last executing test programs: 2.708119287s ago: executing program 1 (id=2): getdents64(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x8, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rt_sigqueueinfo(0x0, 0x7, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000005c0)=ANY=[@ANYBLOB="0180c2000003daefbac8553b8847ff21"], &(0x7f0000000280)={0x0, 0x3, [0xa5c, 0x6b4, 0x6e, 0xc4e]}) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time_for_children\x00') 2.5773335s ago: executing program 3 (id=10): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc9, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.429952703s ago: executing program 3 (id=13): socket$vsock_stream(0x28, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 2.415210674s ago: executing program 1 (id=15): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x80000000, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b7}, @TCA_FQ_PIE_ECN={0x8, 0xa, 0x1}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.345546445s ago: executing program 1 (id=16): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ppoll(&(0x7f00000000c0)=[{r1, 0x9}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0xffffeff7, 0x10100150, 0x8, 0x7, 0x2f, "fc2aff7f87680000810000001000007fcb3678", 0x0, 0xd}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xf) 2.209431729s ago: executing program 3 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000500)={@val={0x0, 0x22f0}, @void, @eth={@random="414f670bc70e", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @generic={0x1, 0x6, '\x00\a\x00', 0x8, 0x2c, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {[@dstopts={0x2f}]}}}}}}, 0x42) 2.12061069s ago: executing program 3 (id=24): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe5, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xfffd}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r2, {}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}}, 0x0) 2.044109572s ago: executing program 3 (id=28): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r1 = socket(0x1, 0x3, 0x0) recvmsg(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) 1.912192106s ago: executing program 2 (id=32): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = add_key$fscrypt_v1(&(0x7f0000002a00), &(0x7f0000000500)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa00", 0x29}, 0x48, 0xffffffffffffffff) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000380)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "6075ae1e1ee721441705322225930e6c1e3e1000000000000000d7cf6e021a805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x25}, 0x88, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x4, r2, r1, r1, 0x0) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 1.857960107s ago: executing program 2 (id=34): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x54bd854}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtclass={0x24, 0x28, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xa}, {0x7}, {0xfff1, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) 1.826872448s ago: executing program 2 (id=36): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x8, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x4f}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000400)="c274386d178550cb864bd57221bc", 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.643748542s ago: executing program 2 (id=39): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000300)=""/140, 0x8c}], 0x1) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1.545220074s ago: executing program 2 (id=41): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 1.491131336s ago: executing program 1 (id=42): r0 = creat(&(0x7f0000000200)='./file1\x00', 0x12e) close(r0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1}, 0xc) listen(r1, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x200000, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.475002516s ago: executing program 0 (id=43): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@can={{0x4, 0x0, 0x0, 0x1}, 0x5, 0x1, 0x0, 0x0, "71949a1857e8bcf3"}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0xd209f6d81082d3d6) recvmmsg(r0, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}, 0xf8}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001480)=""/16, 0x10}], 0x1}, 0x80000000}], 0x2, 0x40000102, 0x0) 1.446561557s ago: executing program 0 (id=44): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@barrier}]}, 0x1, 0x5b7, &(0x7f0000001380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000180)="f7", 0x1, 0x200980) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x101042, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x121) 1.333276519s ago: executing program 4 (id=45): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x800718, &(0x7f00000003c0)={[{@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x40000ff}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x60}}, {@nobh}, {@resgid}, {@resuid}, {@nombcache}, {@noblock_validity}, {@usrquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x22, 0x4a3, &(0x7f0000000980)="$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") perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000380)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@noblock_validity}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xc00) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x183042, 0x25) 1.326305589s ago: executing program 2 (id=46): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_config_ext={0x9, 0x10000000002}, 0x20084, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) madvise(&(0x7f0000eb3000/0x1000)=nil, 0x1000, 0x12) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f00002a4000/0x2000)=nil, 0x2000) munlockall() 1.099041125s ago: executing program 0 (id=47): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22) 758.845753ms ago: executing program 3 (id=48): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x2b, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b15210000000000006456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fbad08bc630136f9ef2ef8b00"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 632.148965ms ago: executing program 1 (id=49): syz_open_dev$sg(0x0, 0x0, 0x8002) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0x2b23}, 0x11ecca, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x4018, &(0x7f0000001500), 0x1, 0xbdc, &(0x7f0000000500)="$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") sync() fcntl$lock(0xffffffffffffffff, 0x26, 0x0) sync() 483.853869ms ago: executing program 0 (id=50): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x115) fallocate(r1, 0x0, 0x0, 0x8800000) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x75, 0x5000, 0x0, 0x3) 274.313354ms ago: executing program 0 (id=51): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000002200)=[{{&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f00000000c0)="a905000000017464000100000000000000e5c064", 0x14}], 0x1}}], 0x1, 0x40000) 242.297725ms ago: executing program 4 (id=52): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000020000000200000004"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10) 194.832956ms ago: executing program 4 (id=53): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x2c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x2c}}, 0x20000034) 172.490356ms ago: executing program 4 (id=54): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) r2 = socket$unix(0x1, 0x5, 0x0) dup3(r2, r1, 0x80000) 137.741727ms ago: executing program 0 (id=55): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x1000}, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 127.510657ms ago: executing program 4 (id=56): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_TOS={0x5, 0x5, 0x1}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000440)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 18.98496ms ago: executing program 4 (id=57): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4050) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x3, 0x79b}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=ANY=[@ANYBLOB='6', @ANYRES8=r0], 0x20}}, 0x4000) io_uring_enter(r1, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 0s ago: executing program 1 (id=58): r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r1, r1) r2 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x10000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.86' (ED25519) to the list of known hosts. [ 32.623903][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 32.623920][ T28] audit: type=1400 audit(1784254174.295:126): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 32.653226][ T28] audit: type=1400 audit(1784254174.325:127): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.655440][ T3285] cgroup: Unknown subsys name 'net' [ 32.681179][ T28] audit: type=1400 audit(1784254174.355:128): avc: denied { unmount } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 32.819926][ T3285] cgroup: Unknown subsys name 'cpuset' [ 32.826211][ T3285] cgroup: Unknown subsys name 'rlimit' [ 32.957133][ T28] audit: type=1400 audit(1784254174.625:129): avc: denied { setattr } for pid=3285 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.980784][ T28] audit: type=1400 audit(1784254174.635:130): avc: denied { create } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.011006][ T28] audit: type=1400 audit(1784254174.635:131): avc: denied { write } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.031565][ T28] audit: type=1400 audit(1784254174.635:132): avc: denied { read } for pid=3285 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 33.052101][ T28] audit: type=1400 audit(1784254174.655:133): avc: denied { mounton } for pid=3285 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 33.053936][ T3288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 33.077144][ T28] audit: type=1400 audit(1784254174.655:134): avc: denied { mount } for pid=3285 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 33.109154][ T28] audit: type=1400 audit(1784254174.675:135): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 33.143915][ T3285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 35.207157][ T3298] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.214402][ T3298] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.221639][ T3298] bridge_slave_0: entered allmulticast mode [ 35.228108][ T3298] bridge_slave_0: entered promiscuous mode [ 35.247874][ T3298] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.255154][ T3298] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.262391][ T3298] bridge_slave_1: entered allmulticast mode [ 35.268852][ T3298] bridge_slave_1: entered promiscuous mode [ 35.328924][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.336186][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.343486][ T3301] bridge_slave_0: entered allmulticast mode [ 35.349946][ T3301] bridge_slave_0: entered promiscuous mode [ 35.361814][ T3298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.380506][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.387685][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.394953][ T3301] bridge_slave_1: entered allmulticast mode [ 35.401412][ T3301] bridge_slave_1: entered promiscuous mode [ 35.413561][ T3298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.427548][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.434783][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.441971][ T3305] bridge_slave_0: entered allmulticast mode [ 35.448408][ T3305] bridge_slave_0: entered promiscuous mode [ 35.471961][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.479220][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.486392][ T3305] bridge_slave_1: entered allmulticast mode [ 35.493060][ T3305] bridge_slave_1: entered promiscuous mode [ 35.514457][ T3298] team0: Port device team_slave_0 added [ 35.529457][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.542319][ T3298] team0: Port device team_slave_1 added [ 35.549199][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.563951][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.588247][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 35.602055][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.609220][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.616347][ T3297] bridge_slave_0: entered allmulticast mode [ 35.622875][ T3297] bridge_slave_0: entered promiscuous mode [ 35.647742][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.654921][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.662228][ T3297] bridge_slave_1: entered allmulticast mode [ 35.668890][ T3297] bridge_slave_1: entered promiscuous mode [ 35.675986][ T3301] team0: Port device team_slave_0 added [ 35.681720][ T3304] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.688833][ T3304] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.696002][ T3304] bridge_slave_0: entered allmulticast mode [ 35.702708][ T3304] bridge_slave_0: entered promiscuous mode [ 35.709521][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.716498][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.742472][ T3298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.754015][ T3305] team0: Port device team_slave_0 added [ 35.765120][ T3301] team0: Port device team_slave_1 added [ 35.775144][ T3304] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.782386][ T3304] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.789553][ T3304] bridge_slave_1: entered allmulticast mode [ 35.796122][ T3304] bridge_slave_1: entered promiscuous mode [ 35.802757][ T3298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.809751][ T3298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.835680][ T3298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.847259][ T3305] team0: Port device team_slave_1 added [ 35.884965][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.894431][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 35.901558][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.927546][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 35.939157][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 35.946128][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 35.972145][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 35.986637][ T3304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 35.996242][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.003248][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.029241][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.041032][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.061427][ T3297] team0: Port device team_slave_0 added [ 36.068316][ T3304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.077693][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.084695][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.110693][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.132444][ T3297] team0: Port device team_slave_1 added [ 36.164763][ T3298] hsr_slave_0: entered promiscuous mode [ 36.171086][ T3298] hsr_slave_1: entered promiscuous mode [ 36.188265][ T3304] team0: Port device team_slave_0 added [ 36.204114][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.211261][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.237233][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.248757][ T3304] team0: Port device team_slave_1 added [ 36.261499][ T3301] hsr_slave_0: entered promiscuous mode [ 36.267632][ T3301] hsr_slave_1: entered promiscuous mode [ 36.273674][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 36.279464][ T3301] Cannot create hsr debugfs directory [ 36.289743][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.296735][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.322900][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.347737][ T3305] hsr_slave_0: entered promiscuous mode [ 36.353659][ T3305] hsr_slave_1: entered promiscuous mode [ 36.359668][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 36.365398][ T3305] Cannot create hsr debugfs directory [ 36.388139][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.395161][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.421184][ T3304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.456077][ T3304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.463127][ T3304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 36.489124][ T3304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.527873][ T3297] hsr_slave_0: entered promiscuous mode [ 36.533854][ T3297] hsr_slave_1: entered promiscuous mode [ 36.539766][ T3297] debugfs: 'hsr0' already exists in 'hsr' [ 36.545501][ T3297] Cannot create hsr debugfs directory [ 36.592441][ T3304] hsr_slave_0: entered promiscuous mode [ 36.598684][ T3304] hsr_slave_1: entered promiscuous mode [ 36.604642][ T3304] debugfs: 'hsr0' already exists in 'hsr' [ 36.610411][ T3304] Cannot create hsr debugfs directory [ 36.732931][ T3298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.741733][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.749414][ T3298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.758177][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.773604][ T3298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.782556][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.796909][ T3298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 36.805331][ T3298] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.829255][ T3301] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 36.838182][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.846277][ T3301] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 36.855247][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.862933][ T3301] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 36.871430][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.880167][ T3301] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 36.888620][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 36.919532][ T3305] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 36.928275][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 36.943923][ T3305] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 36.952887][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 36.964468][ T3305] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 36.973282][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 36.981490][ T3305] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 36.990073][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.011911][ T3297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 37.020322][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.027970][ T3297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 37.037267][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.045173][ T3297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 37.054286][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.068769][ T3297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 37.077315][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.111114][ T3304] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.119724][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 37.132690][ T3304] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.141693][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 37.149474][ T3304] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.157951][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 37.166041][ T3304] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.175250][ T3304] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 37.219934][ T3298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.235445][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.247739][ T3298] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.265365][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.272457][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.281352][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.288438][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.298822][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.316188][ T30] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.323285][ T30] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.333997][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.341114][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.353574][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.375371][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.401293][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.413856][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.427104][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.434219][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.455413][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.462611][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.471365][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.478515][ T412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.487587][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.494643][ T412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.515795][ T3304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.561604][ T3304] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.584401][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.591601][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.622478][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.629649][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.783393][ T3298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.828167][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.860162][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.875503][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.969486][ T3298] veth0_vlan: entered promiscuous mode [ 37.984373][ T3298] veth1_vlan: entered promiscuous mode [ 37.998104][ T3304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.030506][ T3301] veth0_vlan: entered promiscuous mode [ 38.043917][ T3298] veth0_macvtap: entered promiscuous mode [ 38.057470][ T3298] veth1_macvtap: entered promiscuous mode [ 38.066301][ T3301] veth1_vlan: entered promiscuous mode [ 38.087234][ T3305] veth0_vlan: entered promiscuous mode [ 38.098591][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.117003][ T3298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.136946][ T311] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.146529][ T311] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.160812][ T311] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.174953][ T311] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.187385][ T3305] veth1_vlan: entered promiscuous mode [ 38.201924][ T3301] veth0_macvtap: entered promiscuous mode [ 38.227378][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 38.227392][ T28] audit: type=1400 audit(1784254179.895:146): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.sIF0nq/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.244423][ T3304] veth0_vlan: entered promiscuous mode [ 38.267200][ T28] audit: type=1400 audit(1784254179.895:147): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 38.281096][ T3301] veth1_macvtap: entered promiscuous mode [ 38.296921][ T28] audit: type=1400 audit(1784254179.935:148): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.sIF0nq/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 38.325071][ T3304] veth1_vlan: entered promiscuous mode [ 38.335949][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.337790][ T28] audit: type=1400 audit(1784254179.935:149): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 38.359559][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.367340][ T28] audit: type=1400 audit(1784254179.935:150): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.sIF0nq/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 38.402991][ T28] audit: type=1400 audit(1784254179.935:151): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/root/syzkaller.sIF0nq/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=3904 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 38.408196][ T3298] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 38.432673][ T28] audit: type=1400 audit(1784254179.935:152): avc: denied { unmount } for pid=3298 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.454146][ T3297] veth0_vlan: entered promiscuous mode [ 38.467191][ T28] audit: type=1400 audit(1784254179.965:153): avc: denied { mounton } for pid=3298 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 38.493351][ T3304] veth0_macvtap: entered promiscuous mode [ 38.497920][ T28] audit: type=1400 audit(1784254179.965:154): avc: denied { mount } for pid=3298 comm="syz-executor" name="/" dev="gadgetfs" ino=3905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 38.516676][ T3305] veth0_macvtap: entered promiscuous mode [ 38.531479][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.540495][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.550603][ T3304] veth1_macvtap: entered promiscuous mode [ 38.557616][ T3305] veth1_macvtap: entered promiscuous mode [ 38.566178][ T28] audit: type=1400 audit(1784254180.235:155): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 38.573977][ T3297] veth1_vlan: entered promiscuous mode [ 38.596979][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.607410][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.622552][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.663737][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.673570][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.687986][ T3304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.703833][ T3297] veth0_macvtap: entered promiscuous mode [ 38.712110][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.736291][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.754187][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.764635][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.790895][ T3297] veth1_macvtap: entered promiscuous mode [ 38.798946][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.819283][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.849027][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.869836][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.898495][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.923292][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.932629][ T3502] loop0: detected capacity change from 0 to 4096 [ 38.978209][ T3502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.003073][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.021864][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.046525][ T3512] syzkaller1: entered promiscuous mode [ 39.053730][ T3512] syzkaller1: entered allmulticast mode [ 39.067377][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.076496][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.088398][ T3502] syz.0.1 (3502) used greatest stack depth: 10752 bytes left [ 39.104108][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.212580][ T3524] loop2: detected capacity change from 0 to 1024 [ 39.246604][ T3524] EXT4-fs: Ignoring removed orlov option [ 39.281604][ T3524] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 39.309552][ T3530] syz.0.12 uses obsolete (PF_INET,SOCK_PACKET) [ 39.333450][ T3538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 39.342607][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 39.351684][ T3538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15'. [ 39.360671][ T3538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 39.369572][ T3538] Zero length message leads to an empty skb [ 39.420776][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.438087][ T3536] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 40.327869][ T3609] loop0: detected capacity change from 0 to 1024 [ 40.335836][ T3609] ======================================================= [ 40.335836][ T3609] WARNING: The mand mount option has been deprecated and [ 40.335836][ T3609] and is ignored by this kernel. Remove the mand [ 40.335836][ T3609] option from the mount to silence this warning. [ 40.335836][ T3609] ======================================================= [ 40.422100][ T3609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 40.434534][ T3614] loop4: detected capacity change from 0 to 512 [ 40.443601][ T3614] EXT4-fs: Ignoring removed nobh option [ 40.449874][ T3609] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 40.471356][ T3614] ------------[ cut here ]------------ [ 40.476880][ T3614] EA inode 11 i_nlink=1026 [ 40.476905][ T3614] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.4.45/3614 [ 40.492064][ T3614] Modules linked in: [ 40.496190][ T3614] CPU: 0 UID: 0 PID: 3614 Comm: syz.4.45 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.505443][ T3614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 40.515633][ T3614] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 40.522453][ T3614] Code: 96 c5 96 ff 49 8d 7e 40 4c 8d 2d fb a3 5a 05 e8 c6 a5 b5 ff 49 8b 6e 40 4c 89 e7 e8 fa a0 b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 11 ad d9 03 90 90 90 90 90 90 90 [ 40.526579][ T3609] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.44: Freeing blocks not in datazone - block = 0, count = 16 [ 40.542245][ T3614] RSP: 0018:ffffc900022c77f8 EFLAGS: 00010246 [ 40.542337][ T3614] RAX: ffff888104848b30 RBX: ffff888107224df8 RCX: ffffffff81c29236 [ 40.542385][ T3614] RDX: 0000000000000402 RSI: 000000000000000b RDI: ffffffff871d3620 [ 40.577634][ T3614] RBP: 000000000000000b R08: 0001888107224dab R09: 0000000000000000 [ 40.585815][ T3614] R10: ffffc900022c7728 R11: 0001c900022c7728 R12: ffff888107224da8 [ 40.593916][ T3614] R13: ffffffff871d3620 R14: ffff888107224d60 R15: 0000000000000001 [ 40.602018][ T3614] FS: 00007f3696a276c0(0000) GS:ffff8882ae8cf000(0000) knlGS:0000000000000000 [ 40.611049][ T3614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.617744][ T3614] CR2: 00007ffc47199a58 CR3: 000000011ac7c000 CR4: 00000000003506f0 [ 40.625790][ T3614] Call Trace: [ 40.629179][ T3614] [ 40.632147][ T3614] ext4_xattr_inode_dec_ref_all+0x579/0x8d0 [ 40.638160][ T3614] ext4_xattr_delete_inode+0x6b5/0x790 [ 40.643750][ T3614] ext4_evict_inode+0xb18/0xdf0 [ 40.648666][ T3614] ? __pfx_ext4_evict_inode+0x10/0x10 [ 40.654133][ T3614] evict+0x2a5/0x510 [ 40.658153][ T3614] iput+0x430/0x5a0 [ 40.662250][ T3614] ext4_process_orphan+0x1a4/0x1c0 [ 40.667493][ T3614] ext4_orphan_cleanup+0x6a6/0xa10 [ 40.672765][ T3614] ? ext4_register_li_request+0x14c/0x440 [ 40.678590][ T3614] ext4_fill_super+0x33ab/0x3760 [ 40.683621][ T3614] ? set_blocksize+0x14c/0x270 [ 40.688516][ T3614] ? __pfx_ext4_fill_super+0x10/0x10 [ 40.694001][ T3614] get_tree_bdev_flags+0x291/0x300 [ 40.699174][ T3614] ? __pfx_ext4_fill_super+0x10/0x10 [ 40.704503][ T3614] get_tree_bdev+0x1f/0x30 [ 40.709029][ T3614] ext4_get_tree+0x1c/0x30 [ 40.713526][ T3614] vfs_get_tree+0x57/0x1d0 [ 40.718064][ T3614] do_new_mount+0x288/0x8d0 [ 40.722679][ T3614] path_mount+0x4ad/0xb90 [ 40.727106][ T3614] __se_sys_mount+0x28c/0x2e0 [ 40.731877][ T3614] ? restore_fpregs_from_fpstate+0x61/0x110 [ 40.737841][ T3614] __x64_sys_mount+0x67/0x80 [ 40.742491][ T3614] x64_sys_call+0x2d61/0x3020 [ 40.747272][ T3614] do_syscall_64+0x136/0x3c0 [ 40.751941][ T3614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.758156][ T3614] RIP: 0033:0x7f3697fcf0ca [ 40.762629][ T3614] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.782405][ T3614] RSP: 002b:00007f3696a26e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.790928][ T3614] RAX: ffffffffffffffda RBX: 00007f3696a26ee0 RCX: 00007f3697fcf0ca [ 40.798930][ T3614] RDX: 0000200000000180 RSI: 0000200000000140 RDI: 00007f3696a26ea0 [ 40.806962][ T3614] RBP: 0000200000000180 R08: 00007f3696a26ee0 R09: 0000000000800718 [ 40.814991][ T3614] R10: 0000000000800718 R11: 0000000000000246 R12: 0000200000000140 [ 40.823148][ T3614] R13: 00007f3696a26ea0 R14: 00000000000004a3 R15: 00002000000003c0 [ 40.831211][ T3614] [ 40.834265][ T3614] ---[ end trace 0000000000000000 ]--- [ 40.846117][ T12] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:0: bg 0: block 112: padding at end of block bitmap is not set [ 40.861405][ T12] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 40.876262][ T3614] EXT4-fs (loop4): 1 orphan inode deleted [ 40.882618][ T12] EXT4-fs (loop0): This should not happen!! Data will be lost [ 40.882618][ T12] [ 40.884594][ T3614] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.900430][ T12] EXT4-fs (loop0): Total free blocks count 0 [ 40.917282][ T12] EXT4-fs (loop0): Free/Dirty block details [ 40.928091][ T12] EXT4-fs (loop0): free_blocks=16 [ 40.938275][ T12] EXT4-fs (loop0): dirty_blocks=16 [ 40.946014][ T12] EXT4-fs (loop0): Block reservation details [ 40.953428][ T12] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 40.985427][ T3298] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 40.998627][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 41.158432][ T3626] loop1: detected capacity change from 0 to 4096 [ 41.181991][ T3626] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.346280][ T3631] loop0: detected capacity change from 0 to 4096 [ 41.364630][ T3631] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.450779][ T3633] EXT4-fs error (device loop4): ext4_find_dest_de:2050: inode #2: block 13: comm syz.4.45: bad entry in directory: directory entry overrun - offset=76, inode=0, rec_len=1024, size=1024 fake=0 [ 41.479767][ T3298] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.491896][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.734754][ T3305] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.782690][ T2982] ================================================================== [ 41.790832][ T2982] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 41.798764][ T2982] [ 41.801108][ T2982] write to 0xffff888105dc8900 of 4 bytes by task 3286 on cpu 0: [ 41.808751][ T2982] d_make_discardable+0x4f/0x90 [ 41.813643][ T2982] simple_unlink+0x68/0x80 [ 41.818093][ T2982] shmem_unlink+0x12d/0x140 [ 41.822637][ T2982] vfs_unlink+0x1c3/0x490 [ 41.826995][ T2982] filename_unlinkat+0x1dc/0x410 [ 41.831960][ T2982] __se_sys_unlink+0x2b/0xe0 [ 41.836577][ T2982] __x64_sys_unlink+0x1f/0x30 [ 41.841289][ T2982] x64_sys_call+0x2eb6/0x3020 [ 41.845999][ T2982] do_syscall_64+0x136/0x3c0 [ 41.850619][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.856548][ T2982] [ 41.858896][ T2982] read to 0xffff888105dc8900 of 4 bytes by task 2982 on cpu 1: [ 41.866457][ T2982] step_into_slowpath+0xea/0x4c0 [ 41.871437][ T2982] path_lookupat+0x2eb/0x4c0 [ 41.876063][ T2982] filename_lookup+0x18f/0x390 [ 41.880869][ T2982] do_readlinkat+0x74/0x2f0 [ 41.885403][ T2982] __x64_sys_readlink+0x47/0x60 [ 41.890287][ T2982] x64_sys_call+0x2b51/0x3020 [ 41.894995][ T2982] do_syscall_64+0x136/0x3c0 [ 41.899605][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.905526][ T2982] [ 41.907877][ T2982] value changed: 0x08300080 -> 0x00004080 [ 41.913616][ T2982] [ 41.915984][ T2982] Reported by Kernel Concurrency Sanitizer on: [ 41.922154][ T2982] CPU: 1 UID: 0 PID: 2982 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(lazy) [ 41.932600][ T2982] Tainted: [W]=WARN [ 41.936418][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 41.946494][ T2982] ==================================================================