last executing test programs: 1.877058023s ago: executing program 4 (id=340): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0xff, 0xbac, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnEy+c5v0crn3tggGpCqK07QpFbpqXYsKunDZmExKyPTDJIIJXaR1ry5EXBSkf4Lg3m5cCS7qQutfUMQiRTdtFyNnPtKxk5nGdGaOSX8/eHPe97wn8zxPTmfOe2BOA3hqTWc/0ohDEXE2iZis708jYqjaG4nYrB13/+7l+awlUam8/VsSSUTcu3t5vvFaSX07Xh+MRMTN15L490etcVfXN5bnyuXSSn18dO38paOr6xuvLJ2fO1c6V7pwYvbVE7MnZ2e7WOvtS+998cwPbzx/9frHM29+fuC7JE7HRH2uuY5umY7prb9Js0JEzHU7WE4G6vU015kUckwIAICO0qY13H9jMgbi4eJtMr79MdfkAAAAgK6oDERUAAAAgH0ucf8PAAAA+1zjewD37l6eb7R8v5HQX3fORMRUrf7G8821mUJsVrcjMRgRY78n0fxYa1L7tSc2nUX6+vtS1qJHzyF3snklIv6/3flPqvVPVZ/ibq0/jYiZLsSffmS8l+o/3YX4edcPwNPpxpnahaz1+pdurX9im+tfYZtr127kff1rrP/ut6z/HtY/0Gb999YOYxx+8NLNdnPN6793P/l5IYufbZ+oqL/hzpWIw4Xt6k+26k/a1H92hzHG529fazeX1Z/V22j9rr9yPeJIdTXXWn9D0un/Jzq6uFQuzdR+bvP66yc7x28+/1nL4jfuBfohO/9jsbvzf2mHMab+9+uhdnOPrz/9ZSh5p9obqu/5cG5tbeVYxFDyeuv+451zaRzTeI2s/hef6/z+367+7DNhs/53yP71XKlvs/HVR2KOHzn+1e7r762s/oVdnv9Pdxjjy2+uvd9uLu/6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgb0oiYiCQtbvXTtFiMGI+I/8RYWr64uvby4sUPLixkcxFTMZguLpVLMxExWRsn2fhYtf9wfPyR8WxEHIyIzyZHq+Pi/MXyQt7FAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsGU8IiYiSYsRkUbEH5NpWizmnRUAAADQdVN5JwAAAAD0nPt/AAAA2P9a7v8LfxmN9DMXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9qWDz964lUTE5qnRassM1ecGc80M6LV0Z4eN9ToPoP8G8k4AyE2hqV+pVCo5pgL0mXt8IHnM/EjbmeGu5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAP9cLh27cSiJi89RotWWG6nODuWYG9FqadwJAbgY6TSaP3QHsYYW8EwBy4x4fqK3sH1RqWudH2v7m8BNHBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDvmKi2JC1GRFrtp2mxGPGviJiKwWRxqVyaiYgDEfHT5OBwNj6Wd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB03er6xvJcuVxa0dHR6WJnNPoWa7T+Zm5zzHD7qQ6dnD+YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADIxer6xvJcuVxaWc07EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACBvq+sby3Plcmmlh528awQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID9/BgAA///GyAmy") r0 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) ftruncate(r1, 0x2007ffb) sendfile(r0, r1, 0x0, 0x1000000201005) lchown(&(0x7f0000000140)='./file0\x00', 0x0, 0xee00) 1.715930836s ago: executing program 4 (id=344): r0 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='io\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1.322625354s ago: executing program 4 (id=354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.246508886s ago: executing program 2 (id=355): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) 1.218774696s ago: executing program 4 (id=356): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1428437b3c8026bdfeb6db4ee9bcb25b1811d40a203bf40b3a7da5a8a64db04ed6dd26eea2a37229c339b1f91201c2796", 0x3d}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r1) 1.139364937s ago: executing program 4 (id=360): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0xc3}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00') syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[], 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 1.118956988s ago: executing program 2 (id=361): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ec0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r2}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0) 1.111450068s ago: executing program 1 (id=362): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 978.806431ms ago: executing program 1 (id=365): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x10, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}}, 0x0) 953.432141ms ago: executing program 1 (id=366): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000100)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x6}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}]}, 0x3, 0x570, &(0x7f0000000c00)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) fallocate(r0, 0x8, 0x0, 0x10000) 780.638244ms ago: executing program 1 (id=371): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) openat$sysfs(0xffffffffffffff9c, 0x0, 0x101001, 0x2) munlock(&(0x7f00009c1000/0x3000)=nil, 0x3000) 676.947966ms ago: executing program 1 (id=376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 625.147288ms ago: executing program 1 (id=377): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 507.55354ms ago: executing program 0 (id=378): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) unshare(0x22020600) r2 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) 465.563491ms ago: executing program 0 (id=380): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000002f0000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001140)={&(0x7f00000004c0)='mm_page_free\x00', r0, 0x0, 0x7ff}, 0x18) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 429.898811ms ago: executing program 4 (id=381): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_io_uring_setup(0x244b, &(0x7f0000000480)={0x0, 0x7736, 0x0, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000500), 0x0) 390.847173ms ago: executing program 0 (id=382): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x40) close(r0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x808, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 362.477593ms ago: executing program 0 (id=383): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=@delchain={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {}, {0x0, 0xf}}}, 0x24}}, 0x20040010) 330.794983ms ago: executing program 3 (id=384): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) mmap$perf(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000009, 0x11, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f00000001c0)={0x0, 0xaee2, 0x10, 0x2, 0x10}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x75fa, 0xe465, 0x0, 0x0, 0x41) 252.707785ms ago: executing program 0 (id=385): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f00000007c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x2, 0x0, 0x0, 0x4, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) 244.878235ms ago: executing program 3 (id=386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 212.559736ms ago: executing program 0 (id=387): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x8000000000}, 0x18) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) 206.143516ms ago: executing program 2 (id=388): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x7, 0x51, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 167.477567ms ago: executing program 3 (id=389): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r3, &(0x7f00000001c0), &(0x7f0000000400)=""/198}, 0x20) 160.424617ms ago: executing program 2 (id=390): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 130.056638ms ago: executing program 3 (id=391): r0 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) write$selinux_context(r0, &(0x7f0000000340)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) 112.330728ms ago: executing program 2 (id=392): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 64.447959ms ago: executing program 2 (id=393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000002, 0x13, r2, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 62.806049ms ago: executing program 3 (id=394): bpf$MAP_CREATE(0x0, 0x0, 0x48) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8091}, 0x80) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) 0s ago: executing program 3 (id=395): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000140)="5c000000010006", 0x7) kernel console output (not intermixed with test programs): syzkaller syzkaller login: [ 24.395080][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 24.395181][ T29] audit: type=1400 audit(1749542468.002:57): avc: denied { transition } for pid=3186 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.428533][ T29] audit: type=1400 audit(1749542468.002:58): avc: denied { noatsecure } for pid=3186 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.449316][ T29] audit: type=1400 audit(1749542468.002:59): avc: denied { write } for pid=3186 comm="sh" path="pipe:[458]" dev="pipefs" ino=458 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 24.471960][ T29] audit: type=1400 audit(1749542468.002:60): avc: denied { rlimitinh } for pid=3186 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 24.491191][ T29] audit: type=1400 audit(1749542468.002:61): avc: denied { siginh } for pid=3186 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.170' (ED25519) to the list of known hosts. [ 33.035087][ T29] audit: type=1400 audit(1749542476.642:62): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 33.036323][ T3298] cgroup: Unknown subsys name 'net' [ 33.058731][ T29] audit: type=1400 audit(1749542476.642:63): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.087969][ T29] audit: type=1400 audit(1749542476.672:64): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 33.204754][ T3298] cgroup: Unknown subsys name 'cpuset' [ 33.211174][ T3298] cgroup: Unknown subsys name 'rlimit' [ 33.362831][ T29] audit: type=1400 audit(1749542476.962:65): avc: denied { setattr } for pid=3298 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 33.387946][ T29] audit: type=1400 audit(1749542476.972:66): avc: denied { create } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.408942][ T29] audit: type=1400 audit(1749542476.972:67): avc: denied { write } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.429555][ T29] audit: type=1400 audit(1749542476.972:68): avc: denied { read } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.450298][ T29] audit: type=1400 audit(1749542476.972:69): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.476084][ T29] audit: type=1400 audit(1749542476.972:70): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 33.486474][ T3301] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 33.509592][ T29] audit: type=1400 audit(1749542477.112:71): avc: denied { relabelto } for pid=3301 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.552819][ T3298] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 34.737255][ T3309] chnl_net:caif_netlink_parms(): no params data found [ 34.755401][ T3308] chnl_net:caif_netlink_parms(): no params data found [ 34.837361][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 34.851294][ T3310] chnl_net:caif_netlink_parms(): no params data found [ 34.868458][ T3309] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.875738][ T3309] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.882888][ T3309] bridge_slave_0: entered allmulticast mode [ 34.889524][ T3309] bridge_slave_0: entered promiscuous mode [ 34.898603][ T3314] chnl_net:caif_netlink_parms(): no params data found [ 34.914829][ T3309] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.922191][ T3309] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.929718][ T3309] bridge_slave_1: entered allmulticast mode [ 34.936590][ T3309] bridge_slave_1: entered promiscuous mode [ 34.979544][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.986805][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.994225][ T3308] bridge_slave_0: entered allmulticast mode [ 35.000716][ T3308] bridge_slave_0: entered promiscuous mode [ 35.011199][ T3309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.034246][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.041453][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.048886][ T3308] bridge_slave_1: entered allmulticast mode [ 35.055482][ T3308] bridge_slave_1: entered promiscuous mode [ 35.065295][ T3309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.101957][ T3309] team0: Port device team_slave_0 added [ 35.127996][ T3309] team0: Port device team_slave_1 added [ 35.134223][ T3310] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.141909][ T3310] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.149444][ T3310] bridge_slave_0: entered allmulticast mode [ 35.156192][ T3310] bridge_slave_0: entered promiscuous mode [ 35.163031][ T3310] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.170430][ T3310] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.177995][ T3310] bridge_slave_1: entered allmulticast mode [ 35.184622][ T3310] bridge_slave_1: entered promiscuous mode [ 35.192301][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.232397][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.239619][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.246927][ T3315] bridge_slave_0: entered allmulticast mode [ 35.253791][ T3315] bridge_slave_0: entered promiscuous mode [ 35.261548][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.270861][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.278163][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.285512][ T3315] bridge_slave_1: entered allmulticast mode [ 35.292124][ T3315] bridge_slave_1: entered promiscuous mode [ 35.299220][ T3314] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.307107][ T3314] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.314335][ T3314] bridge_slave_0: entered allmulticast mode [ 35.321033][ T3314] bridge_slave_0: entered promiscuous mode [ 35.328081][ T3314] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.335337][ T3314] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.342845][ T3314] bridge_slave_1: entered allmulticast mode [ 35.349789][ T3314] bridge_slave_1: entered promiscuous mode [ 35.356885][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.364192][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.390617][ T3309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.403283][ T3310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.427820][ T3309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.434929][ T3309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.461191][ T3309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.478235][ T3310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.507496][ T3308] team0: Port device team_slave_0 added [ 35.519299][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.529785][ T3314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.540385][ T3308] team0: Port device team_slave_1 added [ 35.547055][ T3310] team0: Port device team_slave_0 added [ 35.554066][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.569856][ T3314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.585433][ T3310] team0: Port device team_slave_1 added [ 35.611134][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.618339][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.644720][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.667425][ T3314] team0: Port device team_slave_0 added [ 35.675277][ T3314] team0: Port device team_slave_1 added [ 35.686319][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.693494][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.719981][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.738466][ T3315] team0: Port device team_slave_0 added [ 35.760154][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.767340][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.793691][ T3310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.807745][ T3310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.814951][ T3310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.841460][ T3310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.855612][ T3309] hsr_slave_0: entered promiscuous mode [ 35.861735][ T3309] hsr_slave_1: entered promiscuous mode [ 35.868697][ T3315] team0: Port device team_slave_1 added [ 35.879682][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.886768][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.912814][ T3314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.924395][ T3314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.931382][ T3314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 35.957770][ T3314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.995534][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.002559][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.029111][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.051399][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.058749][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.085280][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.109742][ T3310] hsr_slave_0: entered promiscuous mode [ 36.115890][ T3310] hsr_slave_1: entered promiscuous mode [ 36.122200][ T3310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.129940][ T3310] Cannot create hsr debugfs directory [ 36.149692][ T3314] hsr_slave_0: entered promiscuous mode [ 36.155928][ T3314] hsr_slave_1: entered promiscuous mode [ 36.161952][ T3314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.171084][ T3314] Cannot create hsr debugfs directory [ 36.185083][ T3308] hsr_slave_0: entered promiscuous mode [ 36.191205][ T3308] hsr_slave_1: entered promiscuous mode [ 36.197234][ T3308] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.204934][ T3308] Cannot create hsr debugfs directory [ 36.277978][ T3315] hsr_slave_0: entered promiscuous mode [ 36.284432][ T3315] hsr_slave_1: entered promiscuous mode [ 36.290398][ T3315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.298162][ T3315] Cannot create hsr debugfs directory [ 36.404673][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 36.428204][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 36.448536][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 36.465369][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 36.493664][ T3308] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.519165][ T3308] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.533295][ T3308] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.548723][ T3308] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.561708][ T3314] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.576970][ T3314] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.590516][ T3314] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.605750][ T3314] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.646819][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.656503][ T3310] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 36.674742][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.682694][ T3310] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 36.692118][ T3310] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 36.701455][ T3310] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 36.729902][ T1741] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.738443][ T1741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.755036][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.766106][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.773574][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.787343][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.806414][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.821180][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.833123][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.891006][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.903369][ T3314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 36.915107][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.922403][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.951894][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.959173][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.976383][ T3314] 8021q: adding VLAN 0 to HW filter on device team0 [ 36.989843][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.997425][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.014643][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.022125][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.039392][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.062787][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.084261][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.104819][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.113387][ T1741] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.120853][ T1741] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.140301][ T3314] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 37.151169][ T3314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 37.164105][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.181121][ T1741] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.188490][ T1741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.222527][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.245014][ T1680] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.252221][ T1680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.261541][ T1680] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.268948][ T1680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.348291][ T3314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.410561][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.445115][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.507789][ T3309] veth0_vlan: entered promiscuous mode [ 37.522967][ T3308] veth0_vlan: entered promiscuous mode [ 37.538387][ T3308] veth1_vlan: entered promiscuous mode [ 37.550885][ T3309] veth1_vlan: entered promiscuous mode [ 37.609681][ T3314] veth0_vlan: entered promiscuous mode [ 37.626782][ T3314] veth1_vlan: entered promiscuous mode [ 37.635736][ T3315] veth0_vlan: entered promiscuous mode [ 37.646823][ T3308] veth0_macvtap: entered promiscuous mode [ 37.662055][ T3315] veth1_vlan: entered promiscuous mode [ 37.675997][ T3308] veth1_macvtap: entered promiscuous mode [ 37.682998][ T3309] veth0_macvtap: entered promiscuous mode [ 37.693047][ T3309] veth1_macvtap: entered promiscuous mode [ 37.720657][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.731828][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.745332][ T3314] veth0_macvtap: entered promiscuous mode [ 37.753690][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.761967][ T3315] veth0_macvtap: entered promiscuous mode [ 37.774166][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.790520][ T3314] veth1_macvtap: entered promiscuous mode [ 37.797951][ T3309] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.807034][ T3309] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.816063][ T3309] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.825202][ T3309] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.838109][ T3308] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.847000][ T3308] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.856353][ T3308] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.865448][ T3308] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.878135][ T3315] veth1_macvtap: entered promiscuous mode [ 37.893701][ T3310] veth0_vlan: entered promiscuous mode [ 37.915884][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.933679][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.943429][ T3314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.956222][ T3309] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 37.963126][ T3314] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.980914][ T3314] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.990072][ T3314] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.999245][ T3314] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.010989][ T3310] veth1_vlan: entered promiscuous mode [ 38.021372][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.037888][ T3315] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.046819][ T3315] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.055671][ T3315] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.064578][ T3315] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.079238][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 38.079256][ T29] audit: type=1400 audit(1749542481.682:93): avc: denied { map_create } for pid=3477 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.085256][ T3310] veth0_macvtap: entered promiscuous mode [ 38.088807][ T29] audit: type=1400 audit(1749542481.692:94): avc: denied { map_read map_write } for pid=3477 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.132241][ T29] audit: type=1400 audit(1749542481.722:95): avc: denied { prog_load } for pid=3477 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.151317][ T29] audit: type=1400 audit(1749542481.722:96): avc: denied { bpf } for pid=3477 comm="syz.2.3" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.172163][ T29] audit: type=1400 audit(1749542481.722:97): avc: denied { perfmon } for pid=3477 comm="syz.2.3" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 38.193089][ T29] audit: type=1400 audit(1749542481.722:98): avc: denied { prog_run } for pid=3477 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.228663][ T3310] veth1_macvtap: entered promiscuous mode [ 38.282694][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.319423][ T29] audit: type=1400 audit(1749542481.922:99): avc: denied { create } for pid=3485 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.347054][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.384453][ T3310] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.393448][ T3310] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.402574][ T3310] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.411702][ T3310] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.428533][ T29] audit: type=1400 audit(1749542481.922:100): avc: denied { bind } for pid=3485 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.447847][ T29] audit: type=1400 audit(1749542481.922:101): avc: denied { listen } for pid=3485 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 38.467217][ T29] audit: type=1400 audit(1749542481.982:102): avc: denied { create } for pid=3489 comm="syz.0.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 38.495767][ T3493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8'. [ 38.641905][ T1680] nci: nci_rsp_packet: unknown rsp opcode 0x102 [ 38.736302][ T3523] loop1: detected capacity change from 0 to 512 [ 38.754249][ T3523] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 38.780482][ T3523] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 38.809598][ T3523] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 38.844718][ T3523] +}[@ (3523) used greatest stack depth: 10560 bytes left [ 38.855963][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.941431][ T3540] netlink: 'syz.4.22': attribute type 10 has an invalid length. [ 38.950999][ T3540] netlink: 40 bytes leftover after parsing attributes in process `syz.4.22'. [ 38.969474][ T3540] dummy0: entered promiscuous mode [ 38.982599][ T3540] bridge0: port 3(dummy0) entered blocking state [ 38.989576][ T3540] bridge0: port 3(dummy0) entered disabled state [ 39.004307][ T3540] dummy0: entered allmulticast mode [ 39.010469][ T3540] bridge0: port 3(dummy0) entered blocking state [ 39.016974][ T3540] bridge0: port 3(dummy0) entered forwarding state [ 39.156733][ T3555] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 39.173248][ T3553] ------------[ cut here ]------------ [ 39.178875][ T3553] WARNING: CPU: 1 PID: 3553 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x218/0x360 [ 39.189507][ T3553] Modules linked in: [ 39.193873][ T3553] CPU: 1 UID: 0 PID: 3553 Comm: syz.1.29 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 39.206818][ T3553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 39.217674][ T3553] RIP: 0010:__alloc_frozen_pages_noprof+0x218/0x360 [ 39.224549][ T3553] Code: 83 3d 63 24 50 05 02 72 0e 48 83 b8 e0 fb ff ff 00 0f 84 48 ff ff ff 81 ca 00 01 00 00 e9 3d ff ff ff c6 05 1a 1d 4c 05 01 90 <0f> 0b 90 31 c0 eb 84 a9 00 00 08 00 75 52 44 89 f1 81 e1 7f ff ff [ 39.244838][ T3553] RSP: 0018:ffffc900019c7a30 EFLAGS: 00010246 [ 39.251029][ T3553] RAX: e824aaba10bf3c00 RBX: 000000000000000f RCX: 0000000000000000 [ 39.259525][ T3553] RDX: 0000000000000000 RSI: 000000000000000f RDI: 0000000000040dc0 [ 39.268240][ T3553] RBP: 0000000000000dc0 R08: ffff888109abab18 R09: 0000000000000000 [ 39.276755][ T3553] R10: ffff88811a64a728 R11: 000188811a64a728 R12: ffffc900019c7d28 [ 39.285662][ T3553] R13: 0000000000004494 R14: 0000000000040dc0 R15: 0000000000000000 [ 39.294193][ T3553] FS: 00007f6dd5a376c0(0000) GS:ffff8882aef3c000(0000) knlGS:0000000000000000 [ 39.303419][ T3553] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.310499][ T3553] CR2: 0000200000004000 CR3: 0000000119f80000 CR4: 00000000003506f0 [ 39.319721][ T3553] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.328855][ T3553] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.336948][ T3553] Call Trace: [ 39.340439][ T3553] [ 39.343555][ T3553] __alloc_pages_noprof+0x9/0x20 [ 39.348610][ T3553] ___kmalloc_large_node+0x73/0x140 [ 39.354093][ T3553] __kmalloc_large_node_noprof+0x16/0xa0 [ 39.359949][ T3553] __kmalloc_noprof+0x2ab/0x3e0 [ 39.365176][ T3553] ? hashtab_init+0x9b/0xe0 [ 39.369795][ T3553] ? common_read+0x3f/0x300 [ 39.374792][ T3553] hashtab_init+0x9b/0xe0 [ 39.379469][ T3553] symtab_init+0x2c/0x40 [ 39.384066][ T3553] common_read+0x10b/0x300 [ 39.388768][ T3553] ? hashtab_init+0x6e/0xe0 [ 39.393329][ T3553] ? __pfx_common_read+0x10/0x10 [ 39.398667][ T3553] policydb_read+0x652/0x1330 [ 39.403554][ T3553] ? security_load_policy+0x90/0x890 [ 39.409112][ T3553] security_load_policy+0xba/0x890 [ 39.414459][ T3553] ? rep_movs_alternative+0x4a/0x90 [ 39.420037][ T3553] sel_write_load+0x1d4/0x380 [ 39.425173][ T3553] ? __pfx_sel_write_load+0x10/0x10 [ 39.430604][ T3553] vfs_write+0x266/0x8e0 [ 39.434937][ T3553] ? __rcu_read_unlock+0x4f/0x70 [ 39.440250][ T3553] ? __fget_files+0x184/0x1c0 [ 39.445243][ T3553] ksys_write+0xda/0x1a0 [ 39.449634][ T3553] __x64_sys_write+0x40/0x50 [ 39.450215][ T3549] netlink: 'syz.4.27': attribute type 1 has an invalid length. [ 39.454558][ T3553] x64_sys_call+0x2cdd/0x2fb0 [ 39.467416][ T3553] do_syscall_64+0xd2/0x200 [ 39.472113][ T3553] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 39.478816][ T3553] ? clear_bhb_loop+0x40/0x90 [ 39.483900][ T3553] ? clear_bhb_loop+0x40/0x90 [ 39.488719][ T3553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.495057][ T3553] RIP: 0033:0x7f6dd73ce929 [ 39.499876][ T3553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 39.519834][ T3553] RSP: 002b:00007f6dd5a37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 39.528529][ T3553] RAX: ffffffffffffffda RBX: 00007f6dd75f5fa0 RCX: 00007f6dd73ce929 [ 39.536721][ T3553] RDX: 00000000000044f0 RSI: 0000200000000000 RDI: 0000000000000003 [ 39.545358][ T3553] RBP: 00007f6dd7450b39 R08: 0000000000000000 R09: 0000000000000000 [ 39.553747][ T3553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.562183][ T3553] R13: 0000000000000000 R14: 00007f6dd75f5fa0 R15: 00007ffc3d2a0768 [ 39.570615][ T3553] [ 39.573683][ T3553] ---[ end trace 0000000000000000 ]--- [ 39.585192][ T3553] SELinux: failed to load policy [ 39.620235][ T3563] netlink: 48 bytes leftover after parsing attributes in process `syz.4.34'. [ 39.643642][ T3566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 39.660864][ T3563] netlink: 44 bytes leftover after parsing attributes in process `syz.4.34'. [ 39.811640][ T3566] syz.1.36 (3566) used greatest stack depth: 10112 bytes left [ 39.880229][ T3581] capability: warning: `syz.1.41' uses deprecated v2 capabilities in a way that may be insecure [ 40.089685][ T3603] netlink: 'syz.0.51': attribute type 1 has an invalid length. [ 40.098667][ T3603] netlink: 'syz.0.51': attribute type 2 has an invalid length. [ 40.115742][ T3603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.51'. [ 40.187308][ T3614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=3614 comm=syz.0.57 [ 40.200139][ T3614] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=3614 comm=syz.0.57 [ 40.640049][ T3641] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 40.771126][ T3655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.77'. [ 41.143818][ T3676] unsupported nla_type 52263 [ 41.295298][ T3684] loop0: detected capacity change from 0 to 128 [ 41.330359][ T3684] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 41.353294][ T3684] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 41.406959][ T3684] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.482312][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 41.652897][ T3706] loop3: detected capacity change from 0 to 1024 [ 41.666464][ T3708] loop4: detected capacity change from 0 to 512 [ 41.674120][ T3706] EXT4-fs: Ignoring removed bh option [ 41.674247][ T3708] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.681209][ T3706] EXT4-fs: Ignoring removed nomblk_io_submit option [ 41.731638][ T3708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.752652][ T3706] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.800135][ T3708] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 41.988960][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.005331][ T3735] loop0: detected capacity change from 0 to 512 [ 42.041347][ T3735] EXT4-fs error (device loop0): ext4_orphan_get:1419: comm syz.0.109: bad orphan inode 11862016 [ 42.091333][ T3735] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 42.127477][ T3735] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.189757][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 42.260171][ T3749] Cannot find del_set index 0 as target [ 42.575550][ T3768] 9pnet: p9_errstr2errno: server reported unknown error b0x00000000000000040000000000000000000418446744073709551615 [ 42.634478][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.685563][ T3774] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 42.702167][ T3774] vhci_hcd: default hub control req: 1f03 v0017 i0001 l0 [ 42.786413][ T3783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.805188][ T3783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.958125][ T3794] loop3: detected capacity change from 0 to 8192 [ 43.153613][ T3813] netlink: 'syz.2.145': attribute type 3 has an invalid length. [ 43.233008][ T3823] netlink: 20 bytes leftover after parsing attributes in process `syz.2.150'. [ 43.244516][ T3823] Zero length message leads to an empty skb [ 43.275288][ T3827] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.284395][ T3827] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 43.307122][ T3829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.153'. [ 43.371020][ T3835] SELinux: failed to load policy [ 43.439194][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 43.439271][ T29] audit: type=1326 audit(1749542486.738:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf1a5e929 code=0x7ffc0000 [ 43.469535][ T29] audit: type=1326 audit(1749542486.738:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf1a5e929 code=0x7ffc0000 [ 43.560438][ T29] audit: type=1400 audit(1749542486.785:335): avc: denied { create } for pid=3842 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 43.580308][ T29] audit: type=1326 audit(1749542486.785:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bf1a5e929 code=0x7ffc0000 [ 43.604910][ T29] audit: type=1326 audit(1749542486.794:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf1a5e929 code=0x7ffc0000 [ 43.629168][ T29] audit: type=1326 audit(1749542486.794:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf1a5e929 code=0x7ffc0000 [ 43.652747][ T29] audit: type=1400 audit(1749542486.794:339): avc: denied { ioctl } for pid=3842 comm="syz.0.160" path="socket:[4018]" dev="sockfs" ino=4018 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 43.677311][ T29] audit: type=1326 audit(1749542486.794:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8bf1a5e929 code=0x7ffc0000 [ 43.701630][ T29] audit: type=1326 audit(1749542486.794:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf1a5e929 code=0x7ffc0000 [ 43.726692][ T29] audit: type=1326 audit(1749542486.794:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3840 comm="syz.4.159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8bf1a5e929 code=0x7ffc0000 [ 43.918042][ T3882] __nla_validate_parse: 2 callbacks suppressed [ 43.918060][ T3882] netlink: 20 bytes leftover after parsing attributes in process `syz.2.178'. [ 43.953958][ T3882] x_tables: ip_tables: udp match: only valid for protocol 17 [ 44.065044][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 44.074717][ T3897] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 44.080168][ T3897] netlink: 'syz.3.185': attribute type 1 has an invalid length. [ 44.087750][ T3899] netlink: 8 bytes leftover after parsing attributes in process `syz.4.187'. [ 44.096549][ T3897] netlink: 252 bytes leftover after parsing attributes in process `syz.3.185'. [ 44.214647][ T3913] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 44.478635][ T3941] SELinux: Context is not valid (left unmapped). [ 44.904659][ T3979] SELinux: ebitmap: truncated map [ 44.914042][ T3979] SELinux: failed to load policy [ 45.015316][ T4002] loop0: detected capacity change from 0 to 512 [ 45.026962][ T4002] ======================================================= [ 45.026962][ T4002] WARNING: The mand mount option has been deprecated and [ 45.026962][ T4002] and is ignored by this kernel. Remove the mand [ 45.026962][ T4002] option from the mount to silence this warning. [ 45.026962][ T4002] ======================================================= [ 45.076750][ T4002] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 45.107870][ T4002] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 45.137227][ T4002] System zones: 0-2, 18-18, 34-34 [ 45.160573][ T4002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.175400][ T4002] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.226466][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.329426][ T4031] loop3: detected capacity change from 0 to 2048 [ 45.351642][ T4034] netlink: 'syz.4.231': attribute type 1 has an invalid length. [ 45.359622][ T4034] netlink: 224 bytes leftover after parsing attributes in process `syz.4.231'. [ 45.390864][ T4031] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.408809][ T4039] sd 0:0:1:0: device reset [ 45.521977][ T4031] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 45.554289][ T4031] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 45.566685][ T4031] EXT4-fs (loop3): This should not happen!! Data will be lost [ 45.566685][ T4031] [ 45.576490][ T4031] EXT4-fs (loop3): Total free blocks count 0 [ 45.582689][ T4031] EXT4-fs (loop3): Free/Dirty block details [ 45.588913][ T4031] EXT4-fs (loop3): free_blocks=4096 [ 45.594235][ T4031] EXT4-fs (loop3): dirty_blocks=512 [ 45.599922][ T4031] EXT4-fs (loop3): Block reservation details [ 45.606403][ T4031] EXT4-fs (loop3): i_reserved_data_blocks=32 [ 45.694481][ T4031] syz.3.230 (4031) used greatest stack depth: 10024 bytes left [ 45.704807][ T1741] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28 [ 45.865431][ T4097] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 45.888468][ T4102] loop0: detected capacity change from 0 to 256 [ 45.961960][ T4102] FAT-fs (loop0): Directory bread(block 64) failed [ 45.980910][ T4102] FAT-fs (loop0): Directory bread(block 65) failed [ 45.996605][ T4112] loop3: detected capacity change from 0 to 128 [ 46.012322][ T4102] FAT-fs (loop0): Directory bread(block 66) failed [ 46.026239][ T4112] FAT-fs (loop3): error, invalid FAT chain (i_pos 548, last_block 8) [ 46.035294][ T4102] FAT-fs (loop0): Directory bread(block 67) failed [ 46.035345][ T4102] FAT-fs (loop0): Directory bread(block 68) failed [ 46.035369][ T4102] FAT-fs (loop0): Directory bread(block 69) failed [ 46.035399][ T4102] FAT-fs (loop0): Directory bread(block 70) failed [ 46.035482][ T4102] FAT-fs (loop0): Directory bread(block 71) failed [ 46.035579][ T4102] FAT-fs (loop0): Directory bread(block 72) failed [ 46.035609][ T4102] FAT-fs (loop0): Directory bread(block 73) failed [ 46.063079][ T4102] usb usb1: usbfs: process 4102 (syz.0.245) did not claim interface 0 before use [ 46.069837][ T4112] FAT-fs (loop3): Filesystem has been set read-only [ 46.123233][ T4112] FAT-fs (loop3): error, corrupted file size (i_pos 548, 522) [ 46.131410][ C1] hrtimer: interrupt took 25507 ns [ 46.147339][ T4121] process 'syz.4.249' launched './file1' with NULL argv: empty string added [ 46.648130][ T4198] 9pnet: p9_errstr2errno: server reported unknown error @pA;KZ44/@qkp [ 46.648130][ T4198] C<+ [ 46.669194][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 46.684768][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 46.735767][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 46.753177][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 46.801951][ T4197] netlink: 4 bytes leftover after parsing attributes in process `syz.4.267'. [ 46.996058][ T4242] serio: Serial port ptm1 [ 47.054419][ T4244] vhci_hcd: invalid port number 96 [ 47.060419][ T4244] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 47.122241][ T4246] SELinux: failed to load policy [ 47.278125][ T4252] SELinux: security_context_str_to_sid () failed with errno=-22 [ 47.624038][ T4278] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 47.733377][ T4287] loop1: detected capacity change from 0 to 128 [ 47.746836][ T4287] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 47.929559][ T4303] netlink: 'syz.4.305': attribute type 3 has an invalid length. [ 47.956444][ T4307] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 48.027457][ T4316] netem: unknown loss type 13 [ 48.032279][ T4316] netem: change failed [ 48.620518][ T4375] loop4: detected capacity change from 0 to 4096 [ 48.636713][ T4375] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.809309][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 48.809327][ T29] audit: type=1400 audit(1749542491.752:483): avc: denied { create } for pid=4387 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 48.821814][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.868676][ T29] audit: type=1400 audit(1749542491.789:484): avc: denied { write } for pid=4387 comm="syz.2.345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 48.905710][ T29] audit: type=1400 audit(1749542491.846:485): avc: denied { ioctl } for pid=4396 comm="syz.1.349" path="socket:[7211]" dev="sockfs" ino=7211 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 48.941802][ T29] audit: type=1400 audit(1749542491.874:486): avc: denied { write } for pid=4398 comm="syz.2.350" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.038641][ T29] audit: type=1400 audit(1749542491.967:487): avc: denied { mounton } for pid=4400 comm="syz.4.344" path="/proc/146/task" dev="proc" ino=7224 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 49.071564][ T4407] capability: warning: `syz.0.351' uses 32-bit capabilities (legacy support in use) [ 49.089284][ T4406] xt_hashlimit: size too large, truncated to 1048576 [ 49.098224][ T4406] xt_hashlimit: Unknown mode mask 80FF, kernel too old? [ 49.141215][ T29] audit: type=1326 audit(1749542492.070:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0af17e929 code=0x7ffc0000 [ 49.182310][ T29] audit: type=1326 audit(1749542492.070:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7fe0af17e929 code=0x7ffc0000 [ 49.207069][ T29] audit: type=1326 audit(1749542492.070:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0af17e929 code=0x7ffc0000 [ 49.232983][ T29] audit: type=1326 audit(1749542492.098:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4408 comm="syz.0.353" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0af17e929 code=0x7ffc0000 [ 49.278752][ T29] audit: type=1400 audit(1749542492.192:492): avc: denied { write } for pid=4414 comm="syz.0.357" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 49.370378][ T4425] __nla_validate_parse: 4 callbacks suppressed [ 49.370455][ T4425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 49.397553][ T4429] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.422956][ T4429] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.435385][ T4425] IPVS: Error joining to the multicast group [ 49.522687][ T4437] loop1: detected capacity change from 0 to 1024 [ 49.537649][ T4439] loop0: detected capacity change from 0 to 128 [ 49.554884][ T4437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.590746][ T4439] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 49.617284][ T4439] ext4 filesystem being mounted at /86/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.655560][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 49.675881][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.697587][ T4449] vlan2: entered allmulticast mode [ 49.703099][ T4449] dummy0: entered allmulticast mode [ 49.782293][ T4457] loop3: detected capacity change from 0 to 256 [ 49.797951][ T4457] FAT-fs (loop3): bogus number of FAT sectors [ 49.804327][ T4457] FAT-fs (loop3): Can't find a valid FAT filesystem [ 49.827965][ T4460] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4460 comm=syz.0.375 [ 49.842525][ T4460] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4460 comm=syz.0.375 [ 49.867435][ T4463] loop1: detected capacity change from 0 to 1024 [ 49.882834][ T4463] EXT4-fs: Ignoring removed bh option [ 49.889141][ T4463] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.902980][ T4463] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.450807][ T4491] Falling back ldisc for ttyS3. [ 50.504606][ T4463] ================================================================== [ 50.516154][ T4463] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 50.525092][ T4463] [ 50.527744][ T4463] write to 0xffff888106b153ec of 4 bytes by task 4469 on cpu 0: [ 50.535529][ T4463] xas_set_mark+0x12b/0x140 [ 50.540864][ T4463] __folio_start_writeback+0x1dd/0x440 [ 50.547676][ T4463] ext4_bio_write_folio+0x5ad/0x9f0 [ 50.554583][ T4463] mpage_submit_folio+0xe4/0x170 [ 50.560348][ T4463] mpage_process_page_bufs+0x39b/0x4a0 [ 50.567352][ T4463] mpage_prepare_extent_to_map+0x741/0xaa0 [ 50.573421][ T4463] ext4_do_writepages+0xa1a/0x21c0 [ 50.578780][ T4463] ext4_writepages+0x176/0x300 [ 50.583602][ T4463] do_writepages+0x1c6/0x310 [ 50.588509][ T4463] file_write_and_wait_range+0x156/0x2c0 [ 50.594560][ T4463] generic_buffers_fsync_noflush+0x45/0x120 [ 50.601883][ T4463] ext4_sync_file+0x1ab/0x690 [ 50.607156][ T4463] vfs_fsync_range+0x10d/0x130 [ 50.612883][ T4463] ext4_buffered_write_iter+0x34f/0x3c0 [ 50.618899][ T4463] ext4_file_write_iter+0x383/0xf00 [ 50.625208][ T4463] iter_file_splice_write+0x5f2/0x970 [ 50.631463][ T4463] direct_splice_actor+0x156/0x2a0 [ 50.636835][ T4463] splice_direct_to_actor+0x312/0x680 [ 50.643328][ T4463] do_splice_direct+0xda/0x150 [ 50.649511][ T4463] do_sendfile+0x380/0x650 [ 50.654714][ T4463] __x64_sys_sendfile64+0x105/0x150 [ 50.661050][ T4463] x64_sys_call+0xb39/0x2fb0 [ 50.666121][ T4463] do_syscall_64+0xd2/0x200 [ 50.671831][ T4463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.679940][ T4463] [ 50.682652][ T4463] read to 0xffff888106b153ec of 4 bytes by task 4463 on cpu 1: [ 50.691996][ T4463] file_write_and_wait_range+0x10e/0x2c0 [ 50.698668][ T4463] generic_buffers_fsync_noflush+0x45/0x120 [ 50.705188][ T4463] ext4_sync_file+0x1ab/0x690 [ 50.710211][ T4463] vfs_fsync_range+0x10d/0x130 [ 50.715296][ T4463] ext4_buffered_write_iter+0x34f/0x3c0 [ 50.722438][ T4463] ext4_file_write_iter+0x383/0xf00 [ 50.729920][ T4463] iter_file_splice_write+0x5f2/0x970 [ 50.737114][ T4463] direct_splice_actor+0x156/0x2a0 [ 50.744212][ T4463] splice_direct_to_actor+0x312/0x680 [ 50.751238][ T4463] do_splice_direct+0xda/0x150 [ 50.757178][ T4463] do_sendfile+0x380/0x650 [ 50.762375][ T4463] __x64_sys_sendfile64+0x105/0x150 [ 50.768258][ T4463] x64_sys_call+0xb39/0x2fb0 [ 50.773293][ T4463] do_syscall_64+0xd2/0x200 [ 50.778385][ T4463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.784940][ T4463] [ 50.787428][ T4463] value changed: 0x0a000021 -> 0x04000021 [ 50.794337][ T4463] [ 50.797075][ T4463] Reported by Kernel Concurrency Sanitizer on: [ 50.804339][ T4463] CPU: 1 UID: 0 PID: 4463 Comm: syz.1.377 Tainted: G W 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(voluntary) [ 50.819295][ T4463] Tainted: [W]=WARN [ 50.823426][ T4463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 50.833783][ T4463] ================================================================== [ 50.940875][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.