last executing test programs: 7.498256524s ago: executing program 1 (id=24): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@loopback, @in=@loopback, 0x4e22, 0x0, 0x4, 0x8, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0x1}, {{@in=@empty, 0xfffffffd, 0x32}, 0x2, @in6=@private0, 0x9, 0x4, 0x0, 0x0, 0x3}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 7.465877876s ago: executing program 1 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 7.41833812s ago: executing program 1 (id=31): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) mknodat$null(0xffffffffffffff9c, 0x0, 0xb0a54e68b1cd2fdb, 0x103) 7.390649113s ago: executing program 1 (id=33): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000240)='./file0\x00', 0x1) 7.29807006s ago: executing program 1 (id=36): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) mlockall(0x7) 6.172147331s ago: executing program 1 (id=67): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x72d, &(0x7f00000014c0)="$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") 6.151960473s ago: executing program 32 (id=67): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x818018, &(0x7f0000000300)={[{@minixdf}, {@grpjquota}]}, 0x1, 0x72d, &(0x7f00000014c0)="$eJzs3U1rXNUbAPDn3mb+k38bTQQVX0AqihVLJ01sKV1ZF6KbYqDgNg3JJMRMemNmpjahi3TlVkRRcKPfwY0rxbUfwK+gIFrioq5G7rykbTrTjnWSgczvB3fmOffe4TlnJpwHcoY5AYysk/lDGvF8RMwlEZPt80lEFJrRWMSl1n27t28u5kcSjcaVP5LmPXk77nlN7kRE7ETEcxHxUyHidPpg3urW9tpCpVLebLena+sb09Wt7TOr6wsr5ZXytYvnzs2eu3D+4sXBjfWN9z94tnT+nYnv55bnT838+l0Sl2Kife3ecQxS6z0p5G/hfd49iGRDlAy7AzyWsYg41n5+JibjWDMCAI6yRjGiAQCMmET9B4AR0/k/QGdt76DWwXr5/e2IGO+Wf6y9ZjbeXIc8vpvctzKRRMTUYXaUI2nnVkRcnTr54N9f8sCa7b91dhAd5ED9mM8/l7rNP+ne/BNd5p/xzncn/qPe89/d/Md6zH9zfeZ478V61jP/rYgXxrrlT/byJz3yX+0z/w93lv7uda3xbcRrXetPcl+u3t8PmV5erZTPth675zhZv/nhw8Z/vEf+nUeMf6PP8U989vLPOw/J//orD//8u+XPa+Knfeb/pPDWF72u5fmXeoz/UZ//N33mv/DSR9t93goAAAAAAAAAAAAAAAAAAAAAAAAAAABHQhoRE5Gkpb04TUul1h7eT8fxtJJVa6eXs/q1pWjulT0VhbTzU8uTrXaSt2fav8ffac8249299psR8VREfF78f7NdWswqS8MePAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0ndi3//9fxdb+/wDAETc+7A4AAIdO/QeA0aP+A8DoUf8BYPSo/wAwetR/ABg9j1H/iwfRDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABGxtzly/nR2L19czFvL13fqq9l188slatrpfX6Ymkx29worWTZSqVcWszW978+2deuZNnG7GzUb0zXytXadHVre349q1+rza+uL6yU58uFQxsZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPRvonkkaSki0macpqVSxBMRMRWFZHm1Uj4bEU9GxC/FQjFvzwy70wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwYNWt7bWFSqW8KRAIBHvBsGcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOHx3N/0edk8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJjS35KIyI9Tk69O7L/6v+ROsfkcER9/feXLGwu12uZMfv7PvfO1r9rnZ4fRfwDgUTp1ulPHAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCb6tb22kKlUt5sBXcaLXfPDCAY9hgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABicfwIAAP//wLPUPg==") 1.596203181s ago: executing program 5 (id=235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) 1.545107885s ago: executing program 5 (id=238): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) 1.436271864s ago: executing program 5 (id=246): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r0}, 0x10) r1 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r1, 0x2007ffb) sendfile(r1, r1, 0x0, 0x1000000201005) 870.133639ms ago: executing program 5 (id=270): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r1}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 458.608553ms ago: executing program 0 (id=291): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x29, 0x10, &(0x7f0000002e00), &(0x7f00000001c0), 0x8, 0x7c, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 430.831295ms ago: executing program 4 (id=293): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001980)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc700000000000000004cbd302b0000000000fa000000", @ANYBLOB="203f80f3"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 415.870386ms ago: executing program 0 (id=294): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x15, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) set_tid_address(0x0) 401.235428ms ago: executing program 4 (id=295): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) readahead(0xffffffffffffffff, 0x7, 0xf) 393.235338ms ago: executing program 3 (id=296): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xb, 0x3d3}) r1 = io_uring_setup(0x4dc2, &(0x7f0000000640)={0x0, 0x0, 0x100}) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f00000003c0)=[r0], 0x1) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 381.421699ms ago: executing program 5 (id=297): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$eJzs28tvG0UYAPBv105KX8RU5dEHECiIikfSpKX0wAEQSBxAQoJDOYYkrUrdBjVBolUFBaFyRJW4I45I/AWc4IKAExJX4IwqVSiXFk5Ga+82jmunSbDrEP9+0tYzu+POfJ4de3YnG8DAGs3+SSJ2RMRvETHSyC4vMNp4ubF4cfrvxYvTSdRqb/6V1MtdX7w4XRQt3re9yJQj0k+T2Nem3vnzF05PVauz5/L8+MKZ98bnz1945tSZqZOzJ2fPTh47duTwxHNHJ5/tSpxZXNf3fji3f8+rb195ffr4lXd++iYp4m+Jo0tG2+4tN14er9W6XF1/7WxKJ+U+NoQ1KeWn5FB9/I9EKZY6byRe+aSvjQN6qlar1e7rfPhSDdjEkuh3C4D+KH7os+vfYrtDU48N4dqLjQugLO4b+dY4Uo40LzPUcn3bTaMRcfzSP19mW7Teh9jao0oBgIH2XTb/ebrd/C+N5vtCd+drKJWIuCcidkXE0YjYHRH3RtTL3h8RD6yx/tZFklvnn+nVdQW2Stn87/l8bWv5/K+Y/UWllOd21uMfSk6cqs4eyj+TgzG0JctPrFDH9y//+nmnY83zv2zL6i/mgnk7rpa3LH/PzNTC1H+Judm1jyP2ltvFn9xcCUgiYk9EvLDOOk49+fX+Tsc6xD+8qv+4C+tMta8inmj0/6Voib+QrLw+OX5XVGcPjRdnxa1+/uXyG53qv33/91bW/9vanv9F/H9Ukub12vm113H59886XlOu9/wfTt5atu+DqYWFcxMRw8lr9Xylef9kS7nJpfJZ/AcPtB//u2Lpk9gXEdlJ/GBEPBQRD+dtfyQiHo2IAyvE/+NLj727/vh7K4t/ZsX+j5b+X0oMR+ue9onS6R++XVZpZS3xZ/1/pJ46mO9Zzfffatq1vrMZAAAA/n/SiNgRSTp2M52mY2ONv+HfHdvS6tz8wlMn5t4/O9N4RqASQ2lxp2uk6X7oRH5ZX+QnW/KH8/vGX5S21vNj03PVmX4HDwNue4fxn/mz1O/WAT3neS0YXMY/DC7jHwaX8Q+Dq8349+gZDIh2v/8f9aEdwJ3XMv5XXPYzMYDNxfU/DC7jHwaX8Q8DaX5r3P4h+c2RSCNiAzRjsyQi3RDNkOhRot/fTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN3xbwAAAP//ynflmQ==") openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x4, &(0x7f00000003c0)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x1a00001a}]) 344.507072ms ago: executing program 0 (id=298): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000006c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) sync() chown(&(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x0) 342.958912ms ago: executing program 4 (id=299): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000040), 0x0, 0x0, 0x2) 321.220264ms ago: executing program 3 (id=300): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x7803, 0x4, {}, 0x5, 0xb, 0x2}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000003c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x90) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000000c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), r1, 0x2}}, 0x18) 290.588506ms ago: executing program 3 (id=302): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22004004, &(0x7f0000000140)={[{@jqfmt_vfsold}, {@errors_remount}, {@noload}, {@nombcache}, {@usrjquota}, {@grpjquota, 0x2e}]}, 0x81, 0x46c, &(0x7f00000004c0)="$eJzs3MtvG8UfAPDvrpP09ctD/ZVHH1BDQUQUkiYU6IELCKRekJDgAMeQhqrUbVETJFpVtCBUjoi/ADgi8RdwggsCTiCucEdIFeqFwgEtWnu3dWIndZwYN/jzkdae2YdnZmcnnp3xJoCBVc1fkogsIn6OiPFGdPkO1cbbjeuX5v+8fmk+iSx7+fekvt8f1y/Nl7uWx+0qIpNpRPpBEvvbpLt44eLpuVpt4XwRn14689b04oWLj586M3dy4eTC2dljx44+MfP0U7NPbko5R/O87nv33IG9x1/7+MX5LF7/7os8v/8rtjeXo2Fiw2lWo7r8XNaN1F8f3vCn31lGm8LJUB8zwrpUIiKvruF6+x+PStyqvPF44f2+Zg7oqSzLsm0taytl4EoG/Icl0e8cAP1RftHn97/l8i92P/ru2rONG6C83DeKpbFlKNL8bXvjjn20R+lXI+LVK399ki/RdhwCAGBzfZX3fx5r1/8bS+5u2m+smBuaiIjDEbE7Iv4fEXsi4q6IyPe9JyLuXWf61RXx1v7Pjzu6KliH8v7fM8Xc1vL+X1ruMlEpYqP18g8nb5yqLRwpzslkDG/L4zNrpPH18z99tNq25v5fvuTpl33BIh+/Da0YoDsxtzS3kTI3u/ZexL6hduVPbs4EJBGxNyL2dfH5+Tk79ejnB/Lw2K7W7QduW/41bMI8U/ZZxCON+r8SK8pfShoprTY/Ob09agtHpsurotX3P1x9qTk+3BS+ff33Vl7/O9te/0X5y2ZQztcurj+Nq798uOo9TbfX/0jySj08Uqx7Z25p6fxMxEixYtn62VvHlvFy/7z8k4falX8s2R3x96fFcfuLa/W+iLg/Ig4WeX8gIh6MiENrlP/b5x56c+0z1N/6P7FW/UdMJM3z9V0EKqe/+XK19Dur/6P10GSxppO/f51mcCPnDgAAALaKtP4b+CSduhlO06mpxm/498TOtHZucelwNd4+e6LxW/mJGE7Lka7xpvHQmWJsuIzProiXY15ZtqMen5o/V+vVnDrQmV2rtP/cr5V+5w7ouXXNo7U+0QZsYZ7XhMGl/cPg0v5hcGn/MLjatf/LETeaoj19CAPoH9//MLi0fxhc2j8MLu0fBlLrI/HlSF83T/rfCuw+vqHDByhQ6dEnR/M/7ehBINK+n7ruA+mdkI2DRWBbRHR61OWe1unK6wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDr+ycAAP//ENre5A==") r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x17, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) 259.376559ms ago: executing program 4 (id=303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="05000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) chmod(0x0, 0x80) 232.133411ms ago: executing program 2 (id=304): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x20000004) 183.189065ms ago: executing program 2 (id=305): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x0, 0x29, 0x10, &(0x7f0000002e00), &(0x7f00000001c0), 0x8, 0x7c, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 182.659675ms ago: executing program 0 (id=315): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4) 169.344616ms ago: executing program 4 (id=306): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x4048010) 112.366141ms ago: executing program 2 (id=307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 112.200761ms ago: executing program 3 (id=308): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001980)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a000000000000d74619edc700000000000000004cbd302b0000000000fa000000", @ANYBLOB="203f80f3"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 111.904581ms ago: executing program 0 (id=309): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@max_batch_time={'max_batch_time', 0x3d, 0x358}}, {@resuid}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x3, 0x45d, &(0x7f0000000a00)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) r0 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) rmdir(&(0x7f0000000040)='./control\x00') 79.181083ms ago: executing program 2 (id=310): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, r1, 0x26, 0x0, @void}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) 64.658825ms ago: executing program 3 (id=311): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) 42.986297ms ago: executing program 0 (id=312): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 42.855776ms ago: executing program 2 (id=313): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 42.723106ms ago: executing program 4 (id=314): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma']) 9.344179ms ago: executing program 3 (id=316): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r0, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet6(r0, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 330.12µs ago: executing program 5 (id=317): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=318): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioprio_get$pid(0x4, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.123' (ED25519) to the list of known hosts. [ 25.365231][ T29] audit: type=1400 audit(1755024530.434:62): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 25.366123][ T3291] cgroup: Unknown subsys name 'net' [ 25.387950][ T29] audit: type=1400 audit(1755024530.434:63): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.415389][ T29] audit: type=1400 audit(1755024530.464:64): avc: denied { unmount } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 25.531776][ T3291] cgroup: Unknown subsys name 'cpuset' [ 25.537996][ T3291] cgroup: Unknown subsys name 'rlimit' [ 25.628256][ T29] audit: type=1400 audit(1755024530.694:65): avc: denied { setattr } for pid=3291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.653488][ T29] audit: type=1400 audit(1755024530.694:66): avc: denied { create } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.674089][ T29] audit: type=1400 audit(1755024530.694:67): avc: denied { write } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.680982][ T3295] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.694436][ T29] audit: type=1400 audit(1755024530.694:68): avc: denied { read } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.723230][ T29] audit: type=1400 audit(1755024530.694:69): avc: denied { mounton } for pid=3291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.734704][ T3291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.748050][ T29] audit: type=1400 audit(1755024530.694:70): avc: denied { mount } for pid=3291 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.780008][ T29] audit: type=1400 audit(1755024530.774:71): avc: denied { relabelto } for pid=3295 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 27.616470][ T3302] chnl_net:caif_netlink_parms(): no params data found [ 27.643601][ T3301] chnl_net:caif_netlink_parms(): no params data found [ 27.685894][ T3304] chnl_net:caif_netlink_parms(): no params data found [ 27.754897][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.762049][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.769197][ T3301] bridge_slave_0: entered allmulticast mode [ 27.775663][ T3301] bridge_slave_0: entered promiscuous mode [ 27.794753][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.802044][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.809277][ T3301] bridge_slave_1: entered allmulticast mode [ 27.816111][ T3301] bridge_slave_1: entered promiscuous mode [ 27.828057][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.835165][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.842566][ T3302] bridge_slave_0: entered allmulticast mode [ 27.848996][ T3302] bridge_slave_0: entered promiscuous mode [ 27.855609][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.862681][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.869843][ T3302] bridge_slave_1: entered allmulticast mode [ 27.876339][ T3302] bridge_slave_1: entered promiscuous mode [ 27.914338][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.921598][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.928939][ T3304] bridge_slave_0: entered allmulticast mode [ 27.935394][ T3304] bridge_slave_0: entered promiscuous mode [ 27.942000][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.949065][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.956272][ T3304] bridge_slave_1: entered allmulticast mode [ 27.962889][ T3304] bridge_slave_1: entered promiscuous mode [ 27.969329][ T3311] chnl_net:caif_netlink_parms(): no params data found [ 27.979268][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 27.989551][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.004228][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.014366][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.057265][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.070367][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.080264][ T3302] team0: Port device team_slave_0 added [ 28.086686][ T3301] team0: Port device team_slave_0 added [ 28.094828][ T3301] team0: Port device team_slave_1 added [ 28.100724][ T3312] chnl_net:caif_netlink_parms(): no params data found [ 28.121007][ T3302] team0: Port device team_slave_1 added [ 28.153965][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.160989][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.186960][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.200764][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.207738][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.233804][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.247769][ T3304] team0: Port device team_slave_0 added [ 28.253725][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.260721][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.286744][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.297902][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.305016][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.331504][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.352671][ T3304] team0: Port device team_slave_1 added [ 28.383239][ T3311] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.390466][ T3311] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.397727][ T3311] bridge_slave_0: entered allmulticast mode [ 28.404198][ T3311] bridge_slave_0: entered promiscuous mode [ 28.430271][ T3311] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.437461][ T3311] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.444731][ T3311] bridge_slave_1: entered allmulticast mode [ 28.451373][ T3311] bridge_slave_1: entered promiscuous mode [ 28.464331][ T3301] hsr_slave_0: entered promiscuous mode [ 28.470452][ T3301] hsr_slave_1: entered promiscuous mode [ 28.478818][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.485812][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.511967][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.524695][ T3302] hsr_slave_0: entered promiscuous mode [ 28.530547][ T3302] hsr_slave_1: entered promiscuous mode [ 28.536453][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 28.542235][ T3302] Cannot create hsr debugfs directory [ 28.554326][ T3311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.567680][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.574768][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.600815][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.620345][ T3311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.668134][ T3312] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.675279][ T3312] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.682558][ T3312] bridge_slave_0: entered allmulticast mode [ 28.688963][ T3312] bridge_slave_0: entered promiscuous mode [ 28.708246][ T3311] team0: Port device team_slave_0 added [ 28.714145][ T3312] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.721296][ T3312] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.728638][ T3312] bridge_slave_1: entered allmulticast mode [ 28.735248][ T3312] bridge_slave_1: entered promiscuous mode [ 28.745087][ T3304] hsr_slave_0: entered promiscuous mode [ 28.751184][ T3304] hsr_slave_1: entered promiscuous mode [ 28.757002][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 28.762758][ T3304] Cannot create hsr debugfs directory [ 28.773770][ T3311] team0: Port device team_slave_1 added [ 28.799324][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 28.806350][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.832484][ T3311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 28.861419][ T3311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 28.868380][ T3311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 28.894429][ T3311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 28.906417][ T3312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 28.933643][ T3312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 28.973616][ T3312] team0: Port device team_slave_0 added [ 28.993677][ T3311] hsr_slave_0: entered promiscuous mode [ 28.999693][ T3311] hsr_slave_1: entered promiscuous mode [ 29.005872][ T3311] debugfs: 'hsr0' already exists in 'hsr' [ 29.011638][ T3311] Cannot create hsr debugfs directory [ 29.019946][ T3312] team0: Port device team_slave_1 added [ 29.037703][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 29.044738][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.070693][ T3312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 29.092715][ T3312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 29.099767][ T3312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 29.125787][ T3312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 29.187962][ T3301] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 29.196992][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 29.215248][ T3312] hsr_slave_0: entered promiscuous mode [ 29.221271][ T3312] hsr_slave_1: entered promiscuous mode [ 29.227106][ T3312] debugfs: 'hsr0' already exists in 'hsr' [ 29.232983][ T3312] Cannot create hsr debugfs directory [ 29.238554][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 29.249343][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 29.322737][ T3302] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 29.336886][ T3302] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 29.354165][ T3302] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 29.365055][ T3302] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 29.399302][ T3304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 29.408685][ T3304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 29.417644][ T3304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 29.435959][ T3304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 29.464464][ T3311] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 29.483858][ T3311] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 29.492902][ T3311] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 29.511103][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.520257][ T3311] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 29.542825][ T3312] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 29.552532][ T3312] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 29.569456][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.578024][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.585064][ T3312] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 29.594056][ T3312] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 29.610639][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.617827][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.638721][ T1606] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.645932][ T1606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.654828][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.670361][ T1600] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.677493][ T1600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.697905][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.705046][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.723807][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.744196][ T3302] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.754824][ T3302] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.776505][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.788882][ T3301] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 29.799352][ T3301] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.832240][ T1606] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.839326][ T1606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.850431][ T3312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.867671][ T1606] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.874868][ T1606] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.888897][ T3311] 8021q: adding VLAN 0 to HW filter on device bond0 [ 29.913238][ T3312] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.927054][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.934130][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.948986][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 29.958801][ T3311] 8021q: adding VLAN 0 to HW filter on device team0 [ 29.970732][ T3304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 29.986627][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.993790][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.012616][ T1600] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.019670][ T1600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.029234][ T1600] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.036396][ T1600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.057689][ T3312] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.068148][ T3312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.092378][ T3311] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 30.103208][ T3311] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 30.124057][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.169500][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.216676][ T3312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.234059][ T3311] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 30.258338][ T3302] veth0_vlan: entered promiscuous mode [ 30.272329][ T3301] veth0_vlan: entered promiscuous mode [ 30.279999][ T3301] veth1_vlan: entered promiscuous mode [ 30.299202][ T3302] veth1_vlan: entered promiscuous mode [ 30.322149][ T3301] veth0_macvtap: entered promiscuous mode [ 30.332064][ T3301] veth1_macvtap: entered promiscuous mode [ 30.347675][ T3302] veth0_macvtap: entered promiscuous mode [ 30.369185][ T3302] veth1_macvtap: entered promiscuous mode [ 30.376872][ T3304] veth0_vlan: entered promiscuous mode [ 30.389678][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.398318][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.405820][ T3304] veth1_vlan: entered promiscuous mode [ 30.416327][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.425128][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.445147][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.464587][ T51] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.476983][ T3311] veth0_vlan: entered promiscuous mode [ 30.488624][ T51] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.504727][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 30.504738][ T29] audit: type=1400 audit(1755024535.574:81): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.2O96Gy/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 30.536056][ T29] audit: type=1400 audit(1755024535.574:82): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 30.537992][ T51] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.558167][ T29] audit: type=1400 audit(1755024535.574:83): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.2O96Gy/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 30.568857][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.592272][ T29] audit: type=1400 audit(1755024535.574:84): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 30.592365][ T29] audit: type=1400 audit(1755024535.574:85): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.2O96Gy/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 30.602565][ T3311] veth1_vlan: entered promiscuous mode [ 30.623270][ T29] audit: type=1400 audit(1755024535.574:86): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/root/syzkaller.2O96Gy/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3863 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 30.653748][ T3312] veth0_vlan: entered promiscuous mode [ 30.655225][ T29] audit: type=1400 audit(1755024535.574:87): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 30.688623][ T3304] veth0_macvtap: entered promiscuous mode [ 30.718283][ T1600] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.727870][ T3304] veth1_macvtap: entered promiscuous mode [ 30.741614][ T1600] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.752655][ T29] audit: type=1400 audit(1755024535.824:88): avc: denied { mounton } for pid=3301 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 30.775495][ T29] audit: type=1400 audit(1755024535.824:89): avc: denied { mount } for pid=3301 comm="syz-executor" name="/" dev="gadgetfs" ino=3870 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 30.803377][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 30.817240][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.830727][ T3311] veth0_macvtap: entered promiscuous mode [ 30.837761][ T1600] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.850242][ T29] audit: type=1400 audit(1755024535.924:90): avc: denied { read write } for pid=3302 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 30.879333][ T3312] veth1_vlan: entered promiscuous mode [ 30.887883][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 30.896220][ T3311] veth1_macvtap: entered promiscuous mode [ 30.914607][ T1600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.934669][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 30.941964][ T1600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.952737][ T3312] veth0_macvtap: entered promiscuous mode [ 30.972657][ T1600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 30.988667][ T3312] veth1_macvtap: entered promiscuous mode [ 30.999916][ T3311] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.008677][ T3473] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 31.008725][ T3363] IPVS: starting estimator thread 0... [ 31.023479][ T1600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.046723][ T41] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.063888][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.081835][ T41] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.114975][ T41] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.124778][ T3478] IPVS: using max 2688 ests per chain, 134400 per kthread [ 31.125502][ T3312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.147264][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.183890][ T41] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.226375][ T41] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.277643][ T41] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.289626][ T41] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.321377][ T3498] netlink: 80 bytes leftover after parsing attributes in process `syz.1.10'. [ 31.338651][ T3501] syz.2.12 uses obsolete (PF_INET,SOCK_PACKET) [ 31.439078][ T3516] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 31.495640][ T3525] mmap: syz.4.21 (3525) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 31.624409][ T3543] vhci_hcd: invalid port number 254 [ 31.653471][ T3551] loop1: detected capacity change from 0 to 128 [ 31.679983][ T3551] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 31.693529][ T3551] ext4 filesystem being mounted at /10/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.710492][ T3556] loop4: detected capacity change from 0 to 512 [ 31.733696][ T3556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.746716][ T3556] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 31.747551][ T3301] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 31.808816][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 31.856892][ T3564] IPv6: Can't replace route, no match found [ 31.902994][ T3566] loop4: detected capacity change from 0 to 1024 [ 31.925886][ T3566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 31.959539][ T3579] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 31.975021][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.004339][ T3583] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 32.563749][ T3609] loop2: detected capacity change from 0 to 128 [ 32.841686][ T3301] syz-executor (3301) used greatest stack depth: 10712 bytes left [ 32.856373][ T1600] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 33.055241][ T3667] loop3: detected capacity change from 0 to 128 [ 33.064423][ T3667] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 33.085784][ T3667] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 33.170380][ T3676] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3676 comm=syz.3.82 [ 33.218443][ T3649] chnl_net:caif_netlink_parms(): no params data found [ 33.243195][ T3363] Process accounting resumed [ 33.262363][ T3688] loop4: detected capacity change from 0 to 512 [ 33.269481][ T3685] Process accounting resumed [ 33.276881][ T3688] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.87: iget: bad i_size value: 38620345925642 [ 33.294164][ T3688] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.87: couldn't read orphan inode 15 (err -117) [ 33.309355][ T3688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.335113][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.342305][ T3649] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.349763][ T3649] bridge_slave_0: entered allmulticast mode [ 33.356456][ T3649] bridge_slave_0: entered promiscuous mode [ 33.365187][ T3649] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.372347][ T3649] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.379634][ T3649] bridge_slave_1: entered allmulticast mode [ 33.386170][ T3649] bridge_slave_1: entered promiscuous mode [ 33.399741][ T3700] loop3: detected capacity change from 0 to 512 [ 33.409716][ T3700] EXT4-fs: Ignoring removed nobh option [ 33.417735][ T3700] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 33.427160][ T3700] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.91: invalid indirect mapped block 2683928664 (level 1) [ 33.438581][ T3649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.446861][ T3700] EXT4-fs (loop3): 1 truncate cleaned up [ 33.452265][ T3649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.456407][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.470109][ T3700] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.496590][ T3649] team0: Port device team_slave_0 added [ 33.504127][ T3700] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.91: Invalid block bitmap block 3 in block_group 0 [ 33.518554][ T3649] team0: Port device team_slave_1 added [ 33.528413][ T3700] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 33.537555][ T3700] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.91: invalid indirect mapped block 480848489 (level 1) [ 33.558059][ T3649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.565143][ T3649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.566129][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.591369][ T3649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.592461][ T3649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.618070][ T3649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 33.623189][ T3707] netlink: 276 bytes leftover after parsing attributes in process `syz.4.95'. [ 33.644388][ T3649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.696885][ T3707] netlink: 276 bytes leftover after parsing attributes in process `syz.4.95'. [ 33.709336][ T3649] hsr_slave_0: entered promiscuous mode [ 33.715821][ T3649] hsr_slave_1: entered promiscuous mode [ 33.740611][ T3649] debugfs: 'hsr0' already exists in 'hsr' [ 33.746354][ T3649] Cannot create hsr debugfs directory [ 33.826074][ T3728] Driver unsupported XDP return value 0 on prog (id 64) dev N/A, expect packet loss! [ 33.885968][ T3649] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 33.901219][ T3649] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 33.922313][ T3742] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.924539][ T3649] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 33.959228][ T3649] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 33.980570][ T3742] netlink: 'syz.4.108': attribute type 12 has an invalid length. [ 33.988328][ T3742] netlink: 'syz.4.108': attribute type 29 has an invalid length. [ 33.996233][ T3742] netlink: 148 bytes leftover after parsing attributes in process `syz.4.108'. [ 34.005232][ T3742] netlink: 'syz.4.108': attribute type 2 has an invalid length. [ 34.012916][ T3742] netlink: 23 bytes leftover after parsing attributes in process `syz.4.108'. [ 34.024637][ T1600] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.076680][ T3649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.087833][ T1600] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.112175][ T3768] Zero length message leads to an empty skb [ 34.125546][ T3649] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.142599][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.149774][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.153902][ T3769] loop4: detected capacity change from 0 to 2048 [ 34.166292][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.173520][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.196505][ T3649] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 34.206933][ T3649] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.225004][ T1600] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.237345][ T3294] loop4: p1 < > p4 [ 34.242384][ T3294] loop4: p4 size 8388608 extends beyond EOD, truncated [ 34.252645][ T3769] loop4: p1 < > p4 [ 34.258480][ T3769] loop4: p4 size 8388608 extends beyond EOD, truncated [ 34.370283][ T1600] bridge_slave_1: left allmulticast mode [ 34.375985][ T1600] bridge_slave_1: left promiscuous mode [ 34.381811][ T1600] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.396997][ T1600] bridge_slave_0: left allmulticast mode [ 34.403108][ T1600] bridge_slave_0: left promiscuous mode [ 34.408877][ T1600] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.471070][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 34.524988][ T1600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 34.535666][ T1600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 34.549426][ T1600] bond0 (unregistering): Released all slaves [ 34.571538][ T3806] netlink: 'syz.4.132': attribute type 10 has an invalid length. [ 34.579618][ T3649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.643841][ T1600] hsr_slave_0: left promiscuous mode [ 34.651976][ T1600] hsr_slave_1: left promiscuous mode [ 34.675979][ T1600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.683722][ T1600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 34.715863][ T1600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.723335][ T1600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 34.736742][ T1600] veth1_macvtap: left promiscuous mode [ 34.748794][ T1600] veth0_macvtap: left promiscuous mode [ 34.759122][ T1600] veth1_vlan: left promiscuous mode [ 34.771601][ T3833] netlink: 76 bytes leftover after parsing attributes in process `syz.3.139'. [ 34.791314][ T1600] veth0_vlan: left promiscuous mode [ 34.879240][ T3848] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 34.895541][ T1600] team0 (unregistering): Port device team_slave_1 removed [ 34.905532][ T1600] team0 (unregistering): Port device team_slave_0 removed [ 34.943848][ T3826] gretap0: entered promiscuous mode [ 34.959219][ T3841] batadv_slave_0: entered promiscuous mode [ 34.974600][ T3848] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 35.005385][ T3848] batadv_slave_0 (unregistering): left promiscuous mode [ 35.013278][ T3848] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 35.190900][ T1600] IPVS: stop unused estimator thread 0... [ 35.241732][ T3895] netlink: 'syz.0.155': attribute type 21 has an invalid length. [ 35.255430][ T3649] veth0_vlan: entered promiscuous mode [ 35.276620][ T3895] netlink: 132 bytes leftover after parsing attributes in process `syz.0.155'. [ 35.288012][ T3649] veth1_vlan: entered promiscuous mode [ 35.328314][ T3649] veth0_macvtap: entered promiscuous mode [ 35.362605][ T3649] veth1_macvtap: entered promiscuous mode [ 35.401555][ T3649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.432657][ T3649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.461875][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.500784][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.518573][ T29] kauditd_printk_skb: 244 callbacks suppressed [ 35.518618][ T29] audit: type=1400 audit(1755024796.584:335): avc: denied { mount } for pid=3649 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.521959][ T3924] loop3: detected capacity change from 0 to 512 [ 35.530641][ T29] audit: type=1400 audit(1755024796.594:336): avc: denied { mounton } for pid=3649 comm="syz-executor" path="/root/syzkaller.hpCaPT/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 35.549792][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.636907][ T29] audit: type=1400 audit(1755024796.704:337): avc: denied { audit_write } for pid=3926 comm="syz.4.166" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 35.643820][ T3924] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 35.658135][ T29] audit: type=1107 audit(1755024796.704:338): pid=3926 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 35.669625][ T3924] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 35.669648][ T3924] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.165: Corrupt directory, running e2fsck is recommended [ 35.706900][ T41] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.707348][ T3924] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 35.724594][ T29] audit: type=1400 audit(1755024796.774:339): avc: denied { bind } for pid=3935 comm="syz.5.69" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 35.725771][ T3936] netlink: 'syz.5.69': attribute type 10 has an invalid length. [ 35.744002][ T3924] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.165: corrupted in-inode xattr: invalid ea_ino [ 35.744987][ T3924] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.165: couldn't read orphan inode 15 (err -117) [ 35.786387][ T3936] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.796702][ T3924] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.809534][ T3936] bridge_slave_1: left allmulticast mode [ 35.815325][ T3936] bridge_slave_1: left promiscuous mode [ 35.821316][ T3936] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.877775][ T3936] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 35.898239][ T3924] EXT4-fs warning (device loop3): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 35.909927][ T3924] EXT4-fs warning (device loop3): dx_probe:849: Enable large directory feature to access it [ 35.920169][ T3924] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.165: Corrupt directory, running e2fsck is recommended [ 35.938517][ T29] audit: type=1400 audit(1755024796.984:340): avc: denied { name_connect } for pid=3955 comm="syz.0.172" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 35.959414][ T29] audit: type=1326 audit(1755024797.014:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6111ebe9 code=0x7ffc0000 [ 35.982901][ T29] audit: type=1326 audit(1755024797.014:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6111ebe9 code=0x7ffc0000 [ 36.006300][ T29] audit: type=1326 audit(1755024797.014:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efe6111ebe9 code=0x7ffc0000 [ 36.029800][ T29] audit: type=1326 audit(1755024797.014:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.4.171" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe6111ebe9 code=0x7ffc0000 [ 36.057244][ T3924] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.165: path /48/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 36.086514][ T3924] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 64: comm syz.3.165: path /48/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 36.093937][ T3964] loop5: detected capacity change from 0 to 256 [ 36.195145][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.492555][ T4018] loop4: detected capacity change from 0 to 1024 [ 36.508972][ T4018] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 36.561632][ T4018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.610273][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.648835][ T4025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 36.787272][ T4059] netlink: 60 bytes leftover after parsing attributes in process `syz.4.203'. [ 36.862415][ T4069] loop4: detected capacity change from 0 to 512 [ 36.902051][ T4069] EXT4-fs: Ignoring removed mblk_io_submit option [ 36.941555][ T4069] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 36.954813][ T4069] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 36.992512][ T4093] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 36.992512][ T4093] program syz.5.210 not setting count and/or reply_len properly [ 37.040026][ T4069] EXT4-fs (loop4): 1 truncate cleaned up [ 37.050853][ T4069] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 37.158065][ T4103] SELinux: failed to load policy [ 37.357806][ T4151] sctp: [Deprecated]: syz.5.228 (pid 4151) Use of int in max_burst socket option deprecated. [ 37.357806][ T4151] Use struct sctp_assoc_value instead [ 37.535616][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.785806][ T4219] SELinux: policydb version 0 does not match my version range 15-35 [ 37.807669][ T4219] SELinux: failed to load policy [ 37.976536][ T4243] sd 0:0:1:0: device reset [ 38.030775][ T4245] syz.2.264 (4245) used greatest stack depth: 10144 bytes left [ 38.146013][ T4253] loop4: detected capacity change from 0 to 1024 [ 38.173209][ T4253] EXT4-fs: Ignoring removed orlov option [ 38.179117][ T4253] EXT4-fs: Ignoring removed nomblk_io_submit option [ 38.238861][ T4253] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.464750][ T3312] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.515138][ T4296] SELinux: policydb version 0 does not match my version range 15-35 [ 38.541282][ T4296] SELinux: failed to load policy [ 38.572556][ T4301] netlink: 'syz.2.289': attribute type 10 has an invalid length. [ 38.654198][ T4315] loop5: detected capacity change from 0 to 512 [ 38.663412][ T4315] EXT4-fs: Ignoring removed mblk_io_submit option [ 38.692345][ T4315] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 38.735869][ T4315] EXT4-fs (loop5): 1 truncate cleaned up [ 38.744724][ T4315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.757923][ T4327] loop3: detected capacity change from 0 to 512 [ 38.774449][ T4327] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -13 [ 38.796693][ T4327] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #13: comm syz.3.302: iget: bad i_size value: 12154757448730 [ 38.812201][ T4327] EXT4-fs (loop3): Remounting filesystem read-only [ 38.826195][ T4327] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.874630][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.974493][ T4350] random: crng reseeded on system resumption [ 39.002870][ T4356] netlink: 'syz.0.312': attribute type 10 has an invalid length. [ 39.021624][ T3649] ================================================================== [ 39.029816][ T3649] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 39.037280][ T3649] [ 39.039589][ T3649] read-write to 0xffff888109256478 of 8 bytes by interrupt on cpu 1: [ 39.047816][ T3649] __xa_clear_mark+0xf5/0x1e0 [ 39.052488][ T3649] __folio_end_writeback+0x177/0x470 [ 39.057772][ T3649] folio_end_writeback+0x71/0x3d0 [ 39.062908][ T3649] ext4_finish_bio+0x459/0x8c0 [ 39.067867][ T3649] ext4_end_bio+0x298/0x3b0 [ 39.072372][ T3649] bio_endio+0x374/0x410 [ 39.076598][ T3649] blk_update_request+0x336/0x730 [ 39.081623][ T3649] blk_mq_end_request+0x26/0x50 [ 39.086474][ T3649] lo_complete_rq+0x98/0x140 [ 39.091070][ T3649] blk_done_softirq+0x74/0xb0 [ 39.095749][ T3649] handle_softirqs+0xba/0x290 [ 39.100505][ T3649] run_ksoftirqd+0x1c/0x30 [ 39.104919][ T3649] smpboot_thread_fn+0x32b/0x530 [ 39.109857][ T3649] kthread+0x489/0x510 [ 39.113919][ T3649] ret_from_fork+0xda/0x150 [ 39.118535][ T3649] ret_from_fork_asm+0x1a/0x30 [ 39.123474][ T3649] [ 39.125791][ T3649] read to 0xffff888109256478 of 8 bytes by task 3649 on cpu 0: [ 39.133578][ T3649] xas_find_marked+0x218/0x620 [ 39.138337][ T3649] find_get_entry+0x5d/0x380 [ 39.142930][ T3649] filemap_get_folios_tag+0x13b/0x210 [ 39.148294][ T3649] filemap_fdatawait_keep_errors+0x6c/0x180 [ 39.154175][ T3649] sync_inodes_sb+0x39c/0x440 [ 39.158838][ T3649] sync_filesystem+0x102/0x190 [ 39.163584][ T3649] generic_shutdown_super+0x44/0x210 [ 39.168860][ T3649] kill_block_super+0x2a/0x70 [ 39.173521][ T3649] ext4_kill_sb+0x42/0x80 [ 39.177851][ T3649] deactivate_locked_super+0x72/0x1c0 [ 39.183225][ T3649] deactivate_super+0x97/0xa0 [ 39.187895][ T3649] cleanup_mnt+0x269/0x2e0 [ 39.192305][ T3649] __cleanup_mnt+0x19/0x20 [ 39.196797][ T3649] task_work_run+0x12e/0x1a0 [ 39.201372][ T3649] exit_to_user_mode_loop+0xe4/0x100 [ 39.206640][ T3649] do_syscall_64+0x1d6/0x200 [ 39.211391][ T3649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.217269][ T3649] [ 39.219571][ T3649] value changed: 0x003ffff800000000 -> 0x003fffe000000000 [ 39.226831][ T3649] [ 39.229144][ T3649] Reported by Kernel Concurrency Sanitizer on: [ 39.235323][ T3649] CPU: 0 UID: 0 PID: 3649 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00014-g0e39a731820a #0 PREEMPT(voluntary) [ 39.248600][ T3649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 39.258828][ T3649] ================================================================== [ 39.274796][ T3649] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 39.586369][ T1600] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.630625][ T1600] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.670649][ T1600] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.730129][ T1600] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.784290][ T1600] bridge_slave_0: left allmulticast mode [ 39.789993][ T1600] bridge_slave_0: left promiscuous mode [ 39.795669][ T1600] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.879493][ T1600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 39.889228][ T1600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 39.898920][ T1600] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 39.908699][ T1600] bond0 (unregistering): Released all slaves [ 39.951782][ T1600] hsr_slave_0: left promiscuous mode [ 39.958378][ T1600] hsr_slave_1: left promiscuous mode [ 39.963962][ T1600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 39.971417][ T1600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 39.980022][ T1600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 39.987507][ T1600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 39.999342][ T1600] veth1_macvtap: left promiscuous mode [ 40.004851][ T1600] veth0_macvtap: left promiscuous mode [ 40.010526][ T1600] veth1_vlan: left promiscuous mode [ 40.015799][ T1600] veth0_vlan: left promiscuous mode [ 40.068380][ T1600] team0 (unregistering): Port device team_slave_1 removed [ 40.077798][ T1600] team0 (unregistering): Port device team_slave_0 removed [ 40.361595][ T1600] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.410782][ T1600] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.450399][ T1600] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.501996][ T1600] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.560383][ T1600] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.605327][ T1600] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.640106][ T1600] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.690138][ T1600] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.779608][ T1600] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.820074][ T1600] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.869929][ T1600] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.920551][ T1600] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.063165][ T1600] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.099723][ T1600] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.139868][ T1600] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.182018][ T1600] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.281617][ T1600] bridge_slave_1: left allmulticast mode [ 41.287383][ T1600] bridge_slave_1: left promiscuous mode [ 41.293085][ T1600] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.300961][ T1600] bridge_slave_0: left allmulticast mode [ 41.306886][ T1600] bridge_slave_0: left promiscuous mode [ 41.312552][ T1600] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.320755][ T1600] bridge_slave_1: left allmulticast mode [ 41.326615][ T1600] bridge_slave_1: left promiscuous mode [ 41.332501][ T1600] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.340189][ T1600] bridge_slave_0: left allmulticast mode [ 41.345867][ T1600] bridge_slave_0: left promiscuous mode [ 41.351538][ T1600] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.360062][ T1600] bridge_slave_1: left allmulticast mode [ 41.365710][ T1600] bridge_slave_1: left promiscuous mode [ 41.371343][ T1600] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.380655][ T1600] bridge_slave_0: left allmulticast mode [ 41.386277][ T1600] bridge_slave_0: left promiscuous mode [ 41.391974][ T1600] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.399927][ T1600] bridge_slave_1: left allmulticast mode [ 41.405544][ T1600] bridge_slave_1: left promiscuous mode [ 41.411301][ T1600] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.419348][ T1600] bridge_slave_0: left allmulticast mode [ 41.424985][ T1600] bridge_slave_0: left promiscuous mode [ 41.430682][ T1600] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.558422][ T1600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.568462][ T1600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.577866][ T1600] bond0 (unregistering): Released all slaves [ 41.658595][ T1600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.668241][ T1600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.677802][ T1600] bond0 (unregistering): Released all slaves [ 41.768537][ T1600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.778839][ T1600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.788142][ T1600] bond0 (unregistering): Released all slaves [ 41.868653][ T1600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 41.878523][ T1600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 41.888218][ T1600] bond0 (unregistering): Released all slaves [ 41.927863][ T1600] hsr_slave_0: left promiscuous mode [ 41.933629][ T1600] hsr_slave_1: left promiscuous mode [ 41.939486][ T1600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.946936][ T1600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 41.954772][ T1600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 41.962205][ T1600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 41.972396][ T1600] hsr_slave_0: left promiscuous mode [ 41.978210][ T1600] hsr_slave_1: left promiscuous mode [ 41.983833][ T1600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 41.991396][ T1600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.000514][ T1600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.008019][ T1600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.018244][ T1600] hsr_slave_0: left promiscuous mode [ 42.023845][ T1600] hsr_slave_1: left promiscuous mode [ 42.029903][ T1600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.037475][ T1600] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 42.045144][ T1600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.052632][ T1600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.061457][ T1600] hsr_slave_0: left promiscuous mode [ 42.067256][ T1600] hsr_slave_1: left promiscuous mode [ 42.072749][ T1600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 42.080204][ T1600] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 42.094816][ T1600] veth1_vlan: left promiscuous mode [ 42.100234][ T1600] veth0_vlan: left promiscuous mode [ 42.105958][ T1600] veth1_vlan: left promiscuous mode [ 42.111231][ T1600] veth0_vlan: left promiscuous mode [ 42.117135][ T1600] veth1_vlan: left promiscuous mode [ 42.122382][ T1600] veth0_vlan: left promiscuous mode [ 42.128125][ T1600] veth1_macvtap: left promiscuous mode [ 42.133656][ T1600] veth0_macvtap: left promiscuous mode [ 42.139360][ T1600] veth1_vlan: left promiscuous mode [ 42.144574][ T1600] veth0_vlan: left promiscuous mode [ 42.261703][ T1600] team0 (unregistering): Port device team_slave_1 removed [ 42.270680][ T1600] team0 (unregistering): Port device team_slave_0 removed [ 42.313500][ T1600] team0 (unregistering): Port device team_slave_1 removed [ 42.322658][ T1600] team0 (unregistering): Port device team_slave_0 removed [ 42.364703][ T1600] team0 (unregistering): Port device team_slave_1 removed [ 42.374314][ T1600] team0 (unregistering): Port device team_slave_0 removed [ 42.418673][ T1600] team0 (unregistering): Port device team_slave_1 removed [ 42.428182][ T1600] team0 (unregistering): Port device team_slave_0 removed