied { read } for pid=4383 comm="syz.1.373" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 49.961548][ T29] audit: type=1400 audit(1757448548.071:558): avc: denied { open } for pid=4383 comm="syz.1.373" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 49.986720][ T29] audit: type=1400 audit(1757448548.071:559): avc: denied { write } for pid=4379 comm="syz.3.372" path="socket:[7396]" dev="sockfs" ino=7396 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.098635][ T4399] netlink: 28 bytes leftover after parsing attributes in process `syz.3.375'. [ 50.107773][ T4399] netlink: 196 bytes leftover after parsing attributes in process `syz.3.375'. [ 50.162686][ T29] audit: type=1400 audit(1757448548.291:560): avc: denied { write } for pid=4400 comm="syz.0.377" path="socket:[7004]" dev="sockfs" ino=7004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.186224][ T29] audit: type=1400 audit(1757448548.291:561): avc: denied { name_bind } for pid=4417 comm="syz.2.378" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 50.257076][ T4436] loop2: detected capacity change from 0 to 128 [ 50.266749][ T4437] loop1: detected capacity change from 0 to 256 [ 50.276334][ T4437] msdos: Bad value for 'fmask' [ 50.288051][ T29] audit: type=1326 audit(1757448548.391:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f312727ebe9 code=0x7ffc0000 [ 50.311548][ T29] audit: type=1326 audit(1757448548.401:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f312727ebe9 code=0x7ffc0000 [ 50.334983][ T29] audit: type=1326 audit(1757448548.401:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4434 comm="syz.1.379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f312727ec23 code=0x7ffc0000 [ 50.353118][ T4436] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 50.383188][ T4436] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 50.384992][ T4447] netlink: 'syz.3.382': attribute type 13 has an invalid length. [ 50.423496][ T4447] netlink: 'syz.3.382': attribute type 17 has an invalid length. [ 50.456893][ T4447] gretap0: refused to change device tx_queue_len [ 50.463310][ T4447] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 50.465294][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 50.540037][ T4458] SELinux: failed to load policy [ 50.621663][ T3416] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 50.639625][ T3416] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.707382][ T51] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 50.816180][ T4491] loop4: detected capacity change from 0 to 512 [ 50.822924][ T4491] EXT4-fs: Ignoring removed mblk_io_submit option [ 50.829871][ T4491] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 50.840703][ T4491] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 50.848886][ T4491] System zones: 1-12 [ 50.853229][ T4491] EXT4-fs (loop4): 1 truncate cleaned up [ 50.859643][ T4491] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 51.207460][ T4493] ================================================================== [ 51.215621][ T4493] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 51.223657][ T4493] [ 51.226148][ T4493] write to 0xffff88811a499c9c of 4 bytes by task 4491 on cpu 0: [ 51.233832][ T4493] xas_set_mark+0x12b/0x140 [ 51.238422][ T4493] tag_pages_for_writeback+0xc2/0x290 [ 51.243841][ T4493] ext4_do_writepages+0x6b2/0x2750 [ 51.249000][ T4493] ext4_writepages+0x176/0x300 [ 51.253790][ T4493] do_writepages+0x1c6/0x310 [ 51.258425][ T4493] filemap_write_and_wait_range+0x144/0x340 [ 51.264379][ T4493] filemap_invalidate_pages+0xa4/0x1a0 [ 51.269874][ T4493] kiocb_invalidate_pages+0x6e/0x80 [ 51.275098][ T4493] __iomap_dio_rw+0x5d4/0x1250 [ 51.279886][ T4493] iomap_dio_rw+0x40/0x90 [ 51.284244][ T4493] ext4_file_write_iter+0xad9/0xf00 [ 51.289657][ T4493] iter_file_splice_write+0x666/0xa60 [ 51.295054][ T4493] direct_splice_actor+0x156/0x2a0 [ 51.300289][ T4493] splice_direct_to_actor+0x312/0x680 [ 51.305684][ T4493] do_splice_direct+0xda/0x150 [ 51.310480][ T4493] do_sendfile+0x380/0x650 [ 51.314941][ T4493] __x64_sys_sendfile64+0x105/0x150 [ 51.320180][ T4493] x64_sys_call+0x2bb0/0x2ff0 [ 51.324888][ T4493] do_syscall_64+0xd2/0x200 [ 51.329435][ T4493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.335368][ T4493] [ 51.337713][ T4493] read to 0xffff88811a499c9c of 4 bytes by task 4493 on cpu 1: [ 51.345274][ T4493] file_write_and_wait_range+0x10e/0x2c0 [ 51.350963][ T4493] generic_buffers_fsync_noflush+0x45/0x120 [ 51.356899][ T4493] ext4_sync_file+0x1ab/0x690 [ 51.361601][ T4493] vfs_fsync_range+0x10a/0x130 [ 51.366401][ T4493] ext4_buffered_write_iter+0x34f/0x3c0 [ 51.372086][ T4493] ext4_file_write_iter+0xdbf/0xf00 [ 51.377334][ T4493] iter_file_splice_write+0x666/0xa60 [ 51.382744][ T4493] direct_splice_actor+0x156/0x2a0 [ 51.387885][ T4493] splice_direct_to_actor+0x312/0x680 [ 51.393293][ T4493] do_splice_direct+0xda/0x150 [ 51.398088][ T4493] do_sendfile+0x380/0x650 [ 51.402546][ T4493] __x64_sys_sendfile64+0x105/0x150 [ 51.407819][ T4493] x64_sys_call+0x2bb0/0x2ff0 [ 51.412537][ T4493] do_syscall_64+0xd2/0x200 [ 51.417074][ T4493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 51.422999][ T4493] [ 51.425341][ T4493] value changed: 0x02000021 -> 0x04000021 [ 51.431164][ T4493] [ 51.433509][ T4493] Reported by Kernel Concurrency Sanitizer on: [ 51.439689][ T4493] CPU: 1 UID: 0 PID: 4493 Comm: syz.4.401 Not tainted syzkaller #0 PREEMPT(voluntary) [ 51.449440][ T4493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.459523][ T4493] ================================================================== [ 51.722975][ T4491] syz.4.401 (4491) used greatest stack depth: 9680 bytes left [ 51.741408][ T3304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.