last executing test programs: 1.531906989s ago: executing program 1 (id=196): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_page_alloc\x00', r1}, 0x10) io_setup(0xffff, &(0x7f0000001080)) 1.479623689s ago: executing program 1 (id=198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x7aaffc28465866a2, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000307000000000000000000000005"], 0x38}}, 0x40000) 1.42803591s ago: executing program 1 (id=201): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1d5) fallocate(r1, 0x1, 0x4, 0x3) sendfile(r1, r1, 0x0, 0xfffe80) 755.421224ms ago: executing program 4 (id=207): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="50000000270001"], 0x50}}, 0x0) 704.204675ms ago: executing program 3 (id=209): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x14ba82, 0x18) write$cgroup_int(r2, &(0x7f0000000000)=0xfe8e, 0x12) 669.515375ms ago: executing program 0 (id=210): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r1, 0x400, 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000040), 0x0, 0x0, 0x1) fremovexattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.redirect\x00') 645.469315ms ago: executing program 3 (id=211): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) signalfd(0xffffffffffffffff, &(0x7f00000001c0)={[0x1]}, 0x8) 637.707035ms ago: executing program 4 (id=214): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, @perf_bp={0x0}, 0x2402, 0x0, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlockall() bpf$PROG_LOAD(0x5, 0x0, 0x0) readahead(0xffffffffffffffff, 0xffffffffffffffff, 0x1) 604.742596ms ago: executing program 0 (id=215): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 603.600995ms ago: executing program 1 (id=216): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0, 0x0, 0x4}, 0x18) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000200)=ANY=[]) 464.176026ms ago: executing program 4 (id=217): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x40db, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu<=0||!') 463.636566ms ago: executing program 3 (id=218): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0xa}, 0x1c) close(r0) 461.017477ms ago: executing program 0 (id=229): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=<r2=>0x0) io_submit(r2, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000000)="96", 0xffffff20, 0x0, 0x0, 0x0, r1}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r0, 0x0, 0x0, 0xffffffffffffffff}]) 395.514677ms ago: executing program 3 (id=222): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x28011, r1, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000e47000/0x2000)=nil) 395.234927ms ago: executing program 4 (id=223): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) unshare(0x20400) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040003000c0001"], 0x38}}, 0xc000) 341.597578ms ago: executing program 0 (id=224): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x7a680000) 335.984077ms ago: executing program 3 (id=225): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1], 0x40}}, 0x0) r2 = syz_io_uring_setup(0x16e, &(0x7f0000000780)={0x0, 0x0, 0x10000}, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000001340)=<r4=>0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x1567, 0x0, 0x0, 0x0, 0x0) 309.297178ms ago: executing program 4 (id=226): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0xfffffffc, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0xfffffffe, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 295.267818ms ago: executing program 2 (id=227): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r1 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x0, 0x3, 0xbfdffffd}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xc12, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000001a80)=[{0x9, 0xc8, 0xd, 0xd2, @time={0x7, 0x1}, {0x9, 0xe}, {0x10, 0x8}, @note={0x7f, 0x2, 0x1, 0x6, 0x335cdaf3}}], 0x1c) 285.067328ms ago: executing program 1 (id=228): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 240.472048ms ago: executing program 4 (id=230): pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xbe, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000b00000000000119078000000000000000000004e20009c907801000000000000007b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af584cbf2649a50f2dbc43efa8698dfa871c51852e"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020019000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 240.053398ms ago: executing program 3 (id=231): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ppoll(&(0x7f0000000000)=[{r0}, {r2, 0x100}, {r2, 0x4000}], 0x3, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 239.606248ms ago: executing program 0 (id=232): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000500)="a0", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000940)='.', 0x1}], 0x1}}], 0x2, 0x240440c4) close(r1) 230.474438ms ago: executing program 1 (id=233): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZj06Y3ueqDXvB69V5Ji3Y3aWwbfKgVRJ8Kan2vMdmEkE02ZDdtE4qm+AEEERV80hdfBD+AIAVffBShoM+KiiLa6oMP2rns7iRN091k226zafb3g8mcc2Zm/+dsmNk5M4eZAAbWOxFxLSIep2l6PiLGsvJcNsV2a2qs9+jh3bnGlESa3vhnEklWtvNZSTY/k212KiK+9uWIbybPxq1tbi3PVirl9Sxfqq+slWqbWxeWVmYXy4vl1enpqcszV2YuzUz2pJ1nI+LqF//6g+/+7EtXf/WZ23+6+fdz32pUazRbvrcdzyl/0MJW0wvN72LvBusvGOw4yjdbmBlpt8bQMyX3XnGdAABor3GO/8GI+GREnI+xGDr4dBYAAAB4DaWfH43/JRFpe8MdygEAAIDXSK45BjbJFbOxAKORyxWLrTG8H47TuUq1Vv/0QnVjdb41VnY8CrmFpUp5MhsrPB6FpJGfaqaf5C/uy09HxJsR8f2xkWa+OFetzPf74gcAAAAMiDP7+v//GWv1/wEAAIATZrzfFQAAAABeOf1/AAAAOPn0/wEAAOBE+8r1640p3Xn/9fytzY3l6q0L8+XacnFlY644V11fKy5Wq4vNZ/atHPZ5lWp17bOxunGnVC/X6qXa5tbNlerGav3m0lOvwAYAAACO0Jsfv/+HJCK2PzfSnBqGu9u0y9WA4yq/m0qyeZvd+o9vtOZ/OaJKAUdiqN8VAPom3+8KAH1T6HcFgL5LDlnecfDOb7P5J3pbHwAAoPcmPtr5/n/uwC23D14MHHt2Yhhc7v/D4Gre/+92JK+TBThRCs4AYOC99P3/Q6Xpc1UIAADoudHmlOSK2eW90cjlisWIs83XAhSShaVKeTIi3oiI348VPtDITzW3TA7tMwAAAAAAAAAAAAAAAAAAAAAAAAAALWmaRAoAAACcaBG5vyW/bj3Lf2LsvdH91weGk/+ORfaK0Ns/vvHDO7P1+vpUo/xfu+X1H2XlF/txBQMAAAAGwnO9wH+nn77TjwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAXnr08O7cznSUcf/xhYgYbxc/H6ea81NRiIjT/04iv2e7JCKGehB/pPHnI+3iJ41q7YZsF3+kB/G37x0YP8azb2F//OGIONOD+DDI7jeOP9fa7X+5eKc5b7//5SOeyr+ozse/2D3+DXU4/pztMsZbD35R6hj/XsRb+fbHn534SYf473YZ/xtf39rqtCz9ScRE29+f5KlYpfrKWqm2uXVhaWV2sbxYXp2enro8c2Xm0sxkaWGpUs7+to3xvY/98vFB7T/dIf74Ie1/r8v2///BnYcfaiUL7eKfe7dN/N/8NFvj2fi57LfvU1m6sXxiJ73dSu/19s9/9/ZB7Z/v0P7D/v/numz/+a9+589drgoAHIHa5tbybKVSXj+xiUYv/RhUQ+IYJr7d0w9M0zRt7FMv8TlJHIevpZno95EJAADotScn/f2uCQAAAAAAAAAAAAAAAAAAAAyuo3ic2P6Y27uppBeP0AYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6In3AwAA///d8Nla") 154.905579ms ago: executing program 0 (id=234): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000780)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x0, 0x5c, 0x160, 0x118, 0x3e0, 0x1e8, 0x228, 0x25a, 0x1e8, 0x228, 0x4, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, [0xff, 0x0, 0xff000000, 0xffffff00], [0x0, 0xffffffff, 0xffffff00, 0xff], 'bond_slave_0\x00', 'veth1_to_team\x00', {}, {0xff}, 0x0, 0x3, 0x1, 0x46}, 0x5002, 0xa8, 0xf0, 0x52020000, {0x0, 0x6802000000000000}}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}, {{@ipv6={@local, @private2={0xfc, 0x2, '\x00', 0x4}, [0x0, 0x0, 0xff], [0xffffff00, 0x0, 0xffffff00], 'veth1_to_hsr\x00', 'erspan0\x00', {}, {}, 0xb1, 0x8, 0x1}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) 154.476899ms ago: executing program 2 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000004c0), &(0x7f00000002c0)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) getpgrp(0x0) 154.227099ms ago: executing program 2 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e0700000004000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x4008040) 99.143349ms ago: executing program 2 (id=237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 75.150899ms ago: executing program 2 (id=238): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f0000000600), &(0x7f0000000800)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) alarm(0x0) 0s ago: executing program 2 (id=239): r0 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) close(r0) kernel console output (not intermixed with test programs): [ 22.786767][ T30] audit: type=1400 audit(1742400458.083:81): avc: denied { read } for pid=2980 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts. [ 27.211779][ T30] audit: type=1400 audit(1742400462.513:82): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.212871][ T3284] cgroup: Unknown subsys name 'net' [ 27.234695][ T30] audit: type=1400 audit(1742400462.513:83): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.263962][ T30] audit: type=1400 audit(1742400462.543:84): avc: denied { unmount } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.399686][ T3284] cgroup: Unknown subsys name 'cpuset' [ 27.405852][ T3284] cgroup: Unknown subsys name 'rlimit' [ 27.537319][ T30] audit: type=1400 audit(1742400462.833:85): avc: denied { setattr } for pid=3284 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.560778][ T30] audit: type=1400 audit(1742400462.833:86): avc: denied { create } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.581248][ T30] audit: type=1400 audit(1742400462.833:87): avc: denied { write } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.601680][ T30] audit: type=1400 audit(1742400462.833:88): avc: denied { read } for pid=3284 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 27.621968][ T30] audit: type=1400 audit(1742400462.833:89): avc: denied { mounton } for pid=3284 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.646973][ T30] audit: type=1400 audit(1742400462.833:90): avc: denied { mount } for pid=3284 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.648028][ T3289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 27.678962][ T30] audit: type=1400 audit(1742400462.983:91): avc: denied { relabelto } for pid=3289 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.706322][ T3284] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.269832][ T3296] chnl_net:caif_netlink_parms(): no params data found [ 29.328189][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 29.355093][ T3297] chnl_net:caif_netlink_parms(): no params data found [ 29.363634][ T3305] chnl_net:caif_netlink_parms(): no params data found [ 29.410280][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.417350][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.424694][ T3296] bridge_slave_0: entered allmulticast mode [ 29.431421][ T3296] bridge_slave_0: entered promiscuous mode [ 29.450420][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.457653][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.464964][ T3296] bridge_slave_1: entered allmulticast mode [ 29.471447][ T3296] bridge_slave_1: entered promiscuous mode [ 29.496037][ T3299] chnl_net:caif_netlink_parms(): no params data found [ 29.524241][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.531414][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.538704][ T3302] bridge_slave_0: entered allmulticast mode [ 29.545005][ T3302] bridge_slave_0: entered promiscuous mode [ 29.563001][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.579738][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.586834][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.594061][ T3302] bridge_slave_1: entered allmulticast mode [ 29.600606][ T3302] bridge_slave_1: entered promiscuous mode [ 29.606748][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.613925][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.621616][ T3297] bridge_slave_0: entered allmulticast mode [ 29.628259][ T3297] bridge_slave_0: entered promiscuous mode [ 29.636031][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.645206][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.652403][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.660022][ T3305] bridge_slave_0: entered allmulticast mode [ 29.666458][ T3305] bridge_slave_0: entered promiscuous mode [ 29.683929][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.691164][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.698280][ T3297] bridge_slave_1: entered allmulticast mode [ 29.704781][ T3297] bridge_slave_1: entered promiscuous mode [ 29.715822][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.723105][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.730257][ T3305] bridge_slave_1: entered allmulticast mode [ 29.736837][ T3305] bridge_slave_1: entered promiscuous mode [ 29.770474][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.782730][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.793123][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.807768][ T3296] team0: Port device team_slave_0 added [ 29.824811][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.835322][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 29.850561][ T3296] team0: Port device team_slave_1 added [ 29.868331][ T3305] team0: Port device team_slave_0 added [ 29.875008][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 29.890116][ T3302] team0: Port device team_slave_0 added [ 29.900961][ T3299] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.908082][ T3299] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.915319][ T3299] bridge_slave_0: entered allmulticast mode [ 29.921855][ T3299] bridge_slave_0: entered promiscuous mode [ 29.928784][ T3305] team0: Port device team_slave_1 added [ 29.945103][ T3302] team0: Port device team_slave_1 added [ 29.960438][ T3299] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.967546][ T3299] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.974902][ T3299] bridge_slave_1: entered allmulticast mode [ 29.981497][ T3299] bridge_slave_1: entered promiscuous mode [ 29.993373][ T3297] team0: Port device team_slave_0 added [ 30.000072][ T3297] team0: Port device team_slave_1 added [ 30.010701][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.017673][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.043779][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.068464][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.075483][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.101485][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.113665][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.120680][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.146611][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.162172][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.169230][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.195266][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.211292][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.218277][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.244271][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.261036][ T3299] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 30.270607][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.277562][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.303561][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.314548][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.321584][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.347674][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.359110][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.366070][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.393036][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.420759][ T3299] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 30.444134][ T3297] hsr_slave_0: entered promiscuous mode [ 30.450245][ T3297] hsr_slave_1: entered promiscuous mode [ 30.485286][ T3299] team0: Port device team_slave_0 added [ 30.497126][ T3305] hsr_slave_0: entered promiscuous mode [ 30.503102][ T3305] hsr_slave_1: entered promiscuous mode [ 30.509065][ T3305] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.516624][ T3305] Cannot create hsr debugfs directory [ 30.532773][ T3299] team0: Port device team_slave_1 added [ 30.545498][ T3302] hsr_slave_0: entered promiscuous mode [ 30.551576][ T3302] hsr_slave_1: entered promiscuous mode [ 30.557448][ T3302] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.565110][ T3302] Cannot create hsr debugfs directory [ 30.584300][ T3296] hsr_slave_0: entered promiscuous mode [ 30.590397][ T3296] hsr_slave_1: entered promiscuous mode [ 30.596340][ T3296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.604003][ T3296] Cannot create hsr debugfs directory [ 30.624997][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 30.632108][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.658105][ T3299] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.681010][ T3299] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.687976][ T3299] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.714015][ T3299] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.773076][ T3299] hsr_slave_0: entered promiscuous mode [ 30.779107][ T3299] hsr_slave_1: entered promiscuous mode [ 30.785006][ T3299] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 30.792611][ T3299] Cannot create hsr debugfs directory [ 30.917394][ T3302] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.929279][ T3302] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.945459][ T3302] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.958346][ T3302] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.976440][ T3296] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 30.989310][ T3296] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.998876][ T3296] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 31.007846][ T3296] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 31.031116][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 31.040610][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 31.056300][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 31.067782][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 31.104250][ T3297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 31.125002][ T3297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 31.134002][ T3297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 31.142831][ T3297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 31.154572][ T3299] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 31.163893][ T3299] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 31.180896][ T3299] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 31.190105][ T3299] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 31.210521][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.234463][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.243962][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.259661][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.266782][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.288993][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.296181][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.311263][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.329578][ T121] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.336854][ T121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.355140][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.369467][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.381730][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.388822][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.399169][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.415799][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.422957][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.436336][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.451774][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.458989][ T3309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.483844][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.491006][ T3309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.512842][ T3305] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.526545][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.533644][ T3309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.570523][ T3299] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.583039][ T3297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.593662][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.628285][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.638125][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.647522][ T3299] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.668593][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.675691][ T3309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.692933][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.700079][ T3309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.739854][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.754708][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.830310][ T3296] veth0_vlan: entered promiscuous mode [ 31.838256][ T3296] veth1_vlan: entered promiscuous mode [ 31.855214][ T3302] veth0_vlan: entered promiscuous mode [ 31.872867][ T3302] veth1_vlan: entered promiscuous mode [ 31.884237][ T3299] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.913447][ T3296] veth0_macvtap: entered promiscuous mode [ 31.922462][ T3302] veth0_macvtap: entered promiscuous mode [ 31.931838][ T3302] veth1_macvtap: entered promiscuous mode [ 31.940643][ T3296] veth1_macvtap: entered promiscuous mode [ 31.953530][ T3305] veth0_vlan: entered promiscuous mode [ 31.970422][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.988137][ T3305] veth1_vlan: entered promiscuous mode [ 32.003727][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.011960][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.022495][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.033269][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.046064][ T3296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.056600][ T3296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.067158][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.076093][ T3302] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.085007][ T3302] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.093884][ T3302] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.102695][ T3302] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.119270][ T3296] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.128009][ T3296] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.136826][ T3296] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.145658][ T3296] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.160608][ T3297] veth0_vlan: entered promiscuous mode [ 32.182106][ T3299] veth0_vlan: entered promiscuous mode [ 32.192698][ T3305] veth0_macvtap: entered promiscuous mode [ 32.200450][ T3297] veth1_vlan: entered promiscuous mode [ 32.206630][ T3305] veth1_macvtap: entered promiscuous mode [ 32.223021][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 32.223039][ T30] audit: type=1400 audit(1742400467.523:110): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.TRyUal/syz-tmp" dev="sda1" ino=1944 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 32.253558][ T30] audit: type=1400 audit(1742400467.523:111): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 32.275782][ T30] audit: type=1400 audit(1742400467.523:112): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.TRyUal/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 32.286837][ T3299] veth1_vlan: entered promiscuous mode [ 32.301688][ T30] audit: type=1400 audit(1742400467.523:113): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.321365][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.328967][ T30] audit: type=1400 audit(1742400467.523:114): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.TRyUal/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 32.339348][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.339361][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.365963][ T30] audit: type=1400 audit(1742400467.523:115): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.TRyUal/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=4467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 32.375749][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.382077][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.386256][ T30] audit: type=1400 audit(1742400467.523:116): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.421532][ T3299] veth0_macvtap: entered promiscuous mode [ 32.459778][ T30] audit: type=1400 audit(1742400467.763:117): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 32.482812][ T30] audit: type=1400 audit(1742400467.763:118): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="gadgetfs" ino=3673 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 32.498796][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.515639][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.525516][ T3305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.536067][ T3305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.546513][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.556201][ T3296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.560834][ T3297] veth0_macvtap: entered promiscuous mode [ 32.582723][ T3299] veth1_macvtap: entered promiscuous mode [ 32.590799][ T3305] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.599900][ T3305] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.608640][ T3305] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.617411][ T3305] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.637514][ T30] audit: type=1400 audit(1742400467.933:119): avc: denied { read write } for pid=3296 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 32.659285][ T3297] veth1_macvtap: entered promiscuous mode [ 32.682821][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.693531][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.703427][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.713951][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.723820][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.734366][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.763966][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.776033][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.786676][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.796550][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.807051][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.816955][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.827510][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.837368][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 32.847978][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.884132][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.895565][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.906217][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.916192][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.926755][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.936656][ T3297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 32.947140][ T3297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 32.970403][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.972875][ T3455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 33.010749][ T3297] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.019633][ T3297] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.028341][ T3297] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.037117][ T3297] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.053391][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.063952][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.073829][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.079946][ T3455] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 33.084314][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.103622][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.114241][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.124120][ T3299] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 33.134590][ T3299] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 33.145745][ T3299] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 33.162185][ T3299] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.167919][ T3455] syz.3.11 (3455) used greatest stack depth: 10296 bytes left [ 33.171093][ T3299] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.171188][ T3299] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.196335][ T3299] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 33.213393][ T3459] process 'syz.1.20' launched '/dev/fd/6' with NULL argv: empty string added [ 33.282867][ T3465] loop3: detected capacity change from 0 to 512 [ 33.311207][ T3465] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.341620][ T3472] loop1: detected capacity change from 0 to 512 [ 33.352642][ T3465] ext4 filesystem being mounted at /4/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 33.398864][ T3472] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 33.412396][ T3472] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 33.435309][ T3476] bond1: entered promiscuous mode [ 33.440682][ T3476] bond1: entered allmulticast mode [ 33.444599][ T3472] EXT4-fs (loop1): 1 truncate cleaned up [ 33.450695][ T3476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 33.456263][ T3472] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.472793][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.494387][ T3476] bond1 (unregistering): Released all slaves [ 33.523058][ T3472] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 1835363691 (only 1 groups) [ 33.578985][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.614562][ T3493] loop4: detected capacity change from 0 to 1024 [ 33.633576][ T3492] loop3: detected capacity change from 0 to 1024 [ 33.647893][ T3492] ======================================================= [ 33.647893][ T3492] WARNING: The mand mount option has been deprecated and [ 33.647893][ T3492] and is ignored by this kernel. Remove the mand [ 33.647893][ T3492] option from the mount to silence this warning. [ 33.647893][ T3492] ======================================================= [ 33.695663][ T3492] EXT4-fs: Ignoring removed mblk_io_submit option [ 33.703676][ T3493] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 33.709511][ T3492] EXT4-fs: Ignoring removed nobh option [ 33.715553][ T3493] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 33.720973][ T3492] EXT4-fs: Ignoring removed bh option [ 33.739039][ T3493] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 33.743874][ T3497] capability: warning: `syz.2.19' uses deprecated v2 capabilities in a way that may be insecure [ 33.761963][ T3493] EXT4-fs (loop4): invalid journal inode [ 33.767701][ T3493] EXT4-fs (loop4): can't get journal size [ 33.775309][ T3493] EXT4-fs error (device loop4): ext4_protect_reserved_inode:182: inode #3: comm syz.4.17: blocks 2-2 from inode overlap system zone [ 33.791827][ T3493] EXT4-fs (loop4): failed to initialize system zone (-117) [ 33.801095][ T3492] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.805454][ T3493] EXT4-fs (loop4): mount failed [ 33.894996][ T3509] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 33.906186][ T3492] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 33.935049][ T3511] loop0: detected capacity change from 0 to 512 [ 33.942650][ T3511] EXT4-fs: Ignoring removed i_version option [ 33.951928][ T3511] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 33.970292][ T3511] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 33.971827][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.993582][ T3511] EXT4-fs (loop0): 1 truncate cleaned up [ 34.000765][ T3511] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.034875][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.058100][ T3520] loop4: detected capacity change from 0 to 512 [ 34.079051][ T3520] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.107181][ T3520] EXT4-fs (loop4): 1 truncate cleaned up [ 34.113384][ T3520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.131645][ T3520] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 1835363691 (only 1 groups) [ 34.166090][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.248948][ T3530] hub 9-0:1.0: USB hub found [ 34.255273][ T3530] hub 9-0:1.0: 8 ports detected [ 34.271040][ T3531] bond1: entered promiscuous mode [ 34.276215][ T3531] bond1: entered allmulticast mode [ 34.292091][ T3531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.303465][ T3537] loop2: detected capacity change from 0 to 512 [ 34.317239][ T3531] bond1 (unregistering): Released all slaves [ 34.328868][ T3537] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.37: corrupted in-inode xattr: e_value size too large [ 34.349481][ T3537] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.37: couldn't read orphan inode 15 (err -117) [ 34.364596][ T3537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.402479][ T3541] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 34.423871][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.467396][ T3545] loop3: detected capacity change from 0 to 1024 [ 34.504600][ T3552] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 34.507513][ T3555] loop4: detected capacity change from 0 to 512 [ 34.526094][ T3545] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 34.526371][ T3555] EXT4-fs: Ignoring removed i_version option [ 34.537076][ T3545] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 34.545893][ T3552] Cannot find add_set index 0 as target [ 34.568797][ T3555] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 34.575384][ T3545] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 34.609527][ T3545] EXT4-fs (loop3): invalid journal inode [ 34.615653][ T3545] EXT4-fs (loop3): can't get journal size [ 34.619730][ T3555] EXT4-fs (loop4): 1 truncate cleaned up [ 34.628138][ T3545] EXT4-fs error (device loop3): ext4_protect_reserved_inode:182: inode #3: comm syz.3.40: blocks 2-2 from inode overlap system zone [ 34.642396][ T3545] EXT4-fs (loop3): failed to initialize system zone (-117) [ 34.650156][ T3545] EXT4-fs (loop3): mount failed [ 34.657269][ T3555] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.731193][ T3567] loop3: detected capacity change from 0 to 512 [ 34.753474][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.771390][ T3567] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.54: corrupted in-inode xattr: e_value size too large [ 34.791785][ T3567] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.54: couldn't read orphan inode 15 (err -117) [ 34.804468][ T3567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.823778][ T3578] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 34.839490][ T3575] bond1: entered promiscuous mode [ 34.844597][ T3575] bond1: entered allmulticast mode [ 34.854029][ T3575] 8021q: adding VLAN 0 to HW filter on device bond1 [ 34.869556][ T3575] bond1 (unregistering): Released all slaves [ 34.895092][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.356072][ T3598] loop1: detected capacity change from 0 to 1024 [ 35.374084][ T3598] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 35.385136][ T3598] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 35.415451][ T3598] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 35.431465][ T3602] loop2: detected capacity change from 0 to 512 [ 35.438784][ T3598] EXT4-fs (loop1): invalid journal inode [ 35.444707][ T3598] EXT4-fs (loop1): can't get journal size [ 35.451380][ T3607] loop0: detected capacity change from 0 to 512 [ 35.459644][ T3598] EXT4-fs error (device loop1): ext4_protect_reserved_inode:182: inode #3: comm syz.1.65: blocks 2-2 from inode overlap system zone [ 35.470013][ T3602] EXT4-fs: Ignoring removed i_version option [ 35.490509][ T3607] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.73: corrupted in-inode xattr: e_value size too large [ 35.491208][ T3598] EXT4-fs (loop1): failed to initialize system zone (-117) [ 35.512332][ T3598] EXT4-fs (loop1): mount failed [ 35.522004][ T3602] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 35.546284][ T3602] EXT4-fs (loop2): 1 truncate cleaned up [ 35.555051][ T3602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.569818][ T3607] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.73: couldn't read orphan inode 15 (err -117) [ 35.582414][ T3607] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.636076][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.660494][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 35.662128][ T3616] bond1: entered promiscuous mode [ 35.674759][ T3616] bond1: entered allmulticast mode [ 35.680604][ T3616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.691536][ T3616] bond1 (unregistering): Released all slaves [ 35.790950][ T3628] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 35.798165][ T25] IPVS: starting estimator thread 0... [ 35.805390][ T3632] x_tables: duplicate underflow at hook 2 [ 35.861931][ T3638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.83'. [ 35.874467][ T3639] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 35.888682][ T3633] IPVS: using max 2304 ests per chain, 115200 per kthread [ 35.936895][ T3642] bond1: entered promiscuous mode [ 35.942014][ T3642] bond1: entered allmulticast mode [ 35.947646][ T3642] 8021q: adding VLAN 0 to HW filter on device bond1 [ 35.961190][ T3642] bond1 (unregistering): Released all slaves [ 35.967441][ T3644] loop1: detected capacity change from 0 to 1024 [ 35.975001][ T3644] EXT4-fs: Ignoring removed mblk_io_submit option [ 35.982590][ T3644] EXT4-fs: Ignoring removed nobh option [ 35.988248][ T3644] EXT4-fs: Ignoring removed bh option [ 36.022708][ T3644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.048988][ T3644] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 36.051088][ T3653] pimreg: entered allmulticast mode [ 36.110172][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.120127][ T3647] pimreg: left allmulticast mode [ 36.587145][ T3660] loop2: detected capacity change from 0 to 512 [ 36.613322][ T3660] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.91: corrupted in-inode xattr: e_value size too large [ 36.636675][ T3660] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.91: couldn't read orphan inode 15 (err -117) [ 36.652578][ T3668] loop0: detected capacity change from 0 to 1024 [ 36.659935][ T3668] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 36.670889][ T3668] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (14919!=20869) [ 36.692212][ T3668] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 36.707614][ T3660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.709910][ T3668] EXT4-fs (loop0): invalid journal inode [ 36.725884][ T3668] EXT4-fs (loop0): can't get journal size [ 36.742296][ T3668] EXT4-fs error (device loop0): ext4_protect_reserved_inode:182: inode #3: comm syz.0.89: blocks 2-2 from inode overlap system zone [ 36.757720][ T3668] EXT4-fs (loop0): failed to initialize system zone (-117) [ 36.765323][ T3668] EXT4-fs (loop0): mount failed [ 36.772466][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.930456][ T3675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.109'. [ 36.954085][ T3679] loop0: detected capacity change from 0 to 512 [ 36.963181][ T3676] mmap: syz.4.93 (3676) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 37.013274][ T3679] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.107: corrupted in-inode xattr: e_value size too large [ 37.062940][ T3679] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.107: couldn't read orphan inode 15 (err -117) [ 37.089143][ T3697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.97'. [ 37.107070][ T3684] loop1: detected capacity change from 0 to 512 [ 37.130938][ T3700] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 37.149019][ T3679] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.174193][ T3684] EXT4-fs: Ignoring removed i_version option [ 37.215379][ T3684] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 37.236872][ T30] kauditd_printk_skb: 258 callbacks suppressed [ 37.236886][ T30] audit: type=1400 audit(1742400472.533:378): avc: denied { read write } for pid=3714 comm="syz.4.104" name="uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 37.254325][ T3684] EXT4-fs (loop1): 1 truncate cleaned up [ 37.267562][ T30] audit: type=1400 audit(1742400472.533:379): avc: denied { open } for pid=3714 comm="syz.4.104" path="/dev/uhid" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 37.326889][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.337165][ T30] audit: type=1326 audit(1742400472.593:380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3678 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ca82d169 code=0x7ffc0000 [ 37.341620][ T3684] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.360665][ T30] audit: type=1326 audit(1742400472.603:381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3678 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7fe1ca82d169 code=0x7ffc0000 [ 37.396567][ T30] audit: type=1326 audit(1742400472.603:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3678 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ca82d169 code=0x7ffc0000 [ 37.398335][ T3725] loop3: detected capacity change from 0 to 1024 [ 37.420514][ T30] audit: type=1326 audit(1742400472.603:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3678 comm="syz.0.107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe1ca82d169 code=0x7ffc0000 [ 37.499187][ T30] audit: type=1326 audit(1742400472.733:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f317fecbad0 code=0x7ffc0000 [ 37.522474][ T30] audit: type=1326 audit(1742400472.733:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f317fecbeb7 code=0x7ffc0000 [ 37.545564][ T30] audit: type=1326 audit(1742400472.733:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f317fecbad0 code=0x7ffc0000 [ 37.571112][ T30] audit: type=1326 audit(1742400472.733:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3681 comm="syz.1.92" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f317fecd169 code=0x7ffc0000 [ 37.596403][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.609701][ T3739] loop0: detected capacity change from 0 to 512 [ 37.618429][ T3725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.632853][ T3739] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.122: corrupted in-inode xattr: e_value size too large [ 37.671607][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.683402][ T3739] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.122: couldn't read orphan inode 15 (err -117) [ 37.697622][ T3739] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.735687][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.765067][ T3746] loop3: detected capacity change from 0 to 512 [ 37.772476][ T3746] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 37.785338][ T3746] EXT4-fs (loop3): 1 truncate cleaned up [ 37.794653][ T3746] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.824408][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.872195][ T3759] netlink: 8 bytes leftover after parsing attributes in process `syz.0.117'. [ 37.888426][ T3760] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 38.019344][ T3773] loop1: detected capacity change from 0 to 1024 [ 38.047089][ T3773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.070068][ T3782] loop0: detected capacity change from 0 to 512 [ 38.076929][ T3782] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 38.104669][ T3782] EXT4-fs (loop0): 1 truncate cleaned up [ 38.110255][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.111020][ T3782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.181580][ T3792] loop2: detected capacity change from 0 to 128 [ 38.199169][ T3792] EXT4-fs: Ignoring removed nobh option [ 38.220278][ T3798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.137'. [ 38.235357][ T3792] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.251036][ T3792] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.262436][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.316704][ T3792] EXT4-fs (loop2): shut down requested (0) [ 38.342200][ T3305] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 38.381017][ T3814] netlink: 'syz.4.146': attribute type 1 has an invalid length. [ 38.560642][ T3845] loop2: detected capacity change from 0 to 512 [ 38.607890][ T3845] EXT4-fs (loop2): 1 orphan inode deleted [ 38.618993][ T3845] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.632942][ T3315] EXT4-fs error (device loop2): ext4_release_dquot:6950: comm kworker/u8:6: Failed to release dquot type 1 [ 38.647387][ T3845] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.659629][ T3845] EXT4-fs error (device loop2): ext4_lookup:1817: inode #2: comm syz.2.149: deleted inode referenced: 16 [ 38.711436][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.783664][ T3881] loop0: detected capacity change from 0 to 128 [ 38.806334][ T3881] EXT4-fs: Ignoring removed nobh option [ 38.816763][ T3881] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 38.816942][ T3881] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 38.850397][ T3881] EXT4-fs (loop0): shut down requested (0) [ 38.906680][ T3299] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.150557][ T3897] loop1: detected capacity change from 0 to 128 [ 39.169036][ T3897] EXT4-fs: Ignoring removed nobh option [ 39.180247][ T3897] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.193550][ T3897] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.223336][ T3902] loop0: detected capacity change from 0 to 2048 [ 39.233987][ T3897] EXT4-fs (loop1): shut down requested (0) [ 39.242203][ T3902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.258275][ T3902] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 39.286487][ T3296] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.329430][ T3913] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3913 comm=syz.3.170 [ 39.342099][ T3913] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3913 comm=syz.3.170 [ 39.562337][ T3937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.180'. [ 39.665965][ T3944] loop4: detected capacity change from 0 to 164 [ 39.673915][ T3940] loop2: detected capacity change from 0 to 256 [ 39.704150][ T3944] syz.4.183: attempt to access beyond end of device [ 39.704150][ T3944] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 39.728901][ T3940] FAT-fs (loop2): Directory bread(block 64) failed [ 39.735598][ T3940] FAT-fs (loop2): Directory bread(block 65) failed [ 39.750544][ T3944] syz.4.183: attempt to access beyond end of device [ 39.750544][ T3944] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 39.764362][ T3940] FAT-fs (loop2): Directory bread(block 66) failed [ 39.776832][ T3940] FAT-fs (loop2): Directory bread(block 67) failed [ 39.806667][ T3948] loop4: detected capacity change from 0 to 128 [ 39.807564][ T3940] FAT-fs (loop2): Directory bread(block 68) failed [ 39.823315][ T3948] EXT4-fs: Ignoring removed nobh option [ 39.839463][ T3948] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 39.839642][ T3940] FAT-fs (loop2): Directory bread(block 69) failed [ 39.853473][ T3948] ext4 filesystem being mounted at /34/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 39.875123][ T3940] FAT-fs (loop2): Directory bread(block 70) failed [ 39.881876][ T3940] FAT-fs (loop2): Directory bread(block 71) failed [ 39.897125][ T3948] EXT4-fs (loop4): shut down requested (0) [ 39.903995][ T3927] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.166: bg 0: block 345: padding at end of block bitmap is not set [ 39.918581][ T3940] FAT-fs (loop2): Directory bread(block 72) failed [ 39.925297][ T3940] FAT-fs (loop2): Directory bread(block 73) failed [ 39.950602][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 39.981042][ T3927] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 39.993702][ T3927] EXT4-fs (loop0): This should not happen!! Data will be lost [ 39.993702][ T3927] [ 40.006731][ T3927] syz.0.166 (3927) used greatest stack depth: 9152 bytes left [ 40.023862][ T3940] syz.2.181: attempt to access beyond end of device [ 40.023862][ T3940] loop2: rw=1, sector=1224, nr_sectors = 32 limit=256 [ 40.037901][ T3940] syz.2.181: attempt to access beyond end of device [ 40.037901][ T3940] loop2: rw=1, sector=1288, nr_sectors = 68 limit=256 [ 40.058174][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 40.071140][ T37] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.071140][ T37] [ 40.124377][ T3955] loop4: detected capacity change from 0 to 128 [ 40.132713][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 40.141341][ T3955] EXT4-fs: Ignoring removed nobh option [ 40.145461][ T37] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.145461][ T37] [ 40.160769][ T37] EXT4-fs (loop0): Total free blocks count 0 [ 40.166774][ T37] EXT4-fs (loop0): Free/Dirty block details [ 40.172792][ T37] EXT4-fs (loop0): free_blocks=0 [ 40.181610][ T3955] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 40.193923][ T3955] ext4 filesystem being mounted at /36/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 40.212701][ T3955] EXT4-fs (loop4): shut down requested (0) [ 40.237764][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 40.289979][ T3964] loop2: detected capacity change from 0 to 1024 [ 40.296723][ T3964] EXT4-fs: Ignoring removed nomblk_io_submit option [ 40.310485][ T3964] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 40.323832][ T3964] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e857c01c, mo2=0003] [ 40.332696][ T3964] System zones: 0-1, 3-36 [ 40.344432][ T3964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.416306][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.539326][ T3983] GUP no longer grows the stack in syz.3.212 (3983): 400000004000-400000009000 (400000002000) [ 40.549835][ T3983] CPU: 1 UID: 0 PID: 3983 Comm: syz.3.212 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 40.549865][ T3983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 40.549884][ T3983] Call Trace: [ 40.549893][ T3983] <TASK> [ 40.549902][ T3983] dump_stack_lvl+0xf2/0x150 [ 40.550012][ T3983] dump_stack+0x15/0x1a [ 40.550080][ T3983] __get_user_pages+0x1de5/0x2350 [ 40.550114][ T3983] ? __rcu_read_unlock+0x4e/0x70 [ 40.550219][ T3983] get_user_pages_remote+0x1df/0x790 [ 40.550253][ T3983] __access_remote_vm+0x15b/0x580 [ 40.550283][ T3983] access_remote_vm+0x34/0x50 [ 40.550304][ T3983] proc_pid_cmdline_read+0x3e5/0x6b0 [ 40.550415][ T3983] vfs_readv+0x3e2/0x660 [ 40.550435][ T3983] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 40.550516][ T3983] __x64_sys_preadv+0xf4/0x1c0 [ 40.550553][ T3983] x64_sys_call+0x2680/0x2dc0 [ 40.550640][ T3983] do_syscall_64+0xc9/0x1c0 [ 40.550729][ T3983] ? clear_bhb_loop+0x55/0xb0 [ 40.550793][ T3983] ? clear_bhb_loop+0x55/0xb0 [ 40.550858][ T3983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.550892][ T3983] RIP: 0033:0x7f18bcbdd169 [ 40.550911][ T3983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 40.550930][ T3983] RSP: 002b:00007f18bb247038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 40.550963][ T3983] RAX: ffffffffffffffda RBX: 00007f18bcdf5fa0 RCX: 00007f18bcbdd169 [ 40.550975][ T3983] RDX: 0000000000000001 RSI: 0000400000000040 RDI: 0000000000000003 [ 40.550989][ T3983] RBP: 00007f18bcc5e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 40.551004][ T3983] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 40.551018][ T3983] R13: 0000000000000000 R14: 00007f18bcdf5fa0 R15: 00007fffa95b83e8 [ 40.551041][ T3983] </TASK> [ 40.743374][ T3986] loop1: detected capacity change from 0 to 2048 [ 40.771612][ T3986] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.797523][ T3995] loop3: detected capacity change from 0 to 512 [ 40.810176][ T3986] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.824206][ T3995] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 40.852767][ T3995] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 40.875295][ T3995] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.205: corrupted in-inode xattr: e_value size too large [ 40.928080][ T3995] EXT4-fs error (device loop3): ext4_orphan_get:1394: comm syz.3.205: couldn't read orphan inode 15 (err -117) [ 40.970613][ T3995] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 40.995879][ T3995] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.205: corrupted in-inode xattr: e_value size too large [ 41.131782][ T3302] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.167082][ T3999] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.201: bg 0: block 345: padding at end of block bitmap is not set [ 41.210611][ T4004] 9pnet_fd: Insufficient options for proto=fd [ 41.216854][ T3999] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 16 with error 117 [ 41.229546][ T3999] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.229546][ T3999] [ 41.246931][ T4005] netlink: 60 bytes leftover after parsing attributes in process `syz.4.207'. [ 41.256287][ T4005] unsupported nlmsg_type 40 [ 41.369353][ T3315] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 2048 with error 117 [ 41.382083][ T3315] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.382083][ T3315] [ 41.425100][ T29] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 2081 with max blocks 2024 with error 28 [ 41.437926][ T29] EXT4-fs (loop1): This should not happen!! Data will be lost [ 41.437926][ T29] [ 41.447666][ T29] EXT4-fs (loop1): Total free blocks count 0 [ 41.453701][ T29] EXT4-fs (loop1): Free/Dirty block details [ 41.459675][ T29] EXT4-fs (loop1): free_blocks=0 [ 41.570236][ T4029] netlink: 'syz.4.223': attribute type 1 has an invalid length. [ 41.578016][ T4029] netlink: 16 bytes leftover after parsing attributes in process `syz.4.223'. [ 41.606430][ T4031] program syz.1.216 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 41.616870][ T4035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.225'. [ 41.742550][ T4053] loop1: detected capacity change from 0 to 512 [ 41.751030][ T4053] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 41.778024][ T4053] EXT4-fs (loop1): orphan cleanup on readonly fs [ 41.785347][ T4053] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.233: Failed to acquire dquot type 1 [ 41.796950][ T4060] loop0: detected capacity change from 0 to 1024 [ 41.803923][ T4060] EXT4-fs: Ignoring removed orlov option [ 41.809878][ T4060] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.823361][ T4053] EXT4-fs (loop1): 1 truncate cleaned up [ 41.833707][ T4063] IPv6: Can't replace route, no match found [ 41.917227][ T4060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 41.929797][ T4053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 41.962607][ T4054] ================================================================== [ 41.970779][ T4054] BUG: KCSAN: data-race in do_sys_poll / pollwake [ 41.977231][ T4054] [ 41.979559][ T4054] write to 0xffffc9001162bbd0 of 4 bytes by task 4062 on cpu 1: [ 41.987204][ T4054] pollwake+0xbe/0x110 [ 41.991305][ T4054] __wake_up+0x65/0xb0 [ 41.995418][ T4054] unix_dgram_peer_wake_relay+0xd4/0xf0 [ 42.000987][ T4054] __wake_up_sync_key+0x51/0x80 [ 42.005862][ T4054] __unix_dgram_recvmsg+0x3c0/0x870 [ 42.011089][ T4054] unix_dgram_recvmsg+0x81/0x90 [ 42.015961][ T4054] sock_recvmsg_nosec+0x107/0x140 [ 42.021013][ T4054] ____sys_recvmsg+0x271/0x280 [ 42.025788][ T4054] do_recvmmsg+0x2aa/0x6d0 [ 42.030216][ T4054] __x64_sys_recvmmsg+0xe2/0x170 [ 42.035167][ T4054] x64_sys_call+0x2a9a/0x2dc0 [ 42.039861][ T4054] do_syscall_64+0xc9/0x1c0 [ 42.044391][ T4054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.050321][ T4054] [ 42.052646][ T4054] read to 0xffffc9001162bbd0 of 4 bytes by task 4054 on cpu 0: [ 42.060193][ T4054] do_sys_poll+0x95d/0xc20 [ 42.064629][ T4054] __se_sys_ppoll+0x1af/0x1f0 [ 42.069440][ T4054] __x64_sys_ppoll+0x67/0x80 [ 42.074050][ T4054] x64_sys_call+0x2acc/0x2dc0 [ 42.078776][ T4054] do_syscall_64+0xc9/0x1c0 [ 42.083301][ T4054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.089210][ T4054] [ 42.091536][ T4054] value changed: 0x00000000 -> 0x00000001 [ 42.097253][ T4054] [ 42.099580][ T4054] Reported by Kernel Concurrency Sanitizer on: [ 42.105730][ T4054] CPU: 0 UID: 0 PID: 4054 Comm: syz.3.231 Not tainted 6.14.0-rc7-syzkaller-00069-g81e4f8d68c66 #0 [ 42.116323][ T4054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 42.126394][ T4054] ================================================================== [ 42.164641][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.198888][ T3299] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.